Traffic Trace Info
DumpFile: 200904022030.dump
FileSize: 1276.06MB
Id: 200904022030
StartTime: Thu Apr 2 20:30:01 2009
EndTime: Thu Apr 2 20:45:00 2009
TotalTime: 899.30 seconds
TotalCapSize: 992.75MB CapLen: 96 bytes
# of packets: 18549469 (12842.85MB)
AvgRate: 119.80Mbps stddev:13.46M
IP flow (unique src/dst pair) Information
# of flows: 937114 (avg. 19.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.9% 2.8% 2.3% 2.0% 1.9% 1.4% 1.3% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 558520
Top 10 bandwidth usage (bytes/total in %):
32.1% 16.5% 8.9% 5.8% 4.8% 3.7% 3.4% 2.8% 2.7% 2.3%
# of IPv6 addresses: 1696
Top 10 bandwidth usage (bytes/total in %):
28.8% 19.8% 15.3% 15.0% 12.0% 12.0% 9.0% 8.9% 4.6% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904022030.pktlen.png)
detailed numbers
[ 32- 63]: 4426406
[ 64- 127]: 3899794
[ 128- 255]: 927890
[ 256- 511]: 381086
[ 512- 1023]: 452738
[ 1024- 2047]: 8461555
Protocol Breakdown
![[protocol breakdown chart]](200904022030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18549469 (100.00%) 13466699096 (100.00%) 725.99
ip 18517256 ( 99.83%) 13458155242 ( 99.94%) 726.79
tcp 15223910 ( 82.07%) 12748544132 ( 94.67%) 837.40
http(s) 7905493 ( 42.62%) 10649967200 ( 79.08%) 1347.16
http(c) 4362325 ( 23.52%) 433013632 ( 3.22%) 99.26
squid 382806 ( 2.06%) 241102851 ( 1.79%) 629.83
smtp 355358 ( 1.92%) 99613571 ( 0.74%) 280.32
ftp 84238 ( 0.45%) 51568957 ( 0.38%) 612.18
pop3 15554 ( 0.08%) 9813622 ( 0.07%) 630.94
imap 5621 ( 0.03%) 1485518 ( 0.01%) 264.28
telnet 21411 ( 0.12%) 6681941 ( 0.05%) 312.08
ssh 43889 ( 0.24%) 7562626 ( 0.06%) 172.31
dns 19590 ( 0.11%) 5371490 ( 0.04%) 274.20
bgp 142 ( 0.00%) 54672 ( 0.00%) 385.01
napster 15 ( 0.00%) 2004 ( 0.00%) 133.60
realaud 27 ( 0.00%) 1854 ( 0.00%) 68.67
rtsp 353 ( 0.00%) 77659 ( 0.00%) 220.00
icecast 401 ( 0.00%) 30531 ( 0.00%) 76.14
other 2026649 ( 10.93%) 1242193724 ( 9.22%) 612.93
udp 2300260 ( 12.40%) 577153008 ( 4.29%) 250.91
dns 1234387 ( 6.65%) 253648933 ( 1.88%) 205.49
realaud 21895 ( 0.12%) 8533331 ( 0.06%) 389.74
halflif 188 ( 0.00%) 15134 ( 0.00%) 80.50
starcra 75 ( 0.00%) 15629 ( 0.00%) 208.39
everque 102 ( 0.00%) 19346 ( 0.00%) 189.67
unreal 29 ( 0.00%) 6454 ( 0.00%) 222.55
quake 27 ( 0.00%) 2714 ( 0.00%) 100.52
cuseeme 7 ( 0.00%) 943 ( 0.00%) 134.71
other 1043385 ( 5.62%) 314767262 ( 2.34%) 301.68
icmp 745429 ( 4.02%) 93632881 ( 0.70%) 125.61
ipip 347 ( 0.00%) 43954 ( 0.00%) 126.67
ipsec 276 ( 0.00%) 47088 ( 0.00%) 170.61
ip6 29155 ( 0.16%) 7471227 ( 0.06%) 256.26
other 217879 ( 1.17%) 31262952 ( 0.23%) 143.49
frag 45404 ( 0.24%) 50327512 ( 0.37%) 1108.44
ip6 32213 ( 0.17%) 8543854 ( 0.06%) 265.23
tcp6 11712 ( 0.06%) 5447894 ( 0.04%) 465.15
http(s) 2658 ( 0.01%) 1731920 ( 0.01%) 651.59
http(c) 4933 ( 0.03%) 963315 ( 0.01%) 195.28
smtp 596 ( 0.00%) 280841 ( 0.00%) 471.21
imap 1028 ( 0.01%) 1024376 ( 0.01%) 996.47
dns 5 ( 0.00%) 544 ( 0.00%) 108.80
bgp 378 ( 0.00%) 33119 ( 0.00%) 87.62
other 2114 ( 0.01%) 1413779 ( 0.01%) 668.77
udp6 15383 ( 0.08%) 2328153 ( 0.02%) 151.35
dns 14140 ( 0.08%) 2120481 ( 0.02%) 149.96
everque 1 ( 0.00%) 102 ( 0.00%) 102.00
other 1242 ( 0.01%) 207570 ( 0.00%) 167.13
icmp6 4895 ( 0.03%) 580624 ( 0.00%) 118.62
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 193 ( 0.00%) 183103 ( 0.00%) 948.72
tcpdump file: 200904022030.dump.gz (453.11 MB)