Traffic Trace Info
DumpFile: 200904021930.dump
FileSize: 1180.50MB
Id: 200904021930
StartTime: Thu Apr 2 19:30:00 2009
EndTime: Thu Apr 2 19:45:00 2009
TotalTime: 899.94 seconds
TotalCapSize: 919.49MB CapLen: 96 bytes
# of packets: 17091620 (11450.24MB)
AvgRate: 106.72Mbps stddev:10.90M
IP flow (unique src/dst pair) Information
# of flows: 810289 (avg. 21.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.1% 2.1% 1.6% 1.4% 1.3% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 506770
Top 10 bandwidth usage (bytes/total in %):
23.7% 17.6% 7.0% 5.5% 5.3% 4.7% 3.3% 3.2% 2.6% 1.7%
# of IPv6 addresses: 1685
Top 10 bandwidth usage (bytes/total in %):
29.9% 20.2% 16.2% 15.9% 9.7% 9.1% 8.2% 7.6% 4.9% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021930.pktlen.png)
detailed numbers
[ 32- 63]: 4293207
[ 64- 127]: 3598133
[ 128- 255]: 924823
[ 256- 511]: 338799
[ 512- 1023]: 438051
[ 1024- 2047]: 7498607
Protocol Breakdown
![[protocol breakdown chart]](200904021930.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17091620 (100.00%) 12006443094 (100.00%) 702.48
ip 17051754 ( 99.77%) 11998316926 ( 99.93%) 703.64
tcp 14012388 ( 81.98%) 11403571069 ( 94.98%) 813.82
http(s) 6947004 ( 40.65%) 9375803793 ( 78.09%) 1349.62
http(c) 4402688 ( 25.76%) 374510949 ( 3.12%) 85.06
squid 322737 ( 1.89%) 228913428 ( 1.91%) 709.29
smtp 328431 ( 1.92%) 80431495 ( 0.67%) 244.90
ftp 68228 ( 0.40%) 40578919 ( 0.34%) 594.75
pop3 13315 ( 0.08%) 7669631 ( 0.06%) 576.01
imap 3557 ( 0.02%) 347249 ( 0.00%) 97.62
telnet 4037 ( 0.02%) 722174 ( 0.01%) 178.89
ssh 33494 ( 0.20%) 5790050 ( 0.05%) 172.87
dns 22529 ( 0.13%) 6967725 ( 0.06%) 309.28
bgp 140 ( 0.00%) 51768 ( 0.00%) 369.77
napster 17 ( 0.00%) 2575 ( 0.00%) 151.47
realaud 17 ( 0.00%) 1234 ( 0.00%) 72.59
rtsp 4560 ( 0.03%) 6190735 ( 0.05%) 1357.62
icecast 399 ( 0.00%) 53847 ( 0.00%) 134.95
hotline 6 ( 0.00%) 364 ( 0.00%) 60.67
other 1861192 ( 10.89%) 1275532913 ( 10.62%) 685.33
udp 2104667 ( 12.31%) 493363779 ( 4.11%) 234.41
dns 1115017 ( 6.52%) 213728832 ( 1.78%) 191.68
realaud 2819 ( 0.02%) 170255 ( 0.00%) 60.40
halflif 1082 ( 0.01%) 67796 ( 0.00%) 62.66
starcra 63 ( 0.00%) 13061 ( 0.00%) 207.32
everque 95 ( 0.00%) 16682 ( 0.00%) 175.60
unreal 8 ( 0.00%) 739 ( 0.00%) 92.38
quake 20 ( 0.00%) 2451 ( 0.00%) 122.55
cuseeme 3 ( 0.00%) 339 ( 0.00%) 113.00
other 985334 ( 5.77%) 279226893 ( 2.33%) 283.38
icmp 752331 ( 4.40%) 74686215 ( 0.62%) 99.27
ipip 317 ( 0.00%) 38890 ( 0.00%) 122.68
ipsec 275 ( 0.00%) 46906 ( 0.00%) 170.57
ip6 30517 ( 0.18%) 4751494 ( 0.04%) 155.70
other 151259 ( 0.88%) 21858573 ( 0.18%) 144.51
frag 43782 ( 0.26%) 48920923 ( 0.41%) 1117.38
ip6 39866 ( 0.23%) 8126168 ( 0.07%) 203.84
tcp6 19787 ( 0.12%) 5086689 ( 0.04%) 257.07
http(s) 2722 ( 0.02%) 1820651 ( 0.02%) 668.87
http(c) 14350 ( 0.08%) 1685497 ( 0.01%) 117.46
smtp 196 ( 0.00%) 90908 ( 0.00%) 463.82
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
dns 17 ( 0.00%) 1921 ( 0.00%) 113.00
bgp 375 ( 0.00%) 32284 ( 0.00%) 86.09
other 2125 ( 0.01%) 1455203 ( 0.01%) 684.80
udp6 15176 ( 0.09%) 2301804 ( 0.02%) 151.67
dns 13903 ( 0.08%) 2095178 ( 0.02%) 150.70
quake 2 ( 0.00%) 236 ( 0.00%) 118.00
other 1271 ( 0.01%) 206390 ( 0.00%) 162.38
icmp6 4702 ( 0.03%) 567174 ( 0.00%) 120.62
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 171 ( 0.00%) 166421 ( 0.00%) 973.22
tcpdump file: 200904021930.dump.gz (424.23 MB)