Traffic Trace Info
DumpFile: 200904021645.dump
FileSize: 1327.70MB
Id: 200904021645
StartTime: Thu Apr 2 16:45:00 2009
EndTime: Thu Apr 2 17:00:01 2009
TotalTime: 900.23 seconds
TotalCapSize: 1035.63MB CapLen: 96 bytes
# of packets: 19131188 (12633.87MB)
AvgRate: 117.72Mbps stddev:13.02M
IP flow (unique src/dst pair) Information
# of flows: 874485 (avg. 21.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.7% 2.9% 1.8% 1.5% 1.3% 1.3% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 557310
Top 10 bandwidth usage (bytes/total in %):
21.0% 13.7% 6.8% 6.8% 5.6% 4.3% 4.2% 2.4% 2.3% 1.9%
# of IPv6 addresses: 1856
Top 10 bandwidth usage (bytes/total in %):
27.9% 23.3% 16.0% 14.2% 13.8% 8.1% 7.3% 7.0% 6.2% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021645.pktlen.png)
detailed numbers
[ 32- 63]: 5121526
[ 64- 127]: 4045468
[ 128- 255]: 874931
[ 256- 511]: 351772
[ 512- 1023]: 545620
[ 1024- 2047]: 8191871
Protocol Breakdown
![[protocol breakdown chart]](200904021645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19131188 (100.00%) 13247571505 (100.00%) 692.46
ip 19099144 ( 99.83%) 13238307440 ( 99.93%) 693.14
tcp 16081476 ( 84.06%) 12556965770 ( 94.79%) 780.83
http(s) 7354250 ( 38.44%) 9786296969 ( 73.87%) 1330.70
http(c) 5504167 ( 28.77%) 1056685484 ( 7.98%) 191.98
squid 630163 ( 3.29%) 491006709 ( 3.71%) 779.17
smtp 316674 ( 1.66%) 97295666 ( 0.73%) 307.24
ftp 77557 ( 0.41%) 38290293 ( 0.29%) 493.71
pop3 16251 ( 0.08%) 7043313 ( 0.05%) 433.41
imap 9528 ( 0.05%) 6021748 ( 0.05%) 632.01
telnet 17644 ( 0.09%) 3624948 ( 0.03%) 205.45
ssh 149642 ( 0.78%) 25393966 ( 0.19%) 169.70
dns 18161 ( 0.09%) 1917054 ( 0.01%) 105.56
bgp 165 ( 0.00%) 72830 ( 0.00%) 441.39
napster 74 ( 0.00%) 6867 ( 0.00%) 92.80
realaud 13 ( 0.00%) 950 ( 0.00%) 73.08
rtsp 135432 ( 0.71%) 8452064 ( 0.06%) 62.41
icecast 12339 ( 0.06%) 8705573 ( 0.07%) 705.53
hotline 6 ( 0.00%) 704 ( 0.00%) 117.33
other 1839383 ( 9.61%) 1026148966 ( 7.75%) 557.88
udp 2203509 ( 11.52%) 597839723 ( 4.51%) 271.31
dns 1238103 ( 6.47%) 242707538 ( 1.83%) 196.03
realaud 1833 ( 0.01%) 112308 ( 0.00%) 61.27
halflif 21 ( 0.00%) 2174 ( 0.00%) 103.52
starcra 62 ( 0.00%) 11391 ( 0.00%) 183.73
everque 51 ( 0.00%) 9365 ( 0.00%) 183.63
unreal 12 ( 0.00%) 1566 ( 0.00%) 130.50
quake 18 ( 0.00%) 1519 ( 0.00%) 84.39
cuseeme 14 ( 0.00%) 1476 ( 0.00%) 105.43
other 963190 ( 5.03%) 354862825 ( 2.68%) 368.42
icmp 675561 ( 3.53%) 58190620 ( 0.44%) 86.14
ipip 318 ( 0.00%) 38628 ( 0.00%) 121.47
ipsec 272 ( 0.00%) 46392 ( 0.00%) 170.56
ip6 29648 ( 0.15%) 5600798 ( 0.04%) 188.91
other 108360 ( 0.57%) 19625509 ( 0.15%) 181.11
frag 44795 ( 0.23%) 50293479 ( 0.38%) 1122.75
ip6 32044 ( 0.17%) 9264065 ( 0.07%) 289.10
tcp6 9929 ( 0.05%) 5613583 ( 0.04%) 565.37
http(s) 2527 ( 0.01%) 1975449 ( 0.01%) 781.74
http(c) 4027 ( 0.02%) 820369 ( 0.01%) 203.72
smtp 225 ( 0.00%) 80835 ( 0.00%) 359.27
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 379 ( 0.00%) 32632 ( 0.00%) 86.10
other 2769 ( 0.01%) 2704126 ( 0.02%) 976.57
udp6 16326 ( 0.09%) 2636998 ( 0.02%) 161.52
dns 14916 ( 0.08%) 2327062 ( 0.02%) 156.01
halflif 1 ( 0.00%) 103 ( 0.00%) 103.00
other 1409 ( 0.01%) 309833 ( 0.00%) 219.90
icmp6 5400 ( 0.03%) 667536 ( 0.01%) 123.62
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 359 ( 0.00%) 341868 ( 0.00%) 952.28
tcpdump file: 200904021645.dump.gz (471.03 MB)