Traffic Trace Info
DumpFile: 200904021830.dump
FileSize: 1207.15MB
Id: 200904021830
StartTime: Thu Apr 2 18:30:01 2009
EndTime: Thu Apr 2 18:45:00 2009
TotalTime: 899.80 seconds
TotalCapSize: 942.67MB CapLen: 96 bytes
# of packets: 17317074 (11117.31MB)
AvgRate: 103.64Mbps stddev:10.52M
IP flow (unique src/dst pair) Information
# of flows: 919836 (avg. 18.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.9% 1.4% 1.1% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 551835
Top 10 bandwidth usage (bytes/total in %):
19.6% 17.9% 7.5% 5.5% 3.6% 3.2% 2.9% 2.7% 2.4% 1.4%
# of IPv6 addresses: 1920
Top 10 bandwidth usage (bytes/total in %):
25.3% 18.1% 14.7% 14.7% 13.6% 9.2% 7.2% 7.1% 6.5% 5.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021830.pktlen.png)
detailed numbers
[ 32- 63]: 4097344
[ 64- 127]: 4134343
[ 128- 255]: 1027856
[ 256- 511]: 354367
[ 512- 1023]: 488517
[ 1024- 2047]: 7214647
Protocol Breakdown
![[protocol breakdown chart]](200904021830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17317074 (100.00%) 11657348507 (100.00%) 673.17
ip 17269756 ( 99.73%) 11648545041 ( 99.92%) 674.51
tcp 14167432 ( 81.81%) 11029266951 ( 94.61%) 778.49
http(s) 6728348 ( 38.85%) 8984696137 ( 77.07%) 1335.35
http(c) 4275015 ( 24.69%) 367007494 ( 3.15%) 85.85
squid 251516 ( 1.45%) 184714565 ( 1.58%) 734.40
smtp 316178 ( 1.83%) 109393478 ( 0.94%) 345.99
ftp 58446 ( 0.34%) 21403508 ( 0.18%) 366.21
pop3 25855 ( 0.15%) 22464097 ( 0.19%) 868.85
imap 4618 ( 0.03%) 1143817 ( 0.01%) 247.69
telnet 16423 ( 0.09%) 5255417 ( 0.05%) 320.00
ssh 153576 ( 0.89%) 21619178 ( 0.19%) 140.77
dns 18631 ( 0.11%) 3885199 ( 0.03%) 208.53
bgp 156 ( 0.00%) 62871 ( 0.00%) 403.02
napster 18 ( 0.00%) 1106 ( 0.00%) 61.44
realaud 15 ( 0.00%) 1110 ( 0.00%) 74.00
rtsp 38917 ( 0.22%) 2474881 ( 0.02%) 63.59
icecast 1015 ( 0.01%) 89913 ( 0.00%) 88.58
other 2278678 ( 13.16%) 1305052210 ( 11.20%) 572.72
udp 2273913 ( 13.13%) 529974456 ( 4.55%) 233.07
dns 1223452 ( 7.07%) 256685388 ( 2.20%) 209.80
realaud 18845 ( 0.11%) 6170540 ( 0.05%) 327.44
halflif 30 ( 0.00%) 2737 ( 0.00%) 91.23
starcra 62 ( 0.00%) 11478 ( 0.00%) 185.13
everque 91 ( 0.00%) 15873 ( 0.00%) 174.43
unreal 11 ( 0.00%) 1205 ( 0.00%) 109.55
quake 18 ( 0.00%) 2272 ( 0.00%) 126.22
cuseeme 11 ( 0.00%) 1453 ( 0.00%) 132.09
other 1031266 ( 5.96%) 266966913 ( 2.29%) 258.87
icmp 758034 ( 4.38%) 74831545 ( 0.64%) 98.72
ipip 298 ( 0.00%) 35942 ( 0.00%) 120.61
ipsec 270 ( 0.00%) 46124 ( 0.00%) 170.83
ip6 32945 ( 0.19%) 7062254 ( 0.06%) 214.36
other 36864 ( 0.21%) 7327769 ( 0.06%) 198.78
frag 43841 ( 0.25%) 48803520 ( 0.42%) 1113.19
ip6 47318 ( 0.27%) 8803466 ( 0.08%) 186.05
tcp6 25764 ( 0.15%) 5502620 ( 0.05%) 213.58
http(s) 2601 ( 0.02%) 1779198 ( 0.02%) 684.04
http(c) 20233 ( 0.12%) 2020564 ( 0.02%) 99.86
smtp 745 ( 0.00%) 268643 ( 0.00%) 360.59
ftp 17 ( 0.00%) 1799 ( 0.00%) 105.82
telnet 1 ( 0.00%) 94 ( 0.00%) 94.00
dns 13 ( 0.00%) 1464 ( 0.00%) 112.62
bgp 373 ( 0.00%) 31783 ( 0.00%) 85.21
other 1781 ( 0.01%) 1399075 ( 0.01%) 785.56
udp6 16975 ( 0.10%) 2653985 ( 0.02%) 156.35
dns 15064 ( 0.09%) 2246260 ( 0.02%) 149.11
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
other 1910 ( 0.01%) 407615 ( 0.00%) 213.41
icmp6 4449 ( 0.03%) 550456 ( 0.00%) 123.73
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 100 ( 0.00%) 92325 ( 0.00%) 923.25
tcpdump file: 200904021830.dump.gz (436.62 MB)