Traffic Trace Info
DumpFile: 200904021700.dump
FileSize: 1498.05MB
Id: 200904021700
StartTime: Thu Apr 2 17:00:01 2009
EndTime: Thu Apr 2 17:15:01 2009
TotalTime: 899.90 seconds
TotalCapSize: 1168.39MB CapLen: 96 bytes
# of packets: 21592932 (14544.14MB)
AvgRate: 135.57Mbps stddev:17.68M
IP flow (unique src/dst pair) Information
# of flows: 782506 (avg. 27.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.9% 2.1% 2.0% 1.8% 1.3% 1.1% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 488066
Top 10 bandwidth usage (bytes/total in %):
21.6% 21.2% 8.0% 5.6% 4.7% 3.8% 3.4% 2.5% 2.4% 2.2%
# of IPv6 addresses: 1943
Top 10 bandwidth usage (bytes/total in %):
27.2% 21.9% 15.2% 13.9% 13.5% 9.1% 6.7% 5.9% 4.4% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021700.pktlen.png)
detailed numbers
[ 32- 63]: 5662419
[ 64- 127]: 4678442
[ 128- 255]: 801288
[ 256- 511]: 358880
[ 512- 1023]: 513945
[ 1024- 2047]: 9577958
Protocol Breakdown
![[protocol breakdown chart]](200904021700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21592932 (100.00%) 15250631028 (100.00%) 706.28
ip 21555733 ( 99.83%) 15241265363 ( 99.94%) 707.06
tcp 18121571 ( 83.92%) 14465381011 ( 94.85%) 798.24
http(s) 8838631 ( 40.93%) 11927868699 ( 78.21%) 1349.52
http(c) 5980884 ( 27.70%) 828238191 ( 5.43%) 138.48
squid 552391 ( 2.56%) 481277504 ( 3.16%) 871.26
smtp 301951 ( 1.40%) 90702209 ( 0.59%) 300.39
ftp 76671 ( 0.36%) 37089367 ( 0.24%) 483.75
pop3 10355 ( 0.05%) 5256135 ( 0.03%) 507.59
imap 3516 ( 0.02%) 338656 ( 0.00%) 96.32
telnet 16686 ( 0.08%) 3483477 ( 0.02%) 208.77
ssh 192323 ( 0.89%) 32149546 ( 0.21%) 167.16
dns 20579 ( 0.10%) 3249189 ( 0.02%) 157.89
bgp 158 ( 0.00%) 57980 ( 0.00%) 366.96
napster 83 ( 0.00%) 8162 ( 0.00%) 98.34
realaud 26 ( 0.00%) 1790 ( 0.00%) 68.85
rtsp 233240 ( 1.08%) 14574029 ( 0.10%) 62.49
icecast 7087 ( 0.03%) 4399167 ( 0.03%) 620.74
hotline 9 ( 0.00%) 770 ( 0.00%) 85.56
other 1886979 ( 8.74%) 1036686020 ( 6.80%) 549.39
udp 2302842 ( 10.66%) 660735247 ( 4.33%) 286.92
dns 1227111 ( 5.68%) 245482842 ( 1.61%) 200.05
realaud 1886 ( 0.01%) 119545 ( 0.00%) 63.39
halflif 35 ( 0.00%) 3243 ( 0.00%) 92.66
starcra 55 ( 0.00%) 11221 ( 0.00%) 204.02
everque 64 ( 0.00%) 11154 ( 0.00%) 174.28
unreal 19 ( 0.00%) 2179 ( 0.00%) 114.68
quake 22 ( 0.00%) 1787 ( 0.00%) 81.23
cuseeme 11 ( 0.00%) 1826 ( 0.00%) 166.00
other 1073411 ( 4.97%) 414892081 ( 2.72%) 386.52
icmp 1001129 ( 4.64%) 81232897 ( 0.53%) 81.14
ipip 327 ( 0.00%) 40426 ( 0.00%) 123.63
ipsec 272 ( 0.00%) 46528 ( 0.00%) 171.06
ip6 31872 ( 0.15%) 7040148 ( 0.05%) 220.89
other 97720 ( 0.45%) 26789106 ( 0.18%) 274.14
frag 45161 ( 0.21%) 50426577 ( 0.33%) 1116.60
ip6 37199 ( 0.17%) 9365665 ( 0.06%) 251.77
tcp6 14747 ( 0.07%) 5934893 ( 0.04%) 402.45
http(s) 2724 ( 0.01%) 1951705 ( 0.01%) 716.48
http(c) 8238 ( 0.04%) 1098292 ( 0.01%) 133.32
smtp 461 ( 0.00%) 172167 ( 0.00%) 373.46
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 4 ( 0.00%) 459 ( 0.00%) 114.75
bgp 389 ( 0.00%) 40159 ( 0.00%) 103.24
other 2929 ( 0.01%) 2671939 ( 0.02%) 912.24
udp6 17427 ( 0.08%) 2803514 ( 0.02%) 160.87
dns 15578 ( 0.07%) 2398654 ( 0.02%) 153.98
other 1849 ( 0.01%) 404860 ( 0.00%) 218.96
icmp6 4986 ( 0.02%) 619320 ( 0.00%) 124.21
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 8 ( 0.00%) 3722 ( 0.00%) 465.25
tcpdump file: 200904021700.dump.gz (521.12 MB)