Traffic Trace Info
DumpFile: 200904101400.dump
FileSize: 1479.72MB
Id: 200904101400
StartTime: Fri Apr 10 14:00:01 2009
EndTime: Fri Apr 10 14:15:00 2009
TotalTime: 899.25 seconds
TotalCapSize: 1155.78MB CapLen: 96 bytes
# of packets: 21228837 (14331.30MB)
AvgRate: 133.65Mbps stddev:15.56M
IP flow (unique src/dst pair) Information
# of flows: 672789 (avg. 31.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 1.5% 1.4% 1.4% 1.4% 1.3% 1.3% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 427309
Top 10 bandwidth usage (bytes/total in %):
10.3% 8.8% 5.2% 5.1% 4.0% 3.8% 3.7% 3.0% 2.9% 2.8%
# of IPv6 addresses: 2521
Top 10 bandwidth usage (bytes/total in %):
15.0% 15.0% 10.9% 10.5% 9.2% 8.8% 6.8% 5.7% 5.7% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904101400.pktlen.png)
detailed numbers
[ 32- 63]: 4864623
[ 64- 127]: 4925876
[ 128- 255]: 904280
[ 256- 511]: 608058
[ 512- 1023]: 617584
[ 1024- 2047]: 9308416
Protocol Breakdown
![[protocol breakdown chart]](200904101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21228837 (100.00%) 15027456737 (100.00%) 707.88
ip 21197268 ( 99.85%) 15018905127 ( 99.94%) 708.53
tcp 17281320 ( 81.40%) 13564895170 ( 90.27%) 784.95
http(s) 6927447 ( 32.63%) 9352800274 ( 62.24%) 1350.11
http(c) 5246987 ( 24.72%) 691217706 ( 4.60%) 131.74
squid 568910 ( 2.68%) 360624033 ( 2.40%) 633.89
smtp 268920 ( 1.27%) 95585396 ( 0.64%) 355.44
ftp 41380 ( 0.19%) 4329636 ( 0.03%) 104.63
pop3 31160 ( 0.15%) 24671249 ( 0.16%) 791.76
imap 3620 ( 0.02%) 837294 ( 0.01%) 231.30
telnet 3781 ( 0.02%) 280072 ( 0.00%) 74.07
ssh 348391 ( 1.64%) 271978293 ( 1.81%) 780.67
dns 4033 ( 0.02%) 3869334 ( 0.03%) 959.42
bgp 166 ( 0.00%) 60281 ( 0.00%) 363.14
napster 91 ( 0.00%) 6891 ( 0.00%) 75.73
rtsp 84017 ( 0.40%) 11049586 ( 0.07%) 131.52
icecast 245845 ( 1.16%) 15154636 ( 0.10%) 61.64
other 3506550 ( 16.52%) 2732403133 ( 18.18%) 779.23
udp 3457416 ( 16.29%) 1409411746 ( 9.38%) 407.65
dns 1050240 ( 4.95%) 226136513 ( 1.50%) 215.32
realaud 21682 ( 0.10%) 6288340 ( 0.04%) 290.03
halflif 36 ( 0.00%) 3413 ( 0.00%) 94.81
starcra 58 ( 0.00%) 11398 ( 0.00%) 196.52
everque 84 ( 0.00%) 16409 ( 0.00%) 195.35
unreal 210 ( 0.00%) 97333 ( 0.00%) 463.49
quake 20 ( 0.00%) 1663 ( 0.00%) 83.15
cuseeme 3 ( 0.00%) 206 ( 0.00%) 68.67
other 2384074 ( 11.23%) 1176724717 ( 7.83%) 493.58
icmp 418158 ( 1.97%) 38128472 ( 0.25%) 91.18
ipip 323 ( 0.00%) 40757 ( 0.00%) 126.18
ip6 29404 ( 0.14%) 4946921 ( 0.03%) 168.24
other 10647 ( 0.05%) 1482061 ( 0.01%) 139.20
frag 6023 ( 0.03%) 4662930 ( 0.03%) 774.19
ip6 31569 ( 0.15%) 8551610 ( 0.06%) 270.89
tcp6 7921 ( 0.04%) 4304448 ( 0.03%) 543.42
http(s) 2257 ( 0.01%) 2195867 ( 0.01%) 972.91
http(c) 3185 ( 0.02%) 506214 ( 0.00%) 158.94
smtp 115 ( 0.00%) 60260 ( 0.00%) 524.00
imap 131 ( 0.00%) 111046 ( 0.00%) 847.68
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
dns 2 ( 0.00%) 158 ( 0.00%) 79.00
bgp 377 ( 0.00%) 32671 ( 0.00%) 86.66
other 1849 ( 0.01%) 1397450 ( 0.01%) 755.79
udp6 19469 ( 0.09%) 3292957 ( 0.02%) 169.14
dns 16786 ( 0.08%) 2728577 ( 0.02%) 162.55
everque 1 ( 0.00%) 145 ( 0.00%) 145.00
quake 1 ( 0.00%) 101 ( 0.00%) 101.00
other 2681 ( 0.01%) 564134 ( 0.00%) 210.42
icmp6 3641 ( 0.02%) 501356 ( 0.00%) 137.70
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 508 ( 0.00%) 448769 ( 0.00%) 883.40
tcpdump file: 200904101400.dump.gz (521.87 MB)