Traffic Trace Info
DumpFile: 200904021630.dump
FileSize: 1334.08MB
Id: 200904021630
StartTime: Thu Apr 2 16:30:00 2009
EndTime: Thu Apr 2 16:45:00 2009
TotalTime: 900.22 seconds
TotalCapSize: 1039.89MB CapLen: 96 bytes
# of packets: 19263983 (12490.70MB)
AvgRate: 116.40Mbps stddev:14.10M
IP flow (unique src/dst pair) Information
# of flows: 809249 (avg. 23.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.3% 1.9% 1.6% 1.5% 1.3% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 501177
Top 10 bandwidth usage (bytes/total in %):
22.2% 12.5% 8.6% 4.9% 2.5% 2.5% 2.4% 2.4% 2.3% 2.2%
# of IPv6 addresses: 1949
Top 10 bandwidth usage (bytes/total in %):
25.2% 17.3% 15.8% 15.6% 8.8% 8.1% 8.1% 7.9% 7.0% 5.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021630.pktlen.png)
detailed numbers
[ 32- 63]: 5158382
[ 64- 127]: 4214582
[ 128- 255]: 796289
[ 256- 511]: 369208
[ 512- 1023]: 547641
[ 1024- 2047]: 8177881
Protocol Breakdown
![[protocol breakdown chart]](200904021630.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19263983 (100.00%) 13097447448 (100.00%) 679.89
ip 19232938 ( 99.84%) 13089355510 ( 99.94%) 680.57
tcp 15817794 ( 82.11%) 12062113958 ( 92.10%) 762.57
http(s) 7157381 ( 37.15%) 9354887430 ( 71.43%) 1307.03
http(c) 5546459 ( 28.79%) 1239250085 ( 9.46%) 223.43
squid 444214 ( 2.31%) 353168998 ( 2.70%) 795.04
smtp 349735 ( 1.82%) 122252685 ( 0.93%) 349.56
ftp 53075 ( 0.28%) 20880753 ( 0.16%) 393.42
pop3 18709 ( 0.10%) 9891614 ( 0.08%) 528.71
imap 3723 ( 0.02%) 720446 ( 0.01%) 193.51
telnet 18855 ( 0.10%) 4846746 ( 0.04%) 257.05
ssh 153690 ( 0.80%) 22371699 ( 0.17%) 145.56
dns 17543 ( 0.09%) 3838684 ( 0.03%) 218.82
bgp 163 ( 0.00%) 63962 ( 0.00%) 392.40
napster 31 ( 0.00%) 2689 ( 0.00%) 86.74
realaud 29 ( 0.00%) 2016 ( 0.00%) 69.52
rtsp 280962 ( 1.46%) 17333473 ( 0.13%) 61.69
icecast 11848 ( 0.06%) 8187726 ( 0.06%) 691.06
hotline 28 ( 0.00%) 2629 ( 0.00%) 93.89
other 1761349 ( 9.14%) 904412323 ( 6.91%) 513.48
udp 2640362 ( 13.71%) 948039968 ( 7.24%) 359.06
dns 1333033 ( 6.92%) 269186648 ( 2.06%) 201.94
realaud 1828 ( 0.01%) 111893 ( 0.00%) 61.21
halflif 371 ( 0.00%) 160366 ( 0.00%) 432.25
starcra 95 ( 0.00%) 18804 ( 0.00%) 197.94
everque 71 ( 0.00%) 12817 ( 0.00%) 180.52
unreal 18 ( 0.00%) 3428 ( 0.00%) 190.44
quake 28 ( 0.00%) 8003 ( 0.00%) 285.82
cuseeme 6 ( 0.00%) 773 ( 0.00%) 128.83
other 1304766 ( 6.77%) 678415351 ( 5.18%) 519.95
icmp 648958 ( 3.37%) 54318743 ( 0.41%) 83.70
ipip 334 ( 0.00%) 42118 ( 0.00%) 126.10
ipsec 276 ( 0.00%) 47088 ( 0.00%) 170.61
ip6 29731 ( 0.15%) 5826433 ( 0.04%) 195.97
other 95483 ( 0.50%) 18967202 ( 0.14%) 198.64
frag 45047 ( 0.23%) 49921515 ( 0.38%) 1108.21
ip6 31045 ( 0.16%) 8091938 ( 0.06%) 260.65
tcp6 9779 ( 0.05%) 4778012 ( 0.04%) 488.60
http(s) 2744 ( 0.01%) 2301723 ( 0.02%) 838.82
http(c) 4323 ( 0.02%) 823299 ( 0.01%) 190.45
smtp 422 ( 0.00%) 174472 ( 0.00%) 413.44
ftp 24 ( 0.00%) 4349 ( 0.00%) 181.21
dns 17 ( 0.00%) 1925 ( 0.00%) 113.24
bgp 382 ( 0.00%) 33115 ( 0.00%) 86.69
other 1867 ( 0.01%) 1439129 ( 0.01%) 770.82
udp6 16387 ( 0.09%) 2704896 ( 0.02%) 165.06
dns 14574 ( 0.08%) 2293932 ( 0.02%) 157.40
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1812 ( 0.01%) 410858 ( 0.00%) 226.74
icmp6 4813 ( 0.02%) 574353 ( 0.00%) 119.33
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 36 ( 0.00%) 30597 ( 0.00%) 849.92
tcpdump file: 200904021630.dump.gz (475.60 MB)