Traffic Trace Info
DumpFile: 200904041400.dump
FileSize: 1051.83MB
Id: 200904041400
StartTime: Sat Apr 4 14:00:00 2009
EndTime: Sat Apr 4 14:15:00 2009
TotalTime: 900.27 seconds
TotalCapSize: 815.98MB CapLen: 96 bytes
# of packets: 15455466 (10442.11MB)
AvgRate: 97.30Mbps stddev:12.21M
IP flow (unique src/dst pair) Information
# of flows: 657971 (avg. 23.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.0% 1.7% 1.3% 1.1% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 416290
Top 10 bandwidth usage (bytes/total in %):
16.4% 13.4% 5.5% 3.5% 3.4% 3.3% 3.3% 2.6% 2.1% 2.1%
# of IPv6 addresses: 1685
Top 10 bandwidth usage (bytes/total in %):
28.9% 25.1% 17.4% 14.7% 14.7% 9.1% 9.1% 7.8% 6.9% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904041400.pktlen.png)
detailed numbers
[ 32- 63]: 3601541
[ 64- 127]: 3560419
[ 128- 255]: 588057
[ 256- 511]: 361254
[ 512- 1023]: 406307
[ 1024- 2047]: 6937888
Protocol Breakdown
![[protocol breakdown chart]](200904041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15455466 (100.00%) 10949343873 (100.00%) 708.44
ip 15417788 ( 99.76%) 10940574994 ( 99.92%) 709.61
tcp 11690266 ( 75.64%) 9446203415 ( 86.27%) 808.04
http(s) 5325930 ( 34.46%) 7093763221 ( 64.79%) 1331.93
http(c) 3395448 ( 21.97%) 505602708 ( 4.62%) 148.91
squid 378329 ( 2.45%) 239150588 ( 2.18%) 632.12
smtp 220974 ( 1.43%) 74317808 ( 0.68%) 336.32
ftp 85389 ( 0.55%) 64760005 ( 0.59%) 758.41
pop3 3138 ( 0.02%) 1127012 ( 0.01%) 359.15
imap 2600 ( 0.02%) 338982 ( 0.00%) 130.38
telnet 12890 ( 0.08%) 5753462 ( 0.05%) 446.35
ssh 20375 ( 0.13%) 3288301 ( 0.03%) 161.39
dns 4362 ( 0.03%) 3898982 ( 0.04%) 893.85
bgp 193 ( 0.00%) 93309 ( 0.00%) 483.47
napster 12 ( 0.00%) 1009 ( 0.00%) 84.08
realaud 218 ( 0.00%) 23961 ( 0.00%) 109.91
rtsp 27437 ( 0.18%) 2016227 ( 0.02%) 73.49
icecast 30203 ( 0.20%) 32790039 ( 0.30%) 1085.66
hotline 3 ( 0.00%) 180 ( 0.00%) 60.00
other 2182760 ( 14.12%) 1419277321 ( 12.96%) 650.22
udp 3207777 ( 20.75%) 1445339516 ( 13.20%) 450.57
dns 870560 ( 5.63%) 181119543 ( 1.65%) 208.05
realaud 13690 ( 0.09%) 7299069 ( 0.07%) 533.17
halflif 82 ( 0.00%) 13003 ( 0.00%) 158.57
starcra 35 ( 0.00%) 5715 ( 0.00%) 163.29
everque 149108 ( 0.96%) 141785424 ( 1.29%) 950.89
unreal 15 ( 0.00%) 2122 ( 0.00%) 141.47
quake 18 ( 0.00%) 1770 ( 0.00%) 98.33
cuseeme 11 ( 0.00%) 1570 ( 0.00%) 142.73
other 2174183 ( 14.07%) 1115064684 ( 10.18%) 512.87
icmp 481504 ( 3.12%) 42444632 ( 0.39%) 88.15
ipip 300 ( 0.00%) 35120 ( 0.00%) 117.07
ipsec 272 ( 0.00%) 46528 ( 0.00%) 171.06
ip6 27731 ( 0.18%) 5147404 ( 0.05%) 185.62
other 9938 ( 0.06%) 1358379 ( 0.01%) 136.69
frag 29704 ( 0.19%) 23568321 ( 0.22%) 793.44
ip6 37678 ( 0.24%) 8768879 ( 0.08%) 232.73
tcp6 21956 ( 0.14%) 6351822 ( 0.06%) 289.30
http(s) 2245 ( 0.01%) 1528080 ( 0.01%) 680.66
http(c) 15219 ( 0.10%) 1671974 ( 0.02%) 109.86
smtp 751 ( 0.00%) 400919 ( 0.00%) 533.85
ftp 31 ( 0.00%) 2917 ( 0.00%) 94.10
ssh 91 ( 0.00%) 11882 ( 0.00%) 130.57
bgp 412 ( 0.00%) 38129 ( 0.00%) 92.55
other 3207 ( 0.02%) 2697921 ( 0.02%) 841.26
udp6 11884 ( 0.08%) 1814780 ( 0.02%) 152.71
dns 10593 ( 0.07%) 1560585 ( 0.01%) 147.32
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1290 ( 0.01%) 254088 ( 0.00%) 196.97
icmp6 3690 ( 0.02%) 485771 ( 0.00%) 131.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 118 ( 0.00%) 112426 ( 0.00%) 952.76
tcpdump file: 200904041400.dump.gz (371.20 MB)