Traffic Trace Info
DumpFile: 200904121400.dump
FileSize: 1008.28MB
Id: 200904121400
StartTime: Sun Apr 12 14:00:01 2009
EndTime: Sun Apr 12 14:15:00 2009
TotalTime: 899.47 seconds
TotalCapSize: 783.26MB CapLen: 96 bytes
# of packets: 14746184 (10872.10MB)
AvgRate: 101.37Mbps stddev:10.56M
IP flow (unique src/dst pair) Information
# of flows: 647255 (avg. 22.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.7% 2.7% 2.7% 2.0% 1.9% 1.9% 1.5% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 417028
Top 10 bandwidth usage (bytes/total in %):
10.8% 8.6% 7.7% 7.2% 6.8% 6.1% 3.9% 2.8% 2.8% 2.7%
# of IPv6 addresses: 962
Top 10 bandwidth usage (bytes/total in %):
27.8% 22.4% 22.2% 19.7% 11.0% 8.1% 4.8% 3.7% 3.7% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904121400.pktlen.png)
detailed numbers
[ 32- 63]: 3154085
[ 64- 127]: 2979935
[ 128- 255]: 644483
[ 256- 511]: 391432
[ 512- 1023]: 392936
[ 1024- 2047]: 7183313
Protocol Breakdown
![[protocol breakdown chart]](200904121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14746184 (100.00%) 11400221987 (100.00%) 773.10
ip 14721749 ( 99.83%) 11394413716 ( 99.95%) 773.99
tcp 11712019 ( 79.42%) 10132872860 ( 88.88%) 865.17
http(s) 4794163 ( 32.51%) 6595575991 ( 57.85%) 1375.75
http(c) 2418193 ( 16.40%) 217878708 ( 1.91%) 90.10
squid 382531 ( 2.59%) 231347286 ( 2.03%) 604.78
smtp 226050 ( 1.53%) 35651547 ( 0.31%) 157.72
ftp 49997 ( 0.34%) 12396414 ( 0.11%) 247.94
pop3 5383 ( 0.04%) 2473500 ( 0.02%) 459.50
imap 3131 ( 0.02%) 1060738 ( 0.01%) 338.79
telnet 14895 ( 0.10%) 2644470 ( 0.02%) 177.54
ssh 24147 ( 0.16%) 6354993 ( 0.06%) 263.18
dns 3820 ( 0.03%) 3849078 ( 0.03%) 1007.61
bgp 131 ( 0.00%) 36295 ( 0.00%) 277.06
realaud 26 ( 0.00%) 2678 ( 0.00%) 103.00
rtsp 2158 ( 0.01%) 1553064 ( 0.01%) 719.68
icecast 409 ( 0.00%) 31665 ( 0.00%) 77.42
hotline 4 ( 0.00%) 258 ( 0.00%) 64.50
other 3786976 ( 25.68%) 3022014421 ( 26.51%) 798.00
udp 2552547 ( 17.31%) 1219552351 ( 10.70%) 477.78
dns 802135 ( 5.44%) 161939335 ( 1.42%) 201.89
realaud 26 ( 0.00%) 6966 ( 0.00%) 267.92
halflif 808 ( 0.01%) 52813 ( 0.00%) 65.36
starcra 98 ( 0.00%) 21591 ( 0.00%) 220.32
everque 114 ( 0.00%) 36551 ( 0.00%) 320.62
unreal 45 ( 0.00%) 14362 ( 0.00%) 319.16
quake 21 ( 0.00%) 2749 ( 0.00%) 130.90
cuseeme 4 ( 0.00%) 393 ( 0.00%) 98.25
other 1749272 ( 11.86%) 1057457778 ( 9.28%) 604.51
icmp 437544 ( 2.97%) 39090254 ( 0.34%) 89.34
ipip 331 ( 0.00%) 41544 ( 0.00%) 125.51
ip6 13297 ( 0.09%) 2113503 ( 0.02%) 158.95
other 6011 ( 0.04%) 743204 ( 0.01%) 123.64
frag 1383 ( 0.01%) 1196526 ( 0.01%) 865.17
ip6 24433 ( 0.17%) 5808151 ( 0.05%) 237.72
tcp6 8840 ( 0.06%) 3518250 ( 0.03%) 397.99
http(s) 2611 ( 0.02%) 1311593 ( 0.01%) 502.33
http(c) 3661 ( 0.02%) 661607 ( 0.01%) 180.72
smtp 364 ( 0.00%) 124210 ( 0.00%) 341.24
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
bgp 373 ( 0.00%) 31553 ( 0.00%) 84.59
other 1826 ( 0.01%) 1388505 ( 0.01%) 760.41
udp6 11920 ( 0.08%) 1773175 ( 0.02%) 148.76
dns 11906 ( 0.08%) 1771627 ( 0.02%) 148.80
everque 1 ( 0.00%) 118 ( 0.00%) 118.00
other 13 ( 0.00%) 1430 ( 0.00%) 110.00
icmp6 3631 ( 0.02%) 511926 ( 0.00%) 140.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 720 ( 0.00%) 60.00
tcpdump file: 200904121400.dump.gz (344.76 MB)