Traffic Trace Info
DumpFile: 200904021800.dump
FileSize: 1363.25MB
Id: 200904021800
StartTime: Thu Apr 2 18:00:01 2009
EndTime: Thu Apr 2 18:15:01 2009
TotalTime: 900.09 seconds
TotalCapSize: 1062.62MB CapLen: 96 bytes
# of packets: 19689024 (12100.29MB)
AvgRate: 112.75Mbps stddev:11.33M
IP flow (unique src/dst pair) Information
# of flows: 955797 (avg. 20.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.0% 1.3% 1.2% 1.0% 0.9% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 592356
Top 10 bandwidth usage (bytes/total in %):
23.9% 18.2% 6.1% 5.0% 4.3% 2.7% 2.5% 2.0% 1.3% 1.3%
# of IPv6 addresses: 2018
Top 10 bandwidth usage (bytes/total in %):
20.6% 20.3% 14.5% 10.1% 10.1% 9.6% 9.6% 8.8% 6.4% 6.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021800.pktlen.png)
detailed numbers
[ 32- 63]: 5074315
[ 64- 127]: 4705620
[ 128- 255]: 1187616
[ 256- 511]: 358036
[ 512- 1023]: 534531
[ 1024- 2047]: 7828906
Protocol Breakdown
![[protocol breakdown chart]](200904021800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19689024 (100.00%) 12688075047 (100.00%) 644.42
ip 19636243 ( 99.73%) 12675581875 ( 99.90%) 645.52
tcp 15851092 ( 80.51%) 11769985952 ( 92.76%) 742.53
http(s) 7193611 ( 36.54%) 9718895532 ( 76.60%) 1351.05
http(c) 4997554 ( 25.38%) 447779083 ( 3.53%) 89.60
squid 369174 ( 1.88%) 264457409 ( 2.08%) 716.35
smtp 352274 ( 1.79%) 126832984 ( 1.00%) 360.04
ftp 68319 ( 0.35%) 27747789 ( 0.22%) 406.15
pop3 7717 ( 0.04%) 3383175 ( 0.03%) 438.41
imap 4332 ( 0.02%) 470213 ( 0.00%) 108.54
telnet 16906 ( 0.09%) 5823291 ( 0.05%) 344.45
ssh 519370 ( 2.64%) 62454972 ( 0.49%) 120.25
dns 37739 ( 0.19%) 28743675 ( 0.23%) 761.64
bgp 166 ( 0.00%) 64234 ( 0.00%) 386.95
napster 50 ( 0.00%) 3545 ( 0.00%) 70.90
realaud 53 ( 0.00%) 4439 ( 0.00%) 83.75
rtsp 69190 ( 0.35%) 4410956 ( 0.03%) 63.75
icecast 556 ( 0.00%) 58170 ( 0.00%) 104.62
hotline 4 ( 0.00%) 244 ( 0.00%) 61.00
other 2214048 ( 11.25%) 1078854501 ( 8.50%) 487.28
udp 2831687 ( 14.38%) 802312561 ( 6.32%) 283.33
dns 1349917 ( 6.86%) 293974768 ( 2.32%) 217.77
realaud 21254 ( 0.11%) 8469067 ( 0.07%) 398.47
halflif 31 ( 0.00%) 3288 ( 0.00%) 106.06
starcra 79 ( 0.00%) 14741 ( 0.00%) 186.59
everque 127 ( 0.00%) 20374 ( 0.00%) 160.43
unreal 13 ( 0.00%) 2083 ( 0.00%) 160.23
quake 30 ( 0.00%) 9519 ( 0.00%) 317.30
cuseeme 7 ( 0.00%) 977 ( 0.00%) 139.57
other 1460057 ( 7.42%) 499661004 ( 3.94%) 342.22
icmp 850144 ( 4.32%) 81120304 ( 0.64%) 95.42
ipip 308 ( 0.00%) 37284 ( 0.00%) 121.05
ipsec 272 ( 0.00%) 46528 ( 0.00%) 171.06
ip6 32061 ( 0.16%) 7020409 ( 0.06%) 218.97
other 70679 ( 0.36%) 15058837 ( 0.12%) 213.06
frag 45838 ( 0.23%) 51632762 ( 0.41%) 1126.42
ip6 52781 ( 0.27%) 12493172 ( 0.10%) 236.70
tcp6 29617 ( 0.15%) 8907482 ( 0.07%) 300.76
http(s) 3550 ( 0.02%) 2668581 ( 0.02%) 751.71
http(c) 18885 ( 0.10%) 1985466 ( 0.02%) 105.13
smtp 896 ( 0.00%) 377363 ( 0.00%) 421.16
ssh 3293 ( 0.02%) 1194242 ( 0.01%) 362.66
dns 21 ( 0.00%) 6487 ( 0.00%) 308.90
bgp 390 ( 0.00%) 34952 ( 0.00%) 89.62
other 2582 ( 0.01%) 2640391 ( 0.02%) 1022.61
udp6 18094 ( 0.09%) 2973414 ( 0.02%) 164.33
dns 16005 ( 0.08%) 2485886 ( 0.02%) 155.32
quake 1 ( 0.00%) 121 ( 0.00%) 121.00
other 2088 ( 0.01%) 487407 ( 0.00%) 233.43
icmp6 5026 ( 0.03%) 602216 ( 0.00%) 119.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14 ( 0.00%) 5980 ( 0.00%) 427.14
tcpdump file: 200904021800.dump.gz (493.32 MB)