Traffic Trace Info
DumpFile: 200904111400.dump
FileSize: 1060.21MB
Id: 200904111400
StartTime: Sat Apr 11 14:00:01 2009
EndTime: Sat Apr 11 14:15:00 2009
TotalTime: 899.28 seconds
TotalCapSize: 828.52MB CapLen: 96 bytes
# of packets: 15183344 (10298.27MB)
AvgRate: 96.03Mbps stddev:18.77M
IP flow (unique src/dst pair) Information
# of flows: 714616 (avg. 21.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 3.7% 2.4% 2.3% 2.2% 2.0% 1.9% 1.7% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 454012
Top 10 bandwidth usage (bytes/total in %):
10.9% 7.6% 7.3% 7.3% 6.2% 4.2% 3.8% 3.4% 2.7% 2.5%
# of IPv6 addresses: 1633
Top 10 bandwidth usage (bytes/total in %):
21.7% 16.5% 16.5% 14.7% 8.8% 8.8% 8.5% 7.0% 6.1% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904111400.pktlen.png)
detailed numbers
[ 32- 63]: 3729717
[ 64- 127]: 3292734
[ 128- 255]: 694828
[ 256- 511]: 416400
[ 512- 1023]: 351236
[ 1024- 2047]: 6698429
Protocol Breakdown
![[protocol breakdown chart]](200904111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15183344 (100.00%) 10798516552 (100.00%) 711.21
ip 15151169 ( 99.79%) 10790668156 ( 99.93%) 712.20
tcp 12689347 ( 83.57%) 10239045636 ( 94.82%) 806.90
http(s) 4952512 ( 32.62%) 6737549408 ( 62.39%) 1360.43
http(c) 2962123 ( 19.51%) 348705996 ( 3.23%) 117.72
squid 550874 ( 3.63%) 392468754 ( 3.63%) 712.45
smtp 269373 ( 1.77%) 56766340 ( 0.53%) 210.74
ftp 857711 ( 5.65%) 809555297 ( 7.50%) 943.86
pop3 9361 ( 0.06%) 4270509 ( 0.04%) 456.20
imap 3175 ( 0.02%) 1030269 ( 0.01%) 324.49
telnet 4280 ( 0.03%) 339834 ( 0.00%) 79.40
ssh 397003 ( 2.61%) 385183815 ( 3.57%) 970.23
dns 4188 ( 0.03%) 3868926 ( 0.04%) 923.81
bgp 139 ( 0.00%) 39619 ( 0.00%) 285.03
napster 217 ( 0.00%) 158763 ( 0.00%) 731.63
realaud 11 ( 0.00%) 762 ( 0.00%) 69.27
rtsp 213342 ( 1.41%) 92024080 ( 0.85%) 431.35
icecast 681 ( 0.00%) 78242 ( 0.00%) 114.89
other 2464317 ( 16.23%) 1406956948 ( 13.03%) 570.93
udp 2046370 ( 13.48%) 511847702 ( 4.74%) 250.12
dns 1207932 ( 7.96%) 221625400 ( 2.05%) 183.48
realaud 24 ( 0.00%) 3962 ( 0.00%) 165.08
halflif 46 ( 0.00%) 6432 ( 0.00%) 139.83
starcra 71 ( 0.00%) 14948 ( 0.00%) 210.54
everque 74136 ( 0.49%) 15737920 ( 0.15%) 212.28
unreal 619 ( 0.00%) 334658 ( 0.00%) 540.64
quake 14 ( 0.00%) 1606 ( 0.00%) 114.71
cuseeme 3 ( 0.00%) 431 ( 0.00%) 143.67
other 763505 ( 5.03%) 274109054 ( 2.54%) 359.01
icmp 379232 ( 2.50%) 34621684 ( 0.32%) 91.29
ipip 317 ( 0.00%) 40730 ( 0.00%) 128.49
ip6 25675 ( 0.17%) 3839559 ( 0.04%) 149.54
other 10228 ( 0.07%) 1272845 ( 0.01%) 124.45
frag 6648 ( 0.04%) 5364368 ( 0.05%) 806.91
ip6 32175 ( 0.21%) 7848396 ( 0.07%) 243.93
tcp6 13840 ( 0.09%) 4816615 ( 0.04%) 348.02
http(s) 3533 ( 0.02%) 2163414 ( 0.02%) 612.34
http(c) 3687 ( 0.02%) 713254 ( 0.01%) 193.45
smtp 317 ( 0.00%) 116617 ( 0.00%) 367.88
ftp 2129 ( 0.01%) 211675 ( 0.00%) 99.42
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
dns 10 ( 0.00%) 1084 ( 0.00%) 108.40
bgp 372 ( 0.00%) 31850 ( 0.00%) 85.62
other 3787 ( 0.02%) 1577939 ( 0.01%) 416.67
udp6 14322 ( 0.09%) 2212065 ( 0.02%) 154.45
dns 13173 ( 0.09%) 2025580 ( 0.02%) 153.77
other 1149 ( 0.01%) 186485 ( 0.00%) 162.30
icmp6 3658 ( 0.02%) 509946 ( 0.00%) 139.41
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 325 ( 0.00%) 305690 ( 0.00%) 940.58
tcpdump file: 200904111400.dump.gz (366.16 MB)