Traffic Trace Info
DumpFile: 200904021815.dump
FileSize: 1232.74MB
Id: 200904021815
StartTime: Thu Apr 2 18:15:01 2009
EndTime: Thu Apr 2 18:30:01 2009
TotalTime: 899.66 seconds
TotalCapSize: 960.74MB CapLen: 96 bytes
# of packets: 17814243 (10926.11MB)
AvgRate: 101.87Mbps stddev:13.53M
IP flow (unique src/dst pair) Information
# of flows: 944712 (avg. 18.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.4% 1.3% 1.3% 1.2% 0.9% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 593805
Top 10 bandwidth usage (bytes/total in %):
25.3% 17.9% 7.7% 4.4% 3.2% 2.2% 1.5% 1.4% 1.4% 1.4%
# of IPv6 addresses: 1674
Top 10 bandwidth usage (bytes/total in %):
28.9% 20.5% 16.0% 16.0% 9.7% 8.7% 8.4% 7.8% 5.9% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021815.pktlen.png)
detailed numbers
[ 32- 63]: 4862219
[ 64- 127]: 4025007
[ 128- 255]: 1019882
[ 256- 511]: 344430
[ 512- 1023]: 502822
[ 1024- 2047]: 7059883
Protocol Breakdown
![[protocol breakdown chart]](200904021815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17814243 (100.00%) 11456854301 (100.00%) 643.13
ip 17773695 ( 99.77%) 11448600317 ( 99.93%) 644.13
tcp 14451664 ( 81.12%) 10704173142 ( 93.43%) 740.69
http(s) 6518601 ( 36.59%) 8753428335 ( 76.40%) 1342.84
http(c) 4602906 ( 25.84%) 396146269 ( 3.46%) 86.06
squid 322435 ( 1.81%) 234223802 ( 2.04%) 726.42
smtp 371908 ( 2.09%) 118791158 ( 1.04%) 319.41
ftp 68513 ( 0.38%) 31958814 ( 0.28%) 466.46
pop3 11586 ( 0.07%) 6388874 ( 0.06%) 551.43
imap 3303 ( 0.02%) 360469 ( 0.00%) 109.13
telnet 14261 ( 0.08%) 4499667 ( 0.04%) 315.52
ssh 346987 ( 1.95%) 38591782 ( 0.34%) 111.22
dns 20186 ( 0.11%) 2229634 ( 0.02%) 110.45
bgp 178 ( 0.00%) 79640 ( 0.00%) 447.42
napster 31 ( 0.00%) 5214 ( 0.00%) 168.19
realaud 18 ( 0.00%) 1304 ( 0.00%) 72.44
rtsp 78426 ( 0.44%) 4967848 ( 0.04%) 63.34
icecast 433 ( 0.00%) 47676 ( 0.00%) 110.11
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2091864 ( 11.74%) 1112450976 ( 9.71%) 531.80
udp 2476798 ( 13.90%) 652304103 ( 5.69%) 263.37
dns 1170346 ( 6.57%) 255142715 ( 2.23%) 218.01
realaud 19849 ( 0.11%) 6501313 ( 0.06%) 327.54
halflif 27 ( 0.00%) 2725 ( 0.00%) 100.93
starcra 99 ( 0.00%) 19242 ( 0.00%) 194.36
everque 91 ( 0.00%) 17151 ( 0.00%) 188.47
unreal 13 ( 0.00%) 1879 ( 0.00%) 144.54
quake 18 ( 0.00%) 1866 ( 0.00%) 103.67
cuseeme 9 ( 0.00%) 1319 ( 0.00%) 146.56
other 1286178 ( 7.22%) 390463693 ( 3.41%) 303.58
icmp 747404 ( 4.20%) 74894206 ( 0.65%) 100.21
ipip 350 ( 0.00%) 44710 ( 0.00%) 127.74
ipsec 276 ( 0.00%) 47144 ( 0.00%) 170.81
ip6 29792 ( 0.17%) 4405854 ( 0.04%) 147.89
other 67411 ( 0.38%) 12731158 ( 0.11%) 188.86
frag 43375 ( 0.24%) 48498267 ( 0.42%) 1118.12
ip6 40548 ( 0.23%) 8253984 ( 0.07%) 203.56
tcp6 19090 ( 0.11%) 5042088 ( 0.04%) 264.12
http(s) 2906 ( 0.02%) 1874370 ( 0.02%) 645.00
http(c) 13626 ( 0.08%) 1560319 ( 0.01%) 114.51
smtp 214 ( 0.00%) 96956 ( 0.00%) 453.07
ftp 20 ( 0.00%) 1864 ( 0.00%) 93.20
imap 13 ( 0.00%) 11132 ( 0.00%) 856.31
ssh 193 ( 0.00%) 42630 ( 0.00%) 220.88
bgp 385 ( 0.00%) 33319 ( 0.00%) 86.54
other 1733 ( 0.01%) 1421498 ( 0.01%) 820.25
udp6 16106 ( 0.09%) 2450677 ( 0.02%) 152.16
dns 15013 ( 0.08%) 2277524 ( 0.02%) 151.70
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
other 1091 ( 0.01%) 172946 ( 0.00%) 158.52
icmp6 5156 ( 0.03%) 608067 ( 0.01%) 117.93
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 165 ( 0.00%) 148936 ( 0.00%) 902.64
tcpdump file: 200904021815.dump.gz (445.93 MB)