Traffic Trace Info
DumpFile: 200904022000.dump
FileSize: 1235.65MB
Id: 200904022000
StartTime: Thu Apr 2 20:00:00 2009
EndTime: Thu Apr 2 20:15:00 2009
TotalTime: 900.21 seconds
TotalCapSize: 960.97MB CapLen: 96 bytes
# of packets: 17983792 (11860.59MB)
AvgRate: 110.52Mbps stddev:10.84M
IP flow (unique src/dst pair) Information
# of flows: 851283 (avg. 21.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.1% 1.6% 1.5% 1.4% 1.3% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 536981
Top 10 bandwidth usage (bytes/total in %):
19.2% 18.2% 10.6% 6.1% 5.3% 4.3% 3.4% 3.2% 2.9% 2.7%
# of IPv6 addresses: 1844
Top 10 bandwidth usage (bytes/total in %):
28.1% 24.4% 16.4% 14.2% 14.0% 8.8% 8.0% 7.0% 6.3% 6.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904022000.pktlen.png)
detailed numbers
[ 32- 63]: 4694896
[ 64- 127]: 3773375
[ 128- 255]: 845904
[ 256- 511]: 391538
[ 512- 1023]: 542030
[ 1024- 2047]: 7736049
Protocol Breakdown
![[protocol breakdown chart]](200904022000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17983792 (100.00%) 12436731693 (100.00%) 691.55
ip 17945013 ( 99.78%) 12427667191 ( 99.93%) 692.54
tcp 14780972 ( 82.19%) 11756537007 ( 94.53%) 795.38
http(s) 7290630 ( 40.54%) 9783919177 ( 78.67%) 1341.99
http(c) 4647383 ( 25.84%) 371068288 ( 2.98%) 79.84
squid 428417 ( 2.38%) 271211349 ( 2.18%) 633.05
smtp 354142 ( 1.97%) 104541828 ( 0.84%) 295.20
ftp 64997 ( 0.36%) 41029217 ( 0.33%) 631.25
pop3 13826 ( 0.08%) 6897903 ( 0.06%) 498.91
imap 4558 ( 0.03%) 2404380 ( 0.02%) 527.51
telnet 2801 ( 0.02%) 333198 ( 0.00%) 118.96
ssh 28720 ( 0.16%) 16245532 ( 0.13%) 565.65
dns 21635 ( 0.12%) 5713614 ( 0.05%) 264.09
bgp 200 ( 0.00%) 101860 ( 0.00%) 509.30
napster 15 ( 0.00%) 1666 ( 0.00%) 111.07
realaud 90 ( 0.00%) 14190 ( 0.00%) 157.67
rtsp 425 ( 0.00%) 72400 ( 0.00%) 170.35
icecast 300 ( 0.00%) 21785 ( 0.00%) 72.62
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 1922815 ( 10.69%) 1152959538 ( 9.27%) 599.62
udp 2215983 ( 12.32%) 547338770 ( 4.40%) 247.00
dns 1139939 ( 6.34%) 239193578 ( 1.92%) 209.83
realaud 2745 ( 0.02%) 167793 ( 0.00%) 61.13
halflif 2037 ( 0.01%) 140325 ( 0.00%) 68.89
starcra 70 ( 0.00%) 15562 ( 0.00%) 222.31
everque 87 ( 0.00%) 17186 ( 0.00%) 197.54
unreal 20 ( 0.00%) 3580 ( 0.00%) 179.00
quake 17 ( 0.00%) 1595 ( 0.00%) 93.82
cuseeme 6 ( 0.00%) 496 ( 0.00%) 82.67
other 1070860 ( 5.95%) 307632378 ( 2.47%) 287.28
icmp 747965 ( 4.16%) 94336677 ( 0.76%) 126.12
ipip 337 ( 0.00%) 42178 ( 0.00%) 125.16
ipsec 273 ( 0.00%) 46638 ( 0.00%) 170.84
ip6 28734 ( 0.16%) 4723586 ( 0.04%) 164.39
other 170749 ( 0.95%) 24642335 ( 0.20%) 144.32
frag 46265 ( 0.26%) 51501219 ( 0.41%) 1113.18
ip6 38779 ( 0.22%) 9064502 ( 0.07%) 233.75
tcp6 17824 ( 0.10%) 5726015 ( 0.05%) 321.25
http(s) 2436 ( 0.01%) 1507624 ( 0.01%) 618.89
http(c) 11812 ( 0.07%) 1436484 ( 0.01%) 121.61
smtp 174 ( 0.00%) 68205 ( 0.00%) 391.98
ftp 9 ( 0.00%) 786 ( 0.00%) 87.33
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 16 ( 0.00%) 5944 ( 0.00%) 371.50
bgp 373 ( 0.00%) 32327 ( 0.00%) 86.67
other 3002 ( 0.02%) 2674473 ( 0.02%) 890.90
udp6 16055 ( 0.09%) 2449194 ( 0.02%) 152.55
dns 14638 ( 0.08%) 2155836 ( 0.02%) 147.28
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 1 ( 0.00%) 112 ( 0.00%) 112.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1414 ( 0.01%) 293036 ( 0.00%) 207.24
icmp6 4506 ( 0.03%) 537571 ( 0.00%) 119.30
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 364 ( 0.00%) 347642 ( 0.00%) 955.06
tcpdump file: 200904022000.dump.gz (439.04 MB)