Traffic Trace Info
DumpFile: 200904071400.dump
FileSize: 1387.21MB
Id: 200904071400
StartTime: Tue Apr 7 14:00:00 2009
EndTime: Tue Apr 7 14:15:00 2009
TotalTime: 899.86 seconds
TotalCapSize: 1079.15MB CapLen: 96 bytes
# of packets: 20188857 (13195.58MB)
AvgRate: 123.03Mbps stddev:12.95M
IP flow (unique src/dst pair) Information
# of flows: 681073 (avg. 29.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.3% 1.9% 1.6% 1.4% 1.3% 1.2% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 428460
Top 10 bandwidth usage (bytes/total in %):
15.5% 9.0% 7.8% 7.0% 4.3% 3.6% 3.3% 3.3% 3.1% 2.3%
# of IPv6 addresses: 1088
Top 10 bandwidth usage (bytes/total in %):
42.6% 24.2% 21.3% 14.9% 14.9% 10.5% 7.1% 4.4% 3.9% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904071400.pktlen.png)
detailed numbers
[ 32- 63]: 5046857
[ 64- 127]: 4535782
[ 128- 255]: 974890
[ 256- 511]: 527334
[ 512- 1023]: 618572
[ 1024- 2047]: 8485422
Protocol Breakdown
![[protocol breakdown chart]](200904071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20188857 (100.00%) 13836568938 (100.00%) 685.36
ip 20122021 ( 99.67%) 13821020988 ( 99.89%) 686.86
tcp 16000078 ( 79.25%) 12032890647 ( 86.96%) 752.05
http(s) 6765435 ( 33.51%) 9045204412 ( 65.37%) 1336.97
http(c) 4982126 ( 24.68%) 813549688 ( 5.88%) 163.29
squid 569289 ( 2.82%) 312374388 ( 2.26%) 548.71
smtp 301848 ( 1.50%) 114660663 ( 0.83%) 379.86
ftp 73919 ( 0.37%) 50059201 ( 0.36%) 677.22
pop3 9409 ( 0.05%) 5369590 ( 0.04%) 570.69
imap 5482 ( 0.03%) 581785 ( 0.00%) 106.13
telnet 6506 ( 0.03%) 733844 ( 0.01%) 112.79
ssh 282696 ( 1.40%) 41085219 ( 0.30%) 145.33
dns 4061 ( 0.02%) 3842359 ( 0.03%) 946.16
bgp 167 ( 0.00%) 86992 ( 0.00%) 520.91
napster 20 ( 0.00%) 3383 ( 0.00%) 169.15
realaud 19 ( 0.00%) 1528 ( 0.00%) 80.42
rtsp 208916 ( 1.03%) 38245964 ( 0.28%) 183.07
icecast 11796 ( 0.06%) 3222272 ( 0.02%) 273.17
hotline 12 ( 0.00%) 1019 ( 0.00%) 84.92
other 2778372 ( 13.76%) 1603868040 ( 11.59%) 577.27
udp 3668394 ( 18.17%) 1739640002 ( 12.57%) 474.22
dns 1323751 ( 6.56%) 347373317 ( 2.51%) 262.42
realaud 913 ( 0.00%) 55220 ( 0.00%) 60.48
halflif 32 ( 0.00%) 6982 ( 0.00%) 218.19
starcra 7416 ( 0.04%) 494384 ( 0.00%) 66.66
everque 61 ( 0.00%) 11746 ( 0.00%) 192.56
unreal 235 ( 0.00%) 96421 ( 0.00%) 410.30
quake 24 ( 0.00%) 5466 ( 0.00%) 227.75
cuseeme 6 ( 0.00%) 504 ( 0.00%) 84.00
other 2333850 ( 11.56%) 1388733421 ( 10.04%) 595.04
icmp 425233 ( 2.11%) 40586987 ( 0.29%) 95.45
ipip 309 ( 0.00%) 39792 ( 0.00%) 128.78
ip6 4801 ( 0.02%) 768162 ( 0.01%) 160.00
other 23206 ( 0.11%) 7095398 ( 0.05%) 305.76
frag 70166 ( 0.35%) 98907717 ( 0.71%) 1409.62
ip6 66836 ( 0.33%) 15547950 ( 0.11%) 232.63
tcp6 48202 ( 0.24%) 12574896 ( 0.09%) 260.88
http(s) 2421 ( 0.01%) 1977643 ( 0.01%) 816.87
http(c) 34662 ( 0.17%) 3101226 ( 0.02%) 89.47
smtp 420 ( 0.00%) 157859 ( 0.00%) 375.85
ftp 2350 ( 0.01%) 244522 ( 0.00%) 104.05
ssh 602 ( 0.00%) 147388 ( 0.00%) 244.83
bgp 413 ( 0.00%) 38487 ( 0.00%) 93.19
other 7334 ( 0.04%) 6907771 ( 0.05%) 941.88
udp6 14702 ( 0.07%) 2403624 ( 0.02%) 163.49
dns 14668 ( 0.07%) 2399901 ( 0.02%) 163.61
halflif 2 ( 0.00%) 203 ( 0.00%) 101.50
other 32 ( 0.00%) 3520 ( 0.00%) 110.00
icmp6 3901 ( 0.02%) 565290 ( 0.00%) 144.91
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1 ( 0.00%) 60 ( 0.00%) 60.00
tcpdump file: 200904071400.dump.gz (498.28 MB)