Traffic Trace Info
DumpFile: 200904022245.dump
FileSize: 1414.09MB
Id: 200904022245
StartTime: Thu Apr 2 22:45:00 2009
EndTime: Thu Apr 2 23:00:01 2009
TotalTime: 900.83 seconds
TotalCapSize: 1095.04MB CapLen: 96 bytes
# of packets: 20900758 (14310.55MB)
AvgRate: 133.25Mbps stddev:12.59M
IP flow (unique src/dst pair) Information
# of flows: 1135677 (avg. 18.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.7% 2.1% 1.3% 1.3% 1.3% 1.2% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 699418
Top 10 bandwidth usage (bytes/total in %):
19.4% 16.7% 6.0% 5.0% 4.7% 3.4% 3.1% 2.8% 2.8% 2.8%
# of IPv6 addresses: 2032
Top 10 bandwidth usage (bytes/total in %):
28.5% 19.9% 15.5% 15.5% 9.9% 9.0% 8.7% 5.0% 5.0% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904022245.pktlen.png)
detailed numbers
[ 32- 63]: 4705856
[ 64- 127]: 4422505
[ 128- 255]: 1463887
[ 256- 511]: 441132
[ 512- 1023]: 488177
[ 1024- 2047]: 9379201
Protocol Breakdown
![[protocol breakdown chart]](200904022245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20900758 (100.00%) 15005702483 (100.00%) 717.95
ip 20863855 ( 99.82%) 14997528317 ( 99.95%) 718.83
tcp 15347563 ( 73.43%) 12971120160 ( 86.44%) 845.16
http(s) 8014111 ( 38.34%) 10908741714 ( 72.70%) 1361.19
http(c) 4227713 ( 20.23%) 330293033 ( 2.20%) 78.13
squid 337565 ( 1.62%) 280504106 ( 1.87%) 830.96
smtp 387534 ( 1.85%) 90845046 ( 0.61%) 234.42
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 51055 ( 0.24%) 25464426 ( 0.17%) 498.76
pop3 12617 ( 0.06%) 4815997 ( 0.03%) 381.71
imap 17086 ( 0.08%) 11349123 ( 0.08%) 664.24
telnet 14380 ( 0.07%) 6744562 ( 0.04%) 469.02
ssh 19115 ( 0.09%) 4372217 ( 0.03%) 228.73
dns 24233 ( 0.12%) 5509577 ( 0.04%) 227.36
bgp 142 ( 0.00%) 48364 ( 0.00%) 340.59
napster 18 ( 0.00%) 1124 ( 0.00%) 62.44
realaud 13 ( 0.00%) 946 ( 0.00%) 72.77
rtsp 305 ( 0.00%) 53324 ( 0.00%) 174.83
icecast 390 ( 0.00%) 29114 ( 0.00%) 74.65
hotline 29 ( 0.00%) 2410 ( 0.00%) 83.10
other 2241033 ( 10.72%) 1302331637 ( 8.68%) 581.13
udp 4574832 ( 21.89%) 1904273759 ( 12.69%) 416.25
dns 1903591 ( 9.11%) 319078493 ( 2.13%) 167.62
realaud 20811 ( 0.10%) 8459510 ( 0.06%) 406.49
halflif 78 ( 0.00%) 7943 ( 0.00%) 101.83
starcra 70 ( 0.00%) 12996 ( 0.00%) 185.66
everque 114 ( 0.00%) 19340 ( 0.00%) 169.65
unreal 26 ( 0.00%) 6205 ( 0.00%) 238.65
quake 35 ( 0.00%) 2709 ( 0.00%) 77.40
cuseeme 7 ( 0.00%) 551 ( 0.00%) 78.71
other 2646863 ( 12.66%) 1576369927 ( 10.51%) 595.56
icmp 841959 ( 4.03%) 101892610 ( 0.68%) 121.02
ipip 363 ( 0.00%) 44961 ( 0.00%) 123.86
ipsec 273 ( 0.00%) 46638 ( 0.00%) 170.84
ip6 34409 ( 0.16%) 10656005 ( 0.07%) 309.69
other 64456 ( 0.31%) 9494184 ( 0.06%) 147.30
frag 56865 ( 0.27%) 59120350 ( 0.39%) 1039.66
ip6 36903 ( 0.18%) 8174166 ( 0.05%) 221.50
tcp6 15724 ( 0.08%) 4753774 ( 0.03%) 302.33
http(s) 2630 ( 0.01%) 1653031 ( 0.01%) 628.53
http(c) 9650 ( 0.05%) 1281197 ( 0.01%) 132.77
smtp 535 ( 0.00%) 256114 ( 0.00%) 478.72
imap 166 ( 0.00%) 72846 ( 0.00%) 438.83
ssh 4 ( 0.00%) 408 ( 0.00%) 102.00
dns 13 ( 0.00%) 1459 ( 0.00%) 112.23
bgp 395 ( 0.00%) 34987 ( 0.00%) 88.57
other 2331 ( 0.01%) 1453732 ( 0.01%) 623.65
udp6 16272 ( 0.08%) 2594151 ( 0.02%) 159.42
dns 14024 ( 0.07%) 2084033 ( 0.01%) 148.60
starcra 1 ( 0.00%) 111 ( 0.00%) 111.00
other 2247 ( 0.01%) 510007 ( 0.00%) 226.97
icmp6 4624 ( 0.02%) 586207 ( 0.00%) 126.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 253 ( 0.00%) 235954 ( 0.00%) 932.62
tcpdump file: 200904022245.dump.gz (506.49 MB)