Traffic Trace Info
DumpFile: 200904021730.dump
FileSize: 1397.78MB
Id: 200904021730
StartTime: Thu Apr 2 17:30:00 2009
EndTime: Thu Apr 2 17:45:00 2009
TotalTime: 900.19 seconds
TotalCapSize: 1090.89MB CapLen: 96 bytes
# of packets: 20100950 (12696.06MB)
AvgRate: 118.31Mbps stddev:13.06M
IP flow (unique src/dst pair) Information
# of flows: 1052020 (avg. 19.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.4% 1.4% 1.4% 1.4% 1.3% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 653720
Top 10 bandwidth usage (bytes/total in %):
17.3% 17.3% 6.1% 5.0% 5.0% 2.8% 2.8% 2.7% 2.6% 1.9%
# of IPv6 addresses: 1948
Top 10 bandwidth usage (bytes/total in %):
28.1% 28.1% 15.2% 10.3% 9.8% 9.6% 8.3% 8.3% 5.9% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021730.pktlen.png)
detailed numbers
[ 32- 63]: 5035448
[ 64- 127]: 4801089
[ 128- 255]: 1131032
[ 256- 511]: 367362
[ 512- 1023]: 573864
[ 1024- 2047]: 8192155
Protocol Breakdown
![[protocol breakdown chart]](200904021730.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20100950 (100.00%) 13312779582 (100.00%) 662.30
ip 20019900 ( 99.60%) 13299486254 ( 99.90%) 664.31
tcp 16364971 ( 81.41%) 12378878699 ( 92.98%) 756.43
http(s) 7527859 ( 37.45%) 9989567631 ( 75.04%) 1327.01
http(c) 5072162 ( 25.23%) 805070650 ( 6.05%) 158.72
squid 287001 ( 1.43%) 219843299 ( 1.65%) 766.00
smtp 353665 ( 1.76%) 115924110 ( 0.87%) 327.78
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 76035 ( 0.38%) 32324660 ( 0.24%) 425.13
pop3 10711 ( 0.05%) 6060880 ( 0.05%) 565.86
imap 5094 ( 0.03%) 508155 ( 0.00%) 99.76
telnet 74445 ( 0.37%) 7997117 ( 0.06%) 107.42
ssh 708793 ( 3.53%) 83792852 ( 0.63%) 118.22
dns 23274 ( 0.12%) 7218002 ( 0.05%) 310.13
bgp 137 ( 0.00%) 48972 ( 0.00%) 357.46
napster 1504 ( 0.01%) 1149946 ( 0.01%) 764.59
realaud 53 ( 0.00%) 4826 ( 0.00%) 91.06
rtsp 137672 ( 0.68%) 8578422 ( 0.06%) 62.31
icecast 593 ( 0.00%) 54208 ( 0.00%) 91.41
hotline 13 ( 0.00%) 1386 ( 0.00%) 106.62
other 2085948 ( 10.38%) 1100732863 ( 8.27%) 527.69
udp 2588057 ( 12.88%) 807203898 ( 6.06%) 311.90
dns 1280807 ( 6.37%) 286158252 ( 2.15%) 223.42
realaud 2759 ( 0.01%) 167859 ( 0.00%) 60.84
halflif 27 ( 0.00%) 3207 ( 0.00%) 118.78
starcra 67 ( 0.00%) 14962 ( 0.00%) 223.31
everque 70 ( 0.00%) 12741 ( 0.00%) 182.01
unreal 12 ( 0.00%) 1479 ( 0.00%) 123.25
quake 20 ( 0.00%) 1611 ( 0.00%) 80.55
cuseeme 12 ( 0.00%) 1731 ( 0.00%) 144.25
other 1304146 ( 6.49%) 520720799 ( 3.91%) 399.28
icmp 967317 ( 4.81%) 91154277 ( 0.68%) 94.23
ipip 311 ( 0.00%) 39002 ( 0.00%) 125.41
ipsec 278 ( 0.00%) 47444 ( 0.00%) 170.66
ip6 30795 ( 0.15%) 7273612 ( 0.05%) 236.19
other 68171 ( 0.34%) 14889322 ( 0.11%) 218.41
frag 43870 ( 0.22%) 49072426 ( 0.37%) 1118.59
ip6 81050 ( 0.40%) 13293328 ( 0.10%) 164.01
tcp6 58801 ( 0.29%) 9840013 ( 0.07%) 167.34
http(s) 3593 ( 0.02%) 3261397 ( 0.02%) 907.71
http(c) 52243 ( 0.26%) 4914122 ( 0.04%) 94.06
squid 14 ( 0.00%) 1184 ( 0.00%) 84.57
smtp 656 ( 0.00%) 222582 ( 0.00%) 339.30
bgp 381 ( 0.00%) 33420 ( 0.00%) 87.72
other 1914 ( 0.01%) 1407308 ( 0.01%) 735.27
udp6 17055 ( 0.08%) 2758066 ( 0.02%) 161.72
dns 15227 ( 0.08%) 2357969 ( 0.02%) 154.85
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1827 ( 0.01%) 399990 ( 0.00%) 218.93
icmp6 5084 ( 0.03%) 619133 ( 0.00%) 121.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 80 ( 0.00%) 72036 ( 0.00%) 900.45
tcpdump file: 200904021730.dump.gz (501.97 MB)