Traffic Trace Info
DumpFile: 200904021615.dump
FileSize: 1359.02MB
Id: 200904021615
StartTime: Thu Apr 2 16:15:01 2009
EndTime: Thu Apr 2 16:30:00 2009
TotalTime: 899.51 seconds
TotalCapSize: 1059.04MB CapLen: 96 bytes
# of packets: 19646323 (12976.94MB)
AvgRate: 121.03Mbps stddev:17.24M
IP flow (unique src/dst pair) Information
# of flows: 861706 (avg. 22.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 2.5% 2.5% 1.6% 1.5% 1.4% 1.2% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 516264
Top 10 bandwidth usage (bytes/total in %):
19.4% 14.3% 7.3% 5.5% 5.0% 4.5% 2.7% 2.6% 2.4% 2.0%
# of IPv6 addresses: 1702
Top 10 bandwidth usage (bytes/total in %):
18.7% 15.1% 15.1% 12.4% 9.4% 9.4% 8.1% 7.3% 6.4% 5.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021615.pktlen.png)
detailed numbers
[ 32- 63]: 5208025
[ 64- 127]: 4225418
[ 128- 255]: 744694
[ 256- 511]: 347992
[ 512- 1023]: 569792
[ 1024- 2047]: 8550402
Protocol Breakdown
![[protocol breakdown chart]](200904021615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19646323 (100.00%) 13607303856 (100.00%) 692.61
ip 19616390 ( 99.85%) 13598959173 ( 99.94%) 693.24
tcp 16104556 ( 81.97%) 12446958890 ( 91.47%) 772.88
http(s) 7415954 ( 37.75%) 9665877847 ( 71.03%) 1303.39
http(c) 5509193 ( 28.04%) 1343318483 ( 9.87%) 243.83
squid 406761 ( 2.07%) 249192853 ( 1.83%) 612.63
smtp 418987 ( 2.13%) 108412843 ( 0.80%) 258.75
ftp 65672 ( 0.33%) 29179093 ( 0.21%) 444.32
pop3 12381 ( 0.06%) 6133789 ( 0.05%) 495.42
imap 7637 ( 0.04%) 5587623 ( 0.04%) 731.65
telnet 16677 ( 0.08%) 3927423 ( 0.03%) 235.50
ssh 196804 ( 1.00%) 31968957 ( 0.23%) 162.44
dns 15210 ( 0.08%) 1713151 ( 0.01%) 112.63
bgp 161 ( 0.00%) 65915 ( 0.00%) 409.41
napster 32 ( 0.00%) 3379 ( 0.00%) 105.59
realaud 26 ( 0.00%) 2921 ( 0.00%) 112.35
rtsp 174477 ( 0.89%) 10915014 ( 0.08%) 62.56
icecast 11121 ( 0.06%) 7948950 ( 0.06%) 714.77
hotline 7 ( 0.00%) 584 ( 0.00%) 83.43
other 1853454 ( 9.43%) 982709945 ( 7.22%) 530.20
udp 2915502 ( 14.84%) 1089118207 ( 8.00%) 373.56
dns 1331777 ( 6.78%) 293597633 ( 2.16%) 220.46
realaud 1825 ( 0.01%) 111726 ( 0.00%) 61.22
halflif 39 ( 0.00%) 3747 ( 0.00%) 96.08
starcra 74 ( 0.00%) 14696 ( 0.00%) 198.59
everque 60 ( 0.00%) 11858 ( 0.00%) 197.63
unreal 28 ( 0.00%) 4529 ( 0.00%) 161.75
quake 19 ( 0.00%) 1833 ( 0.00%) 96.47
cuseeme 8 ( 0.00%) 1282 ( 0.00%) 160.25
other 1581537 ( 8.05%) 795246106 ( 5.84%) 502.83
icmp 491018 ( 2.50%) 43493751 ( 0.32%) 88.58
ipip 314 ( 0.00%) 39144 ( 0.00%) 124.66
ipsec 277 ( 0.00%) 47254 ( 0.00%) 170.59
ip6 27659 ( 0.14%) 5543459 ( 0.04%) 200.42
other 77064 ( 0.39%) 13758468 ( 0.10%) 178.53
frag 47469 ( 0.24%) 51717630 ( 0.38%) 1089.50
ip6 29933 ( 0.15%) 8344683 ( 0.06%) 278.78
tcp6 9355 ( 0.05%) 4946934 ( 0.04%) 528.80
http(s) 2319 ( 0.01%) 1824681 ( 0.01%) 786.84
http(c) 3904 ( 0.02%) 797782 ( 0.01%) 204.35
smtp 287 ( 0.00%) 125527 ( 0.00%) 437.38
ftp 82 ( 0.00%) 15412 ( 0.00%) 187.95
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
dns 4 ( 0.00%) 457 ( 0.00%) 114.25
bgp 362 ( 0.00%) 30450 ( 0.00%) 84.12
other 2395 ( 0.01%) 2152400 ( 0.02%) 898.71
udp6 15322 ( 0.08%) 2402689 ( 0.02%) 156.81
dns 14113 ( 0.07%) 2208871 ( 0.02%) 156.51
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
other 1208 ( 0.01%) 193707 ( 0.00%) 160.35
icmp6 4786 ( 0.02%) 573279 ( 0.00%) 119.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 440 ( 0.00%) 417701 ( 0.00%) 949.32
tcpdump file: 200904021615.dump.gz (478.24 MB)