Traffic Trace Info
DumpFile: 200904081400.dump
FileSize: 1375.93MB
Id: 200904081400
StartTime: Wed Apr 8 14:00:00 2009
EndTime: Wed Apr 8 14:15:01 2009
TotalTime: 900.62 seconds
TotalCapSize: 1072.99MB CapLen: 96 bytes
# of packets: 19852769 (11661.33MB)
AvgRate: 108.62Mbps stddev:11.37M
IP flow (unique src/dst pair) Information
# of flows: 859965 (avg. 23.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 1.8% 1.6% 1.4% 1.4% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 519421
Top 10 bandwidth usage (bytes/total in %):
16.8% 11.4% 5.5% 4.4% 4.1% 3.6% 3.6% 3.2% 2.1% 2.0%
# of IPv6 addresses: 1092
Top 10 bandwidth usage (bytes/total in %):
33.1% 33.1% 28.0% 28.0% 8.4% 8.4% 7.3% 5.3% 3.6% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904081400.pktlen.png)
detailed numbers
[ 32- 63]: 5216203
[ 64- 127]: 5121071
[ 128- 255]: 852165
[ 256- 511]: 558920
[ 512- 1023]: 870473
[ 1024- 2047]: 7233937
Protocol Breakdown
![[protocol breakdown chart]](200904081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19852769 (100.00%) 12227795274 (100.00%) 615.92
ip 19786734 ( 99.67%) 12206456229 ( 99.83%) 616.90
tcp 15767062 ( 79.42%) 11084130258 ( 90.65%) 702.99
http(s) 5574815 ( 28.08%) 7233231194 ( 59.15%) 1297.48
http(c) 4874206 ( 24.55%) 549648791 ( 4.50%) 112.77
squid 463590 ( 2.34%) 203285274 ( 1.66%) 438.50
smtp 302033 ( 1.52%) 104952714 ( 0.86%) 347.49
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 93570 ( 0.47%) 58169392 ( 0.48%) 621.67
pop3 9386 ( 0.05%) 3252398 ( 0.03%) 346.52
imap 4002 ( 0.02%) 386007 ( 0.00%) 96.45
telnet 7195 ( 0.04%) 738052 ( 0.01%) 102.58
ssh 446974 ( 2.25%) 145144044 ( 1.19%) 324.73
dns 4239 ( 0.02%) 3861643 ( 0.03%) 910.98
bgp 141 ( 0.00%) 48654 ( 0.00%) 345.06
napster 27 ( 0.00%) 2151 ( 0.00%) 79.67
realaud 22 ( 0.00%) 2888 ( 0.00%) 131.27
rtsp 635956 ( 3.20%) 515728890 ( 4.22%) 810.95
icecast 8792 ( 0.04%) 599057 ( 0.00%) 68.14
hotline 2 ( 0.00%) 140 ( 0.00%) 70.00
other 3342106 ( 16.83%) 2265078609 ( 18.52%) 677.74
udp 3124840 ( 15.74%) 1005496371 ( 8.22%) 321.78
dns 1284327 ( 6.47%) 271871745 ( 2.22%) 211.68
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 14409 ( 0.07%) 8084158 ( 0.07%) 561.05
halflif 619 ( 0.00%) 231079 ( 0.00%) 373.31
starcra 64 ( 0.00%) 9980 ( 0.00%) 155.94
everque 134 ( 0.00%) 22126 ( 0.00%) 165.12
unreal 420 ( 0.00%) 237174 ( 0.00%) 564.70
quake 30 ( 0.00%) 2895 ( 0.00%) 96.50
cuseeme 6 ( 0.00%) 1001 ( 0.00%) 166.83
other 1824476 ( 9.19%) 725000332 ( 5.93%) 397.37
icmp 827037 ( 4.17%) 67855442 ( 0.55%) 82.05
ipip 325 ( 0.00%) 39868 ( 0.00%) 122.67
ip6 24966 ( 0.13%) 4146417 ( 0.03%) 166.08
other 42504 ( 0.21%) 44787873 ( 0.37%) 1053.73
frag 4106 ( 0.02%) 3209808 ( 0.03%) 781.74
ip6 66035 ( 0.33%) 21339045 ( 0.17%) 323.15
tcp6 45309 ( 0.23%) 18042467 ( 0.15%) 398.21
http(s) 7298 ( 0.04%) 7885507 ( 0.06%) 1080.50
http(c) 27513 ( 0.14%) 2479676 ( 0.02%) 90.13
smtp 208 ( 0.00%) 67863 ( 0.00%) 326.26
ftp 1968 ( 0.01%) 190164 ( 0.00%) 96.63
imap 59 ( 0.00%) 14253 ( 0.00%) 241.58
ssh 9 ( 0.00%) 1126 ( 0.00%) 125.11
bgp 397 ( 0.00%) 36794 ( 0.00%) 92.68
other 7857 ( 0.04%) 7367084 ( 0.06%) 937.65
udp6 15879 ( 0.08%) 2669254 ( 0.02%) 168.10
dns 15865 ( 0.08%) 2667721 ( 0.02%) 168.15
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
cuseeme 2 ( 0.00%) 216 ( 0.00%) 108.00
other 11 ( 0.00%) 1210 ( 0.00%) 110.00
icmp6 4814 ( 0.02%) 622988 ( 0.01%) 129.41
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2 ( 0.00%) 120 ( 0.00%) 60.00
tcpdump file: 200904081400.dump.gz (492.58 MB)