Traffic Trace Info
DumpFile: 200904021900.dump
FileSize: 1115.79MB
Id: 200904021900
StartTime: Thu Apr 2 19:00:01 2009
EndTime: Thu Apr 2 19:15:00 2009
TotalTime: 899.16 seconds
TotalCapSize: 870.51MB CapLen: 96 bytes
# of packets: 16054475 (10284.58MB)
AvgRate: 95.96Mbps stddev:9.99M
IP flow (unique src/dst pair) Information
# of flows: 891127 (avg. 18.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 1.8% 1.6% 1.3% 1.1% 1.0% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 570087
Top 10 bandwidth usage (bytes/total in %):
20.0% 18.7% 8.4% 5.4% 3.8% 3.3% 2.9% 2.0% 1.8% 1.6%
# of IPv6 addresses: 1883
Top 10 bandwidth usage (bytes/total in %):
40.6% 30.7% 18.9% 12.9% 10.6% 5.9% 5.8% 5.1% 5.1% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021900.pktlen.png)
detailed numbers
[ 32- 63]: 4033112
[ 64- 127]: 3594099
[ 128- 255]: 904540
[ 256- 511]: 369769
[ 512- 1023]: 530488
[ 1024- 2047]: 6622467
Protocol Breakdown
![[protocol breakdown chart]](200904021900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16054475 (100.00%) 10784164625 (100.00%) 671.72
ip 16011429 ( 99.73%) 10771906068 ( 99.89%) 672.76
tcp 13073764 ( 81.43%) 10183845757 ( 94.43%) 778.95
http(s) 6131592 ( 38.19%) 8190325265 ( 75.95%) 1335.76
http(c) 4121325 ( 25.67%) 474088308 ( 4.40%) 115.03
squid 332663 ( 2.07%) 258885433 ( 2.40%) 778.22
smtp 297499 ( 1.85%) 93320654 ( 0.87%) 313.68
ftp 71784 ( 0.45%) 39414918 ( 0.37%) 549.08
pop3 8598 ( 0.05%) 4076789 ( 0.04%) 474.16
imap 3949 ( 0.02%) 426169 ( 0.00%) 107.92
telnet 13460 ( 0.08%) 4476190 ( 0.04%) 332.55
ssh 199459 ( 1.24%) 22463173 ( 0.21%) 112.62
dns 17809 ( 0.11%) 1847147 ( 0.02%) 103.72
bgp 163 ( 0.00%) 61876 ( 0.00%) 379.61
napster 6 ( 0.00%) 694 ( 0.00%) 115.67
realaud 27 ( 0.00%) 5019 ( 0.00%) 185.89
rtsp 47334 ( 0.29%) 2975701 ( 0.03%) 62.87
icecast 472 ( 0.00%) 49676 ( 0.00%) 105.25
hotline 5 ( 0.00%) 314 ( 0.00%) 62.80
other 1827618 ( 11.38%) 1091428371 ( 10.12%) 597.19
udp 2097255 ( 13.06%) 498192666 ( 4.62%) 237.55
dns 1210027 ( 7.54%) 258016405 ( 2.39%) 213.23
realaud 2952 ( 0.02%) 177627 ( 0.00%) 60.17
halflif 25 ( 0.00%) 2378 ( 0.00%) 95.12
starcra 61 ( 0.00%) 12290 ( 0.00%) 201.48
everque 134 ( 0.00%) 20405 ( 0.00%) 152.28
unreal 8 ( 0.00%) 1207 ( 0.00%) 150.88
quake 13 ( 0.00%) 1139 ( 0.00%) 87.62
cuseeme 6 ( 0.00%) 672 ( 0.00%) 112.00
other 883868 ( 5.51%) 239806684 ( 2.22%) 271.32
icmp 769065 ( 4.79%) 75181054 ( 0.70%) 97.76
ipip 308 ( 0.00%) 36604 ( 0.00%) 118.84
ipsec 277 ( 0.00%) 47198 ( 0.00%) 170.39
ip6 31765 ( 0.20%) 5768780 ( 0.05%) 181.61
other 38995 ( 0.24%) 8834009 ( 0.08%) 226.54
frag 49801 ( 0.31%) 54845621 ( 0.51%) 1101.30
ip6 43044 ( 0.27%) 12258437 ( 0.11%) 284.79
tcp6 21476 ( 0.13%) 8886280 ( 0.08%) 413.78
http(s) 2587 ( 0.02%) 1771471 ( 0.02%) 684.76
http(c) 13304 ( 0.08%) 1554849 ( 0.01%) 116.87
smtp 342 ( 0.00%) 125245 ( 0.00%) 366.21
imap 350 ( 0.00%) 307177 ( 0.00%) 877.65
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 12 ( 0.00%) 1382 ( 0.00%) 115.17
bgp 371 ( 0.00%) 31525 ( 0.00%) 84.97
other 4508 ( 0.03%) 5094459 ( 0.05%) 1130.09
udp6 16035 ( 0.10%) 2598067 ( 0.02%) 162.02
dns 14279 ( 0.09%) 2202935 ( 0.02%) 154.28
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 1755 ( 0.01%) 395014 ( 0.00%) 225.08
icmp6 5358 ( 0.03%) 630799 ( 0.01%) 117.73
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 145 ( 0.00%) 139211 ( 0.00%) 960.08
tcpdump file: 200904021900.dump.gz (399.65 MB)