Traffic Trace Info
DumpFile: 200904022015.dump
FileSize: 1339.94MB
Id: 200904022015
StartTime: Thu Apr 2 20:15:00 2009
EndTime: Thu Apr 2 20:30:01 2009
TotalTime: 900.52 seconds
TotalCapSize: 1041.18MB CapLen: 96 bytes
# of packets: 19563402 (14317.30MB)
AvgRate: 133.39Mbps stddev:27.41M
IP flow (unique src/dst pair) Information
# of flows: 882012 (avg. 22.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
19.4% 2.4% 2.0% 1.8% 1.7% 1.2% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 552476
Top 10 bandwidth usage (bytes/total in %):
37.0% 19.4% 14.4% 6.3% 5.5% 3.9% 3.2% 2.8% 2.7% 2.4%
# of IPv6 addresses: 1886
Top 10 bandwidth usage (bytes/total in %):
29.6% 20.5% 15.5% 15.5% 9.5% 9.1% 7.1% 7.1% 7.0% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904022015.pktlen.png)
detailed numbers
[ 32- 63]: 4479628
[ 64- 127]: 3793345
[ 128- 255]: 910231
[ 256- 511]: 361098
[ 512- 1023]: 439158
[ 1024- 2047]: 9579942
Protocol Breakdown
![[protocol breakdown chart]](200904022015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19563402 (100.00%) 15012778122 (100.00%) 767.39
ip 19531287 ( 99.84%) 15004600642 ( 99.95%) 768.23
tcp 16171482 ( 82.66%) 14281298277 ( 95.13%) 883.12
http(s) 9037805 ( 46.20%) 12419028750 ( 82.72%) 1374.12
http(c) 4431055 ( 22.65%) 355897211 ( 2.37%) 80.32
squid 326430 ( 1.67%) 171438718 ( 1.14%) 525.19
smtp 330027 ( 1.69%) 88161205 ( 0.59%) 267.13
ftp 89767 ( 0.46%) 51767141 ( 0.34%) 576.68
pop3 10858 ( 0.06%) 5256772 ( 0.04%) 484.14
imap 20385 ( 0.10%) 23292916 ( 0.16%) 1142.65
telnet 4698 ( 0.02%) 1342460 ( 0.01%) 285.75
ssh 22550 ( 0.12%) 6844502 ( 0.05%) 303.53
dns 18550 ( 0.09%) 1883883 ( 0.01%) 101.56
bgp 216 ( 0.00%) 103021 ( 0.00%) 476.95
napster 3 ( 0.00%) 194 ( 0.00%) 64.67
realaud 13 ( 0.00%) 954 ( 0.00%) 73.38
rtsp 374 ( 0.00%) 88776 ( 0.00%) 237.37
icecast 282 ( 0.00%) 19876 ( 0.00%) 70.48
hotline 10 ( 0.00%) 966 ( 0.00%) 96.60
other 1878333 ( 9.60%) 1156163372 ( 7.70%) 615.53
udp 2273804 ( 11.62%) 582731862 ( 3.88%) 256.28
dns 1237183 ( 6.32%) 257565513 ( 1.72%) 208.19
realaud 15264 ( 0.08%) 5776770 ( 0.04%) 378.46
halflif 328 ( 0.00%) 21770 ( 0.00%) 66.37
starcra 79 ( 0.00%) 15399 ( 0.00%) 194.92
everque 98 ( 0.00%) 17723 ( 0.00%) 180.85
unreal 15 ( 0.00%) 2457 ( 0.00%) 163.80
quake 39 ( 0.00%) 6929 ( 0.00%) 177.67
cuseeme 13 ( 0.00%) 1599 ( 0.00%) 123.00
other 1020657 ( 5.22%) 319215307 ( 2.13%) 312.75
icmp 848545 ( 4.34%) 101376007 ( 0.68%) 119.47
ipip 314 ( 0.00%) 38764 ( 0.00%) 123.45
ipsec 273 ( 0.00%) 46630 ( 0.00%) 170.81
ip6 31855 ( 0.16%) 8126172 ( 0.05%) 255.10
other 205014 ( 1.05%) 30982930 ( 0.21%) 151.13
frag 44790 ( 0.23%) 50123165 ( 0.33%) 1119.07
ip6 32115 ( 0.16%) 8177480 ( 0.05%) 254.63
tcp6 10191 ( 0.05%) 4825065 ( 0.03%) 473.46
http(s) 3274 ( 0.02%) 2367340 ( 0.02%) 723.07
http(c) 4085 ( 0.02%) 875584 ( 0.01%) 214.34
smtp 370 ( 0.00%) 137361 ( 0.00%) 371.25
dns 4 ( 0.00%) 459 ( 0.00%) 114.75
bgp 373 ( 0.00%) 32230 ( 0.00%) 86.41
other 2085 ( 0.01%) 1412091 ( 0.01%) 677.26
udp6 17232 ( 0.09%) 2682294 ( 0.02%) 155.66
dns 14873 ( 0.08%) 2233926 ( 0.01%) 150.20
starcra 1 ( 0.00%) 145 ( 0.00%) 145.00
cuseeme 1 ( 0.00%) 99 ( 0.00%) 99.00
other 2357 ( 0.01%) 448124 ( 0.00%) 190.12
icmp6 4526 ( 0.02%) 540384 ( 0.00%) 119.40
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 135 ( 0.00%) 125521 ( 0.00%) 929.79
tcpdump file: 200904022015.dump.gz (469.72 MB)