Traffic Trace Info
DumpFile: 200904022230.dump
FileSize: 1440.32MB
Id: 200904022230
StartTime: Thu Apr 2 22:30:00 2009
EndTime: Thu Apr 2 22:45:00 2009
TotalTime: 899.73 seconds
TotalCapSize: 1116.51MB CapLen: 96 bytes
# of packets: 21209626 (14446.35MB)
AvgRate: 134.66Mbps stddev:14.96M
IP flow (unique src/dst pair) Information
# of flows: 986362 (avg. 21.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.6% 2.0% 2.0% 1.3% 1.2% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 626905
Top 10 bandwidth usage (bytes/total in %):
28.2% 15.0% 11.9% 7.3% 6.4% 4.7% 2.9% 2.8% 2.0% 2.0%
# of IPv6 addresses: 1770
Top 10 bandwidth usage (bytes/total in %):
30.7% 20.9% 15.1% 15.1% 9.8% 9.7% 5.7% 5.7% 5.6% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904022230.pktlen.png)
detailed numbers
[ 32- 63]: 4886911
[ 64- 127]: 4551037
[ 128- 255]: 1336927
[ 256- 511]: 433751
[ 512- 1023]: 463710
[ 1024- 2047]: 9537290
Protocol Breakdown
![[protocol breakdown chart]](200904022230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21209626 (100.00%) 15148096975 (100.00%) 714.21
ip 21171175 ( 99.82%) 15139651054 ( 99.94%) 715.11
tcp 15833457 ( 74.65%) 13299898168 ( 87.80%) 839.99
http(s) 8483034 ( 40.00%) 11554330166 ( 76.28%) 1362.05
http(c) 4833941 ( 22.79%) 384713263 ( 2.54%) 79.59
squid 453864 ( 2.14%) 394165528 ( 2.60%) 868.47
smtp 340960 ( 1.61%) 90250026 ( 0.60%) 264.69
ftp 51837 ( 0.24%) 25926649 ( 0.17%) 500.16
pop3 9924 ( 0.05%) 5752425 ( 0.04%) 579.65
imap 5198 ( 0.02%) 651195 ( 0.00%) 125.28
telnet 14604 ( 0.07%) 6073363 ( 0.04%) 415.87
ssh 10866 ( 0.05%) 1809174 ( 0.01%) 166.50
dns 24951 ( 0.12%) 8138900 ( 0.05%) 326.20
bgp 137 ( 0.00%) 41119 ( 0.00%) 300.14
napster 65 ( 0.00%) 5106 ( 0.00%) 78.55
realaud 31 ( 0.00%) 2028 ( 0.00%) 65.42
rtsp 934 ( 0.00%) 150654 ( 0.00%) 161.30
icecast 305 ( 0.00%) 23552 ( 0.00%) 77.22
hotline 11 ( 0.00%) 1048 ( 0.00%) 95.27
other 1602781 ( 7.56%) 827863132 ( 5.47%) 516.52
udp 4264059 ( 20.10%) 1713541300 ( 11.31%) 401.86
dns 1882592 ( 8.88%) 312229964 ( 2.06%) 165.85
realaud 21045 ( 0.10%) 8468349 ( 0.06%) 402.39
halflif 999 ( 0.00%) 62310 ( 0.00%) 62.37
starcra 87 ( 0.00%) 16644 ( 0.00%) 191.31
everque 120 ( 0.00%) 21620 ( 0.00%) 180.17
unreal 15 ( 0.00%) 2063 ( 0.00%) 137.53
quake 22 ( 0.00%) 1901 ( 0.00%) 86.41
cuseeme 17 ( 0.00%) 2190 ( 0.00%) 128.82
other 2358964 ( 11.12%) 1392614207 ( 9.19%) 590.35
icmp 985807 ( 4.65%) 110274927 ( 0.73%) 111.86
ipip 299 ( 0.00%) 37710 ( 0.00%) 126.12
ipsec 272 ( 0.00%) 46528 ( 0.00%) 171.06
ip6 30594 ( 0.14%) 8372901 ( 0.06%) 273.68
other 56687 ( 0.27%) 7479520 ( 0.05%) 131.94
frag 46301 ( 0.22%) 51401637 ( 0.34%) 1110.16
ip6 38451 ( 0.18%) 8445921 ( 0.06%) 219.65
tcp6 17887 ( 0.08%) 5332686 ( 0.04%) 298.13
http(s) 2852 ( 0.01%) 1790899 ( 0.01%) 627.94
http(c) 11379 ( 0.05%) 1550064 ( 0.01%) 136.22
smtp 987 ( 0.00%) 451666 ( 0.00%) 457.61
dns 9 ( 0.00%) 1002 ( 0.00%) 111.33
bgp 382 ( 0.00%) 33598 ( 0.00%) 87.95
other 2278 ( 0.01%) 1505457 ( 0.01%) 660.87
udp6 15616 ( 0.07%) 2283951 ( 0.02%) 146.26
dns 14294 ( 0.07%) 2066379 ( 0.01%) 144.56
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
starcra 1 ( 0.00%) 115 ( 0.00%) 115.00
other 1320 ( 0.01%) 217350 ( 0.00%) 164.66
icmp6 4629 ( 0.02%) 554911 ( 0.00%) 119.88
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 288 ( 0.00%) 270157 ( 0.00%) 938.05
tcpdump file: 200904022230.dump.gz (510.01 MB)