Traffic Trace Info
DumpFile: 200904061400.dump
FileSize: 1193.74MB
Id: 200904061400
StartTime: Mon Apr 6 14:00:01 2009
EndTime: Mon Apr 6 14:15:01 2009
TotalTime: 899.90 seconds
TotalCapSize: 934.07MB CapLen: 96 bytes
# of packets: 17016886 (11192.41MB)
AvgRate: 104.33Mbps stddev:14.90M
IP flow (unique src/dst pair) Information
# of flows: 673769 (avg. 25.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.4% 2.3% 1.9% 1.8% 1.7% 1.6% 1.2% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 442266
Top 10 bandwidth usage (bytes/total in %):
15.3% 13.9% 4.4% 3.8% 3.4% 3.1% 3.0% 2.4% 2.4% 2.4%
# of IPv6 addresses: 1855
Top 10 bandwidth usage (bytes/total in %):
60.8% 60.8% 8.9% 7.6% 7.6% 5.2% 4.4% 4.4% 4.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904061400.pktlen.png)
detailed numbers
[ 32- 63]: 4263845
[ 64- 127]: 3839788
[ 128- 255]: 727487
[ 256- 511]: 419325
[ 512- 1023]: 592205
[ 1024- 2047]: 7174236
Protocol Breakdown
![[protocol breakdown chart]](200904061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17016886 (100.00%) 11736092781 (100.00%) 689.67
ip 16924930 ( 99.46%) 11707435207 ( 99.76%) 691.73
tcp 14298997 ( 84.03%) 11043100947 ( 94.10%) 772.30
http(s) 5914929 ( 34.76%) 7660963585 ( 65.28%) 1295.19
http(c) 4329083 ( 25.44%) 701602523 ( 5.98%) 162.07
squid 331895 ( 1.95%) 147327255 ( 1.26%) 443.90
smtp 317111 ( 1.86%) 170949847 ( 1.46%) 539.09
ftp 101011 ( 0.59%) 62928639 ( 0.54%) 622.99
pop3 10817 ( 0.06%) 5796476 ( 0.05%) 535.87
imap 12827 ( 0.08%) 1184652 ( 0.01%) 92.36
telnet 6362 ( 0.04%) 701795 ( 0.01%) 110.31
ssh 75886 ( 0.45%) 15147710 ( 0.13%) 199.61
dns 18916 ( 0.11%) 18010940 ( 0.15%) 952.15
bgp 224 ( 0.00%) 117008 ( 0.00%) 522.36
napster 5 ( 0.00%) 627 ( 0.00%) 125.40
realaud 1883 ( 0.01%) 274372 ( 0.00%) 145.71
rtsp 98966 ( 0.58%) 13458824 ( 0.11%) 135.99
icecast 26359 ( 0.15%) 30330093 ( 0.26%) 1150.65
hotline 10 ( 0.00%) 878 ( 0.00%) 87.80
other 3052711 ( 17.94%) 2214305603 ( 18.87%) 725.36
udp 1994665 ( 11.72%) 597792022 ( 5.09%) 299.70
dns 1120583 ( 6.59%) 225476460 ( 1.92%) 201.21
realaud 19151 ( 0.11%) 8335981 ( 0.07%) 435.28
halflif 57 ( 0.00%) 7121 ( 0.00%) 124.93
starcra 23 ( 0.00%) 3414 ( 0.00%) 148.43
everque 76 ( 0.00%) 15667 ( 0.00%) 206.14
unreal 20 ( 0.00%) 3100 ( 0.00%) 155.00
quake 10 ( 0.00%) 800 ( 0.00%) 80.00
cuseeme 5 ( 0.00%) 545 ( 0.00%) 109.00
other 854330 ( 5.02%) 363906508 ( 3.10%) 425.96
icmp 573534 ( 3.37%) 51822022 ( 0.44%) 90.36
ipip 311 ( 0.00%) 38808 ( 0.00%) 124.78
ipsec 375 ( 0.00%) 62754 ( 0.00%) 167.34
ip6 26667 ( 0.16%) 5187561 ( 0.04%) 194.53
other 30381 ( 0.18%) 9431093 ( 0.08%) 310.43
frag 56039 ( 0.33%) 46012921 ( 0.39%) 821.09
ip6 91956 ( 0.54%) 28657574 ( 0.24%) 311.64
tcp6 72380 ( 0.43%) 25275304 ( 0.22%) 349.20
http(s) 1878 ( 0.01%) 1457268 ( 0.01%) 775.97
http(c) 31302 ( 0.18%) 2725728 ( 0.02%) 87.08
smtp 1209 ( 0.01%) 443293 ( 0.00%) 366.66
ftp 2094 ( 0.01%) 210384 ( 0.00%) 100.47
ssh 15 ( 0.00%) 1590 ( 0.00%) 106.00
bgp 419 ( 0.00%) 39895 ( 0.00%) 95.21
other 35463 ( 0.21%) 20397146 ( 0.17%) 575.17
udp6 15435 ( 0.09%) 2510950 ( 0.02%) 162.68
dns 14031 ( 0.08%) 2249589 ( 0.02%) 160.33
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1401 ( 0.01%) 261035 ( 0.00%) 186.32
icmp6 3728 ( 0.02%) 503339 ( 0.00%) 135.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 383 ( 0.00%) 363901 ( 0.00%) 950.13
tcpdump file: 200904061400.dump.gz (426.98 MB)