Traffic Trace Info
DumpFile: 200904022145.dump
FileSize: 1401.71MB
Id: 200904022145
StartTime: Thu Apr 2 21:45:01 2009
EndTime: Thu Apr 2 22:00:01 2009
TotalTime: 899.60 seconds
TotalCapSize: 1088.09MB CapLen: 96 bytes
# of packets: 20545916 (13741.76MB)
AvgRate: 128.13Mbps stddev:13.90M
IP flow (unique src/dst pair) Information
# of flows: 964109 (avg. 21.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.5% 1.4% 1.2% 1.2% 1.1% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 606031
Top 10 bandwidth usage (bytes/total in %):
16.7% 14.4% 9.8% 8.1% 6.7% 4.9% 2.4% 2.4% 1.7% 1.6%
# of IPv6 addresses: 2017
Top 10 bandwidth usage (bytes/total in %):
31.4% 22.0% 15.0% 15.0% 9.5% 9.4% 8.6% 5.1% 5.1% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904022145.pktlen.png)
detailed numbers
[ 32- 63]: 4271515
[ 64- 127]: 4786257
[ 128- 255]: 1455655
[ 256- 511]: 387407
[ 512- 1023]: 400740
[ 1024- 2047]: 9244342
Protocol Breakdown
![[protocol breakdown chart]](200904022145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20545916 (100.00%) 14409281574 (100.00%) 701.32
ip 20513887 ( 99.84%) 14400852416 ( 99.94%) 702.01
tcp 14690259 ( 71.50%) 12239698481 ( 84.94%) 833.18
http(s) 7511766 ( 36.56%) 10275036236 ( 71.31%) 1367.86
http(c) 4392671 ( 21.38%) 372578234 ( 2.59%) 84.82
squid 354984 ( 1.73%) 287710624 ( 2.00%) 810.49
smtp 365810 ( 1.78%) 122251433 ( 0.85%) 334.19
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 78415 ( 0.38%) 58610668 ( 0.41%) 747.44
pop3 16805 ( 0.08%) 7307176 ( 0.05%) 434.82
imap 8035 ( 0.04%) 5658688 ( 0.04%) 704.25
telnet 14560 ( 0.07%) 5681282 ( 0.04%) 390.20
ssh 180881 ( 0.88%) 23263630 ( 0.16%) 128.61
dns 24084 ( 0.12%) 5623553 ( 0.04%) 233.50
bgp 167 ( 0.00%) 63925 ( 0.00%) 382.78
napster 177 ( 0.00%) 27090 ( 0.00%) 153.05
realaud 506 ( 0.00%) 31400 ( 0.00%) 62.06
rtsp 7856 ( 0.04%) 10178882 ( 0.07%) 1295.68
icecast 7462 ( 0.04%) 8255973 ( 0.06%) 1106.40
hotline 1 ( 0.00%) 66 ( 0.00%) 66.00
other 1725949 ( 8.40%) 1057411821 ( 7.34%) 612.66
udp 4858876 ( 23.65%) 2037749609 ( 14.14%) 419.39
dns 1817710 ( 8.85%) 311891955 ( 2.16%) 171.59
realaud 20908 ( 0.10%) 8469128 ( 0.06%) 405.07
halflif 91 ( 0.00%) 12220 ( 0.00%) 134.29
starcra 77 ( 0.00%) 13103 ( 0.00%) 170.17
everque 94 ( 0.00%) 17514 ( 0.00%) 186.32
unreal 21 ( 0.00%) 3100 ( 0.00%) 147.62
quake 23 ( 0.00%) 2265 ( 0.00%) 98.48
cuseeme 11 ( 0.00%) 909 ( 0.00%) 82.64
other 3018871 ( 14.69%) 1717150308 ( 11.92%) 568.81
icmp 864482 ( 4.21%) 101688456 ( 0.71%) 117.63
ipip 328 ( 0.00%) 40392 ( 0.00%) 123.15
ipsec 273 ( 0.00%) 46638 ( 0.00%) 170.84
ip6 31790 ( 0.15%) 9687616 ( 0.07%) 304.74
other 67879 ( 0.33%) 11941224 ( 0.08%) 175.92
frag 56020 ( 0.27%) 59222118 ( 0.41%) 1057.16
ip6 32029 ( 0.16%) 8429158 ( 0.06%) 263.17
tcp6 10765 ( 0.05%) 4989517 ( 0.03%) 463.49
http(s) 3150 ( 0.02%) 2302272 ( 0.02%) 730.88
http(c) 4703 ( 0.02%) 961186 ( 0.01%) 204.38
smtp 442 ( 0.00%) 248012 ( 0.00%) 561.11
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 4 ( 0.00%) 458 ( 0.00%) 114.50
bgp 371 ( 0.00%) 32011 ( 0.00%) 86.28
other 2093 ( 0.01%) 1445406 ( 0.01%) 690.59
udp6 16235 ( 0.08%) 2615570 ( 0.02%) 161.11
dns 14154 ( 0.07%) 2116000 ( 0.01%) 149.50
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
other 2080 ( 0.01%) 499465 ( 0.00%) 240.13
icmp6 4751 ( 0.02%) 593189 ( 0.00%) 124.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 248 ( 0.00%) 226802 ( 0.00%) 914.52
tcpdump file: 200904022145.dump.gz (496.79 MB)