Traffic Trace Info
DumpFile: 200904021945.dump
FileSize: 1185.30MB
Id: 200904021945
StartTime: Thu Apr 2 19:45:00 2009
EndTime: Thu Apr 2 20:00:00 2009
TotalTime: 899.88 seconds
TotalCapSize: 923.89MB CapLen: 96 bytes
# of packets: 17114519 (11101.04MB)
AvgRate: 103.48Mbps stddev:10.18M
IP flow (unique src/dst pair) Information
# of flows: 945305 (avg. 18.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.8% 2.2% 2.1% 2.0% 1.6% 1.4% 1.3% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 554201
Top 10 bandwidth usage (bytes/total in %):
20.0% 19.5% 7.1% 6.0% 5.8% 5.2% 3.3% 3.2% 2.1% 2.1%
# of IPv6 addresses: 2030
Top 10 bandwidth usage (bytes/total in %):
26.4% 18.3% 12.9% 12.8% 11.8% 11.6% 10.2% 8.1% 7.3% 6.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904021945.pktlen.png)
detailed numbers
[ 32- 63]: 4285378
[ 64- 127]: 3787321
[ 128- 255]: 949187
[ 256- 511]: 357620
[ 512- 1023]: 521131
[ 1024- 2047]: 7213882
Protocol Breakdown
![[protocol breakdown chart]](200904021945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17114519 (100.00%) 11640282192 (100.00%) 680.14
ip 17056650 ( 99.66%) 11630368438 ( 99.91%) 681.87
tcp 13920936 ( 81.34%) 10994969532 ( 94.46%) 789.82
http(s) 6441778 ( 37.64%) 8622611865 ( 74.08%) 1338.55
http(c) 4335353 ( 25.33%) 430779713 ( 3.70%) 99.36
squid 469611 ( 2.74%) 373545949 ( 3.21%) 795.44
smtp 305159 ( 1.78%) 92589349 ( 0.80%) 303.41
ftp 72200 ( 0.42%) 52036382 ( 0.45%) 720.73
pop3 9823 ( 0.06%) 5519421 ( 0.05%) 561.89
imap 3342 ( 0.02%) 525820 ( 0.00%) 157.34
telnet 4045 ( 0.02%) 599196 ( 0.01%) 148.13
ssh 23727 ( 0.14%) 5022507 ( 0.04%) 211.68
dns 20651 ( 0.12%) 5201022 ( 0.04%) 251.85
bgp 155 ( 0.00%) 59807 ( 0.00%) 385.85
napster 256 ( 0.00%) 16182 ( 0.00%) 63.21
realaud 95 ( 0.00%) 7102 ( 0.00%) 74.76
rtsp 308 ( 0.00%) 55945 ( 0.00%) 181.64
icecast 312 ( 0.00%) 26439 ( 0.00%) 84.74
other 2234048 ( 13.05%) 1406358381 ( 12.08%) 629.51
udp 2117578 ( 12.37%) 508385631 ( 4.37%) 240.08
dns 1112643 ( 6.50%) 231019042 ( 1.98%) 207.63
realaud 2730 ( 0.02%) 164188 ( 0.00%) 60.14
halflif 969 ( 0.01%) 59921 ( 0.00%) 61.84
starcra 77 ( 0.00%) 15049 ( 0.00%) 195.44
everque 114 ( 0.00%) 20101 ( 0.00%) 176.32
unreal 22 ( 0.00%) 5258 ( 0.00%) 239.00
quake 24 ( 0.00%) 1934 ( 0.00%) 80.58
cuseeme 5 ( 0.00%) 1222 ( 0.00%) 244.40
other 1000868 ( 5.85%) 276987451 ( 2.38%) 276.75
icmp 855737 ( 5.00%) 98199659 ( 0.84%) 114.75
ipip 323 ( 0.00%) 39988 ( 0.00%) 123.80
ipsec 272 ( 0.00%) 46528 ( 0.00%) 171.06
ip6 31785 ( 0.19%) 7123931 ( 0.06%) 224.13
other 130019 ( 0.76%) 21603169 ( 0.19%) 166.15
frag 44240 ( 0.26%) 49073613 ( 0.42%) 1109.26
ip6 57869 ( 0.34%) 9913754 ( 0.09%) 171.31
tcp6 37322 ( 0.22%) 6715736 ( 0.06%) 179.94
http(s) 2996 ( 0.02%) 2009692 ( 0.02%) 670.79
http(c) 31530 ( 0.18%) 3115442 ( 0.03%) 98.81
smtp 414 ( 0.00%) 155600 ( 0.00%) 375.85
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 374 ( 0.00%) 37691 ( 0.00%) 100.78
other 2006 ( 0.01%) 1397139 ( 0.01%) 696.48
udp6 15750 ( 0.09%) 2548875 ( 0.02%) 161.83
dns 13467 ( 0.08%) 1993915 ( 0.02%) 148.06
other 2283 ( 0.01%) 554960 ( 0.00%) 243.08
icmp6 4677 ( 0.03%) 562421 ( 0.00%) 120.25
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 90 ( 0.00%) 82642 ( 0.00%) 918.24
tcpdump file: 200904021945.dump.gz (422.66 MB)