Traffic Trace Info
DumpFile: 200904022300.dump
FileSize: 1407.96MB
Id: 200904022300
StartTime: Thu Apr 2 23:00:01 2009
EndTime: Thu Apr 2 23:15:00 2009
TotalTime: 898.88 seconds
TotalCapSize: 1092.51MB CapLen: 96 bytes
# of packets: 20665528 (14257.55MB)
AvgRate: 133.07Mbps stddev:19.38M
IP flow (unique src/dst pair) Information
# of flows: 1130229 (avg. 18.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.2% 2.4% 1.8% 1.5% 1.5% 1.2% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 654340
Top 10 bandwidth usage (bytes/total in %):
18.4% 18.2% 10.5% 10.4% 7.5% 5.4% 3.3% 3.0% 2.6% 2.5%
# of IPv6 addresses: 1797
Top 10 bandwidth usage (bytes/total in %):
24.9% 24.6% 16.9% 12.6% 12.5% 11.4% 11.4% 7.7% 7.6% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904022300.pktlen.png)
detailed numbers
[ 32- 63]: 5213367
[ 64- 127]: 3976439
[ 128- 255]: 1305373
[ 256- 511]: 367553
[ 512- 1023]: 371445
[ 1024- 2047]: 9431351
Protocol Breakdown
![[protocol breakdown chart]](200904022300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20665528 (100.00%) 14950124970 (100.00%) 723.43
ip 20618293 ( 99.77%) 14939955712 ( 99.93%) 724.60
tcp 16060421 ( 77.72%) 13636479385 ( 91.21%) 849.07
http(s) 7951584 ( 38.48%) 10900815244 ( 72.91%) 1370.90
http(c) 4443613 ( 21.50%) 331953327 ( 2.22%) 74.70
squid 209121 ( 1.01%) 125607964 ( 0.84%) 600.65
smtp 374988 ( 1.81%) 74837476 ( 0.50%) 199.57
ftp 45725 ( 0.22%) 19775944 ( 0.13%) 432.50
pop3 6568 ( 0.03%) 3649143 ( 0.02%) 555.59
imap 4676 ( 0.02%) 994952 ( 0.01%) 212.78
telnet 15214 ( 0.07%) 7307512 ( 0.05%) 480.31
ssh 26349 ( 0.13%) 4577530 ( 0.03%) 173.73
dns 19630 ( 0.09%) 3352060 ( 0.02%) 170.76
bgp 138 ( 0.00%) 51985 ( 0.00%) 376.70
napster 62 ( 0.00%) 4798 ( 0.00%) 77.39
realaud 78 ( 0.00%) 8227 ( 0.00%) 105.47
rtsp 374 ( 0.00%) 92564 ( 0.00%) 247.50
icecast 527 ( 0.00%) 48044 ( 0.00%) 91.17
hotline 3 ( 0.00%) 184 ( 0.00%) 61.33
other 2961722 ( 14.33%) 2163399491 ( 14.47%) 730.45
udp 3569996 ( 17.28%) 1182926815 ( 7.91%) 331.35
dns 1883655 ( 9.11%) 318010329 ( 2.13%) 168.83
realaud 9751 ( 0.05%) 3401613 ( 0.02%) 348.85
halflif 67 ( 0.00%) 7175 ( 0.00%) 107.09
starcra 72 ( 0.00%) 13656 ( 0.00%) 189.67
everque 79 ( 0.00%) 14910 ( 0.00%) 188.73
unreal 26 ( 0.00%) 3969 ( 0.00%) 152.65
quake 26 ( 0.00%) 4635 ( 0.00%) 178.27
cuseeme 10 ( 0.00%) 1249 ( 0.00%) 124.90
other 1676143 ( 8.11%) 861329541 ( 5.76%) 513.88
icmp 892438 ( 4.32%) 102590745 ( 0.69%) 114.96
ipip 296 ( 0.00%) 36674 ( 0.00%) 123.90
ipsec 274 ( 0.00%) 46796 ( 0.00%) 170.79
ip6 32154 ( 0.16%) 8559039 ( 0.06%) 266.19
other 62714 ( 0.30%) 9316258 ( 0.06%) 148.55
frag 49433 ( 0.24%) 55218220 ( 0.37%) 1117.03
ip6 47233 ( 0.23%) 10169138 ( 0.07%) 215.30
tcp6 27332 ( 0.13%) 6977463 ( 0.05%) 255.29
http(s) 2953 ( 0.01%) 1744824 ( 0.01%) 590.86
http(c) 20699 ( 0.10%) 2192150 ( 0.01%) 105.91
smtp 192 ( 0.00%) 68645 ( 0.00%) 357.53
imap 257 ( 0.00%) 258256 ( 0.00%) 1004.89
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 14 ( 0.00%) 1544 ( 0.00%) 110.29
bgp 388 ( 0.00%) 34629 ( 0.00%) 89.25
other 2827 ( 0.01%) 2677243 ( 0.02%) 947.03
udp6 15345 ( 0.07%) 2376579 ( 0.02%) 154.88
dns 14069 ( 0.07%) 2156195 ( 0.01%) 153.26
other 1276 ( 0.01%) 220384 ( 0.00%) 172.71
icmp6 4200 ( 0.02%) 503516 ( 0.00%) 119.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 326 ( 0.00%) 307500 ( 0.00%) 943.25
tcpdump file: 200904022300.dump.gz (496.28 MB)