Traffic Trace Info
DumpFile: 200904021845.dump
FileSize: 1099.59MB
Id: 200904021845
StartTime: Thu Apr 2 18:45:00 2009
EndTime: Thu Apr 2 19:00:01 2009
TotalTime: 900.45 seconds
TotalCapSize: 858.17MB CapLen: 96 bytes
# of packets: 15804321 (9817.46MB)
AvgRate: 91.46Mbps stddev:12.30M
IP flow (unique src/dst pair) Information
# of flows: 893235 (avg. 17.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 1.7% 1.6% 1.3% 1.1% 1.0% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 538373
Top 10 bandwidth usage (bytes/total in %):
19.5% 15.7% 8.0% 5.7% 4.2% 3.9% 3.0% 2.2% 1.8% 1.6%
# of IPv6 addresses: 1849
Top 10 bandwidth usage (bytes/total in %):
33.8% 33.7% 21.6% 14.8% 7.1% 6.8% 6.6% 6.0% 4.2% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021845.pktlen.png)
detailed numbers
[ 32- 63]: 3835948
[ 64- 127]: 3786662
[ 128- 255]: 1038485
[ 256- 511]: 346109
[ 512- 1023]: 464837
[ 1024- 2047]: 6332280
Protocol Breakdown
![[protocol breakdown chart]](200904021845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15804321 (100.00%) 10294354962 (100.00%) 651.36
ip 15760694 ( 99.72%) 10283735599 ( 99.90%) 652.49
tcp 12712638 ( 80.44%) 9650506898 ( 93.75%) 759.13
http(s) 5606086 ( 35.47%) 7459976482 ( 72.47%) 1330.69
http(c) 4071803 ( 25.76%) 580440895 ( 5.64%) 142.55
squid 273357 ( 1.73%) 191903269 ( 1.86%) 702.02
smtp 349200 ( 2.21%) 144159291 ( 1.40%) 412.83
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 66121 ( 0.42%) 31431398 ( 0.31%) 475.36
pop3 20226 ( 0.13%) 7456232 ( 0.07%) 368.65
imap 2924 ( 0.02%) 393919 ( 0.00%) 134.72
telnet 11492 ( 0.07%) 2520571 ( 0.02%) 219.33
ssh 105238 ( 0.67%) 23844713 ( 0.23%) 226.58
dns 20287 ( 0.13%) 4145124 ( 0.04%) 204.32
bgp 160 ( 0.00%) 66962 ( 0.00%) 418.51
napster 61 ( 0.00%) 6377 ( 0.00%) 104.54
realaud 38 ( 0.00%) 10144 ( 0.00%) 266.95
rtsp 34505 ( 0.22%) 2213171 ( 0.02%) 64.14
icecast 523 ( 0.00%) 62947 ( 0.00%) 120.36
other 2150580 ( 13.61%) 1201873183 ( 11.68%) 558.86
udp 2258026 ( 14.29%) 549545127 ( 5.34%) 243.37
dns 1183923 ( 7.49%) 251770048 ( 2.45%) 212.66
realaud 3506 ( 0.02%) 482964 ( 0.00%) 137.75
halflif 56 ( 0.00%) 5426 ( 0.00%) 96.89
starcra 82 ( 0.00%) 16088 ( 0.00%) 196.20
everque 150 ( 0.00%) 21624 ( 0.00%) 144.16
unreal 34 ( 0.00%) 5168 ( 0.00%) 152.00
quake 14 ( 0.00%) 1407 ( 0.00%) 100.50
cuseeme 13 ( 0.00%) 1798 ( 0.00%) 138.31
other 1070091 ( 6.77%) 297097339 ( 2.89%) 277.64
icmp 725629 ( 4.59%) 72525457 ( 0.70%) 99.95
ipip 345 ( 0.00%) 44345 ( 0.00%) 128.54
ipsec 274 ( 0.00%) 46796 ( 0.00%) 170.79
ip6 28993 ( 0.18%) 4570807 ( 0.04%) 157.65
other 34789 ( 0.22%) 6496169 ( 0.06%) 186.73
frag 44493 ( 0.28%) 49363743 ( 0.48%) 1109.47
ip6 43627 ( 0.28%) 10619363 ( 0.10%) 243.41
tcp6 22023 ( 0.14%) 7331735 ( 0.07%) 332.91
http(s) 2692 ( 0.02%) 1756299 ( 0.02%) 652.41
http(c) 15153 ( 0.10%) 1718017 ( 0.02%) 113.38
smtp 269 ( 0.00%) 114705 ( 0.00%) 426.41
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 9 ( 0.00%) 1001 ( 0.00%) 111.22
bgp 394 ( 0.00%) 35561 ( 0.00%) 90.26
other 3502 ( 0.02%) 3705755 ( 0.04%) 1058.18
udp6 15772 ( 0.10%) 2455053 ( 0.02%) 155.66
dns 14406 ( 0.09%) 2156054 ( 0.02%) 149.66
halflif 1 ( 0.00%) 98 ( 0.00%) 98.00
starcra 1 ( 0.00%) 114 ( 0.00%) 114.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 97 ( 0.00%) 97.00
other 1362 ( 0.01%) 298582 ( 0.00%) 219.22
icmp6 5640 ( 0.04%) 677879 ( 0.01%) 120.19
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 162 ( 0.00%) 150616 ( 0.00%) 929.73
tcpdump file: 200904021845.dump.gz (398.71 MB)