Traffic Trace Info
DumpFile: 200904051400.dump
FileSize: 1131.84MB
Id: 200904051400
StartTime: Sun Apr 5 14:00:00 2009
EndTime: Sun Apr 5 14:15:00 2009
TotalTime: 899.71 seconds
TotalCapSize: 879.40MB CapLen: 96 bytes
# of packets: 16543357 (11769.65MB)
AvgRate: 109.74Mbps stddev:11.57M
IP flow (unique src/dst pair) Information
# of flows: 586112 (avg. 28.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.8% 1.8% 1.2% 1.2% 1.2% 1.1% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 394768
Top 10 bandwidth usage (bytes/total in %):
35.4% 19.3% 10.0% 8.8% 3.4% 3.3% 2.5% 2.5% 2.1% 1.8%
# of IPv6 addresses: 1671
Top 10 bandwidth usage (bytes/total in %):
66.5% 57.7% 15.0% 10.4% 8.8% 4.6% 3.8% 3.3% 1.5% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904051400.pktlen.png)
detailed numbers
[ 32- 63]: 3200958
[ 64- 127]: 3945532
[ 128- 255]: 688150
[ 256- 511]: 382326
[ 512- 1023]: 678810
[ 1024- 2047]: 7647581
Protocol Breakdown
![[protocol breakdown chart]](200904051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16543357 (100.00%) 12341373771 (100.00%) 746.00
ip 16514701 ( 99.83%) 12326864279 ( 99.88%) 746.42
tcp 12077042 ( 73.00%) 10193004048 ( 82.59%) 844.00
http(s) 4669355 ( 28.22%) 6267575929 ( 50.79%) 1342.28
http(c) 2495312 ( 15.08%) 212762180 ( 1.72%) 85.26
squid 400077 ( 2.42%) 218788600 ( 1.77%) 546.87
smtp 168314 ( 1.02%) 32710241 ( 0.27%) 194.34
nntp 50 ( 0.00%) 6162 ( 0.00%) 123.24
ftp 2512426 ( 15.19%) 2456200022 ( 19.90%) 977.62
pop3 9628 ( 0.06%) 4999680 ( 0.04%) 519.29
imap 27541 ( 0.17%) 37709460 ( 0.31%) 1369.21
telnet 25635 ( 0.15%) 1893243 ( 0.02%) 73.85
ssh 165901 ( 1.00%) 34312880 ( 0.28%) 206.83
dns 3810 ( 0.02%) 3865660 ( 0.03%) 1014.61
bgp 205 ( 0.00%) 106286 ( 0.00%) 518.47
napster 13 ( 0.00%) 848 ( 0.00%) 65.23
realaud 11 ( 0.00%) 802 ( 0.00%) 72.91
rtsp 22202 ( 0.13%) 18285507 ( 0.15%) 823.60
icecast 15578 ( 0.09%) 22411593 ( 0.18%) 1438.67
other 1560974 ( 9.44%) 881374355 ( 7.14%) 564.63
udp 3962259 ( 23.95%) 2081608083 ( 16.87%) 525.36
dns 1222290 ( 7.39%) 401611974 ( 3.25%) 328.57
realaud 17969 ( 0.11%) 8232153 ( 0.07%) 458.13
halflif 176 ( 0.00%) 28904 ( 0.00%) 164.23
starcra 24 ( 0.00%) 3244 ( 0.00%) 135.17
everque 82 ( 0.00%) 17033 ( 0.00%) 207.72
unreal 11 ( 0.00%) 4312 ( 0.00%) 392.00
quake 24 ( 0.00%) 2417 ( 0.00%) 100.71
cuseeme 11 ( 0.00%) 1718 ( 0.00%) 156.18
other 2721651 ( 16.45%) 1671690994 ( 13.55%) 614.22
icmp 434478 ( 2.63%) 42571431 ( 0.34%) 97.98
ipip 316 ( 0.00%) 39597 ( 0.00%) 125.31
ipsec 273 ( 0.00%) 46638 ( 0.00%) 170.84
ip6 30686 ( 0.19%) 8301608 ( 0.07%) 270.53
other 9647 ( 0.06%) 1292874 ( 0.01%) 134.02
frag 46466 ( 0.28%) 36663486 ( 0.30%) 789.04
ip6 28656 ( 0.17%) 14509492 ( 0.12%) 506.33
tcp6 14186 ( 0.09%) 12133312 ( 0.10%) 855.30
http(s) 2313 ( 0.01%) 1527533 ( 0.01%) 660.41
http(c) 3858 ( 0.02%) 798411 ( 0.01%) 206.95
smtp 97 ( 0.00%) 37141 ( 0.00%) 382.90
bgp 417 ( 0.00%) 39223 ( 0.00%) 94.06
other 7501 ( 0.05%) 9731004 ( 0.08%) 1297.29
udp6 10780 ( 0.07%) 1670791 ( 0.01%) 154.99
dns 9505 ( 0.06%) 1436727 ( 0.01%) 151.15
halflif 1 ( 0.00%) 116 ( 0.00%) 116.00
cuseeme 1 ( 0.00%) 98 ( 0.00%) 98.00
other 1273 ( 0.01%) 233850 ( 0.00%) 183.70
icmp6 3391 ( 0.02%) 446203 ( 0.00%) 131.58
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 269 ( 0.00%) 255106 ( 0.00%) 948.35
tcpdump file: 200904051400.dump.gz (387.38 MB)