Traffic Trace Info
DumpFile: 200904091400.dump
FileSize: 1369.48MB
Id: 200904091400
StartTime: Thu Apr 9 14:00:01 2009
EndTime: Thu Apr 9 14:15:00 2009
TotalTime: 899.30 seconds
TotalCapSize: 1065.71MB CapLen: 96 bytes
# of packets: 19907278 (12147.15MB)
AvgRate: 113.30Mbps stddev:13.23M
IP flow (unique src/dst pair) Information
# of flows: 745207 (avg. 26.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 1.9% 1.6% 1.6% 1.5% 1.4% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 450305
Top 10 bandwidth usage (bytes/total in %):
17.1% 11.5% 8.2% 6.4% 5.0% 3.1% 2.5% 2.1% 2.1% 1.9%
# of IPv6 addresses: 1076
Top 10 bandwidth usage (bytes/total in %):
66.7% 66.7% 6.2% 6.2% 5.8% 3.8% 3.6% 3.4% 2.8% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904091400.pktlen.png)
detailed numbers
[ 32- 63]: 5038237
[ 64- 127]: 4957408
[ 128- 255]: 866510
[ 256- 511]: 499305
[ 512- 1023]: 817200
[ 1024- 2047]: 7728618
Protocol Breakdown
![[protocol breakdown chart]](200904091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19907278 (100.00%) 12737205455 (100.00%) 639.83
ip 19869818 ( 99.81%) 12716692591 ( 99.84%) 640.00
tcp 15234521 ( 76.53%) 10465822407 ( 82.17%) 686.98
http(s) 5859477 ( 29.43%) 7634256780 ( 59.94%) 1302.89
http(c) 5547076 ( 27.86%) 948134274 ( 7.44%) 170.93
squid 644730 ( 3.24%) 206626942 ( 1.62%) 320.49
smtp 262363 ( 1.32%) 87106270 ( 0.68%) 332.01
ftp 33421 ( 0.17%) 8723067 ( 0.07%) 261.01
pop3 9922 ( 0.05%) 4297775 ( 0.03%) 433.16
imap 5110 ( 0.03%) 594760 ( 0.00%) 116.39
telnet 20133 ( 0.10%) 1502329 ( 0.01%) 74.62
ssh 560336 ( 2.81%) 302262580 ( 2.37%) 539.43
dns 4509 ( 0.02%) 3885604 ( 0.03%) 861.74
bgp 139 ( 0.00%) 41717 ( 0.00%) 300.12
napster 148 ( 0.00%) 9833 ( 0.00%) 66.44
realaud 216 ( 0.00%) 309008 ( 0.00%) 1430.59
rtsp 107811 ( 0.54%) 21308726 ( 0.17%) 197.65
icecast 492 ( 0.00%) 58955 ( 0.00%) 119.83
other 2178638 ( 10.94%) 1246703787 ( 9.79%) 572.24
udp 3882071 ( 19.50%) 2035361201 ( 15.98%) 524.30
dns 1296495 ( 6.51%) 453770861 ( 3.56%) 350.00
realaud 21947 ( 0.11%) 10809289 ( 0.08%) 492.52
halflif 55 ( 0.00%) 5759 ( 0.00%) 104.71
starcra 52 ( 0.00%) 9946 ( 0.00%) 191.27
everque 87 ( 0.00%) 14945 ( 0.00%) 171.78
unreal 36 ( 0.00%) 10180 ( 0.00%) 282.78
quake 23 ( 0.00%) 1965 ( 0.00%) 85.43
cuseeme 8 ( 0.00%) 1232 ( 0.00%) 154.00
other 2551678 ( 12.82%) 1556210821 ( 12.22%) 609.88
icmp 486077 ( 2.44%) 42954115 ( 0.34%) 88.37
ipip 300 ( 0.00%) 37321 ( 0.00%) 124.40
ip6 253096 ( 1.27%) 170503186 ( 1.34%) 673.67
other 13753 ( 0.07%) 2014361 ( 0.02%) 146.47
frag 175855 ( 0.88%) 230411209 ( 1.81%) 1310.23
ip6 37460 ( 0.19%) 20512864 ( 0.16%) 547.59
tcp6 18855 ( 0.09%) 17528228 ( 0.14%) 929.63
http(s) 13591 ( 0.07%) 15454127 ( 0.12%) 1137.09
http(c) 3195 ( 0.02%) 580911 ( 0.00%) 181.82
smtp 195 ( 0.00%) 81222 ( 0.00%) 416.52
imap 36 ( 0.00%) 32092 ( 0.00%) 891.44
ssh 7 ( 0.00%) 954 ( 0.00%) 136.29
bgp 402 ( 0.00%) 36584 ( 0.00%) 91.00
other 1429 ( 0.01%) 1342338 ( 0.01%) 939.35
udp6 15053 ( 0.08%) 2484501 ( 0.02%) 165.05
dns 15006 ( 0.08%) 2479965 ( 0.02%) 165.26
everque 1 ( 0.00%) 124 ( 0.00%) 124.00
other 46 ( 0.00%) 4412 ( 0.00%) 95.91
icmp6 3514 ( 0.02%) 494121 ( 0.00%) 140.61
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 1934 ( 0.00%) 241.75
tcpdump file: 200904091400.dump.gz (492.63 MB)