Traffic Trace Info
DumpFile: 200904021745.dump
FileSize: 1367.82MB
Id: 200904021745
StartTime: Thu Apr 2 17:45:00 2009
EndTime: Thu Apr 2 18:00:01 2009
TotalTime: 900.59 seconds
TotalCapSize: 1067.70MB CapLen: 96 bytes
# of packets: 19658897 (12599.85MB)
AvgRate: 117.36Mbps stddev:11.66M
IP flow (unique src/dst pair) Information
# of flows: 930750 (avg. 21.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.8% 1.6% 1.3% 1.3% 1.3% 1.2% 1.2% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 586498
Top 10 bandwidth usage (bytes/total in %):
22.2% 16.4% 6.2% 5.7% 4.2% 3.4% 2.9% 2.4% 1.9% 1.6%
# of IPv6 addresses: 1905
Top 10 bandwidth usage (bytes/total in %):
19.1% 18.4% 18.3% 13.1% 12.1% 10.7% 10.7% 6.5% 6.0% 5.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021745.pktlen.png)
detailed numbers
[ 32- 63]: 4504042
[ 64- 127]: 4967624
[ 128- 255]: 1119852
[ 256- 511]: 371362
[ 512- 1023]: 545289
[ 1024- 2047]: 8150728
Protocol Breakdown
![[protocol breakdown chart]](200904021745.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19658897 (100.00%) 13211902537 (100.00%) 672.06
ip 19583444 ( 99.62%) 13200092801 ( 99.91%) 674.04
tcp 15899483 ( 80.88%) 12280185429 ( 92.95%) 772.36
http(s) 7676679 ( 39.05%) 10237599753 ( 77.49%) 1333.60
http(c) 4670835 ( 23.76%) 585670788 ( 4.43%) 125.39
squid 268470 ( 1.37%) 191508026 ( 1.45%) 713.33
smtp 343879 ( 1.75%) 136881558 ( 1.04%) 398.05
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 65321 ( 0.33%) 17396181 ( 0.13%) 266.32
pop3 9395 ( 0.05%) 7022441 ( 0.05%) 747.47
imap 4796 ( 0.02%) 540415 ( 0.00%) 112.68
telnet 19870 ( 0.10%) 6593925 ( 0.05%) 331.85
ssh 717914 ( 3.65%) 85923888 ( 0.65%) 119.69
dns 19388 ( 0.10%) 2691819 ( 0.02%) 138.84
bgp 159 ( 0.00%) 59948 ( 0.00%) 377.03
napster 142 ( 0.00%) 12738 ( 0.00%) 89.70
realaud 41 ( 0.00%) 5538 ( 0.00%) 135.07
rtsp 58775 ( 0.30%) 3793395 ( 0.03%) 64.54
icecast 533 ( 0.00%) 47649 ( 0.00%) 89.40
hotline 18 ( 0.00%) 2025 ( 0.00%) 112.50
other 2043216 ( 10.39%) 1004432222 ( 7.60%) 491.59
udp 2587833 ( 13.16%) 806025564 ( 6.10%) 311.47
dns 1253421 ( 6.38%) 273604875 ( 2.07%) 218.29
realaud 43996 ( 0.22%) 20579612 ( 0.16%) 467.76
halflif 36 ( 0.00%) 4258 ( 0.00%) 118.28
starcra 81 ( 0.00%) 16510 ( 0.00%) 203.83
everque 74 ( 0.00%) 13275 ( 0.00%) 179.39
unreal 24 ( 0.00%) 3028 ( 0.00%) 126.17
quake 13 ( 0.00%) 1451 ( 0.00%) 111.62
cuseeme 7 ( 0.00%) 1124 ( 0.00%) 160.57
other 1290016 ( 6.56%) 511654069 ( 3.87%) 396.63
icmp 985334 ( 5.01%) 90513652 ( 0.69%) 91.86
ipip 344 ( 0.00%) 42464 ( 0.00%) 123.44
ipsec 277 ( 0.00%) 47198 ( 0.00%) 170.39
ip6 29027 ( 0.15%) 4923333 ( 0.04%) 169.61
other 81146 ( 0.41%) 18355161 ( 0.14%) 226.20
frag 45808 ( 0.23%) 50976039 ( 0.39%) 1112.82
ip6 75453 ( 0.38%) 11809736 ( 0.09%) 156.52
tcp6 54298 ( 0.28%) 8432993 ( 0.06%) 155.31
http(s) 2933 ( 0.01%) 2057822 ( 0.02%) 701.61
http(c) 48332 ( 0.25%) 4454054 ( 0.03%) 92.16
squid 9 ( 0.00%) 2058 ( 0.00%) 228.67
smtp 456 ( 0.00%) 210818 ( 0.00%) 462.32
imap 362 ( 0.00%) 281550 ( 0.00%) 777.76
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 4 ( 0.00%) 458 ( 0.00%) 114.50
bgp 385 ( 0.00%) 33659 ( 0.00%) 87.43
other 1815 ( 0.01%) 1392402 ( 0.01%) 767.16
udp6 15997 ( 0.08%) 2570738 ( 0.02%) 160.70
dns 14556 ( 0.07%) 2251100 ( 0.02%) 154.65
quake 1 ( 0.00%) 103 ( 0.00%) 103.00
cuseeme 2 ( 0.00%) 214 ( 0.00%) 107.00
other 1438 ( 0.01%) 319321 ( 0.00%) 222.06
icmp6 4893 ( 0.02%) 583868 ( 0.00%) 119.33
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 235 ( 0.00%) 218057 ( 0.00%) 927.90
tcpdump file: 200904021745.dump.gz (493.38 MB)