Traffic Trace Info
DumpFile: 200904021715.dump
FileSize: 1396.31MB
Id: 200904021715
StartTime: Thu Apr 2 17:15:01 2009
EndTime: Thu Apr 2 17:30:00 2009
TotalTime: 899.43 seconds
TotalCapSize: 1088.91MB CapLen: 96 bytes
# of packets: 20133512 (12878.33MB)
AvgRate: 120.12Mbps stddev:11.17M
IP flow (unique src/dst pair) Information
# of flows: 910369 (avg. 22.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.5% 1.4% 1.3% 1.2% 1.2% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 585488
Top 10 bandwidth usage (bytes/total in %):
20.0% 17.0% 6.4% 5.5% 5.3% 3.5% 3.1% 2.8% 2.2% 2.1%
# of IPv6 addresses: 1723
Top 10 bandwidth usage (bytes/total in %):
18.4% 12.7% 12.6% 12.5% 10.2% 10.2% 8.3% 6.3% 6.3% 5.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021715.pktlen.png)
detailed numbers
[ 32- 63]: 5433360
[ 64- 127]: 4321839
[ 128- 255]: 1058960
[ 256- 511]: 386122
[ 512- 1023]: 623108
[ 1024- 2047]: 8310123
Protocol Breakdown
![[protocol breakdown chart]](200904021715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20133512 (100.00%) 13503909872 (100.00%) 670.72
ip 20081256 ( 99.74%) 13493706966 ( 99.92%) 671.96
tcp 16750399 ( 83.20%) 12641955403 ( 93.62%) 754.73
http(s) 8004528 ( 39.76%) 10685818674 ( 79.13%) 1334.97
http(c) 5613769 ( 27.88%) 733224496 ( 5.43%) 130.61
squid 235510 ( 1.17%) 141194400 ( 1.05%) 599.53
smtp 325640 ( 1.62%) 93895166 ( 0.70%) 288.34
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 69532 ( 0.35%) 25810237 ( 0.19%) 371.20
pop3 8298 ( 0.04%) 4106290 ( 0.03%) 494.85
imap 4336 ( 0.02%) 430222 ( 0.00%) 99.22
telnet 19830 ( 0.10%) 5215222 ( 0.04%) 263.00
ssh 470558 ( 2.34%) 54980214 ( 0.41%) 116.84
dns 18155 ( 0.09%) 1873332 ( 0.01%) 103.19
bgp 147 ( 0.00%) 52253 ( 0.00%) 355.46
napster 1462 ( 0.01%) 1201907 ( 0.01%) 822.10
realaud 13 ( 0.00%) 962 ( 0.00%) 74.00
rtsp 94529 ( 0.47%) 6107432 ( 0.05%) 64.61
icecast 756 ( 0.00%) 127660 ( 0.00%) 168.86
hotline 1 ( 0.00%) 74 ( 0.00%) 74.00
other 1883320 ( 9.35%) 887915962 ( 6.58%) 471.46
udp 2414907 ( 11.99%) 741732642 ( 5.49%) 307.15
dns 1312968 ( 6.52%) 294040409 ( 2.18%) 223.95
realaud 2761 ( 0.01%) 166345 ( 0.00%) 60.25
halflif 37 ( 0.00%) 6352 ( 0.00%) 171.68
starcra 65 ( 0.00%) 12992 ( 0.00%) 199.88
everque 59 ( 0.00%) 14224 ( 0.00%) 241.08
unreal 15 ( 0.00%) 2185 ( 0.00%) 145.67
quake 22 ( 0.00%) 2206 ( 0.00%) 100.27
cuseeme 8 ( 0.00%) 1264 ( 0.00%) 158.00
other 1098825 ( 5.46%) 447346597 ( 3.31%) 407.11
icmp 766594 ( 3.81%) 71380773 ( 0.53%) 93.11
ipip 342 ( 0.00%) 42712 ( 0.00%) 124.89
ipsec 275 ( 0.00%) 46986 ( 0.00%) 170.86
ip6 44644 ( 0.22%) 17144466 ( 0.13%) 384.03
other 104095 ( 0.52%) 21403984 ( 0.16%) 205.62
frag 47104 ( 0.23%) 52632805 ( 0.39%) 1117.37
ip6 52256 ( 0.26%) 10202906 ( 0.08%) 195.25
tcp6 30088 ( 0.15%) 6597447 ( 0.05%) 219.27
http(s) 2861 ( 0.01%) 2308056 ( 0.02%) 806.73
http(c) 23721 ( 0.12%) 2409074 ( 0.02%) 101.56
smtp 1129 ( 0.01%) 437940 ( 0.00%) 387.90
dns 1 ( 0.00%) 86 ( 0.00%) 86.00
bgp 368 ( 0.00%) 31805 ( 0.00%) 86.43
other 2008 ( 0.01%) 1410486 ( 0.01%) 702.43
udp6 16596 ( 0.08%) 2584412 ( 0.02%) 155.72
dns 15376 ( 0.08%) 2395695 ( 0.02%) 155.81
halflif 1 ( 0.00%) 98 ( 0.00%) 98.00
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 1218 ( 0.01%) 188507 ( 0.00%) 154.77
icmp6 5155 ( 0.03%) 655204 ( 0.00%) 127.10
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 387 ( 0.00%) 361763 ( 0.00%) 934.79
tcpdump file: 200904021715.dump.gz (499.69 MB)