Traffic Trace Info
DumpFile: 200904131400.dump
FileSize: 1214.50MB
Id: 200904131400
StartTime: Mon Apr 13 14:00:00 2009
EndTime: Mon Apr 13 14:15:01 2009
TotalTime: 900.34 seconds
TotalCapSize: 953.01MB CapLen: 96 bytes
# of packets: 17136986 (10012.42MB)
AvgRate: 93.29Mbps stddev:11.81M
IP flow (unique src/dst pair) Information
# of flows: 787790 (avg. 21.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 3.0% 2.6% 2.3% 1.9% 1.8% 1.7% 1.7% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 479505
Top 10 bandwidth usage (bytes/total in %):
10.7% 5.6% 5.3% 5.1% 4.7% 3.3% 3.1% 2.9% 2.6% 2.3%
# of IPv6 addresses: 1032
Top 10 bandwidth usage (bytes/total in %):
44.4% 44.4% 12.6% 9.9% 9.8% 9.1% 5.6% 4.8% 3.5% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904131400.pktlen.png)
detailed numbers
[ 32- 63]: 3840739
[ 64- 127]: 4957846
[ 128- 255]: 950590
[ 256- 511]: 527536
[ 512- 1023]: 619930
[ 1024- 2047]: 6240345
Protocol Breakdown
![[protocol breakdown chart]](200904131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17136986 (100.00%) 10498778348 (100.00%) 612.64
ip 17099836 ( 99.78%) 10485717192 ( 99.88%) 613.21
tcp 13398974 ( 78.19%) 9659781756 ( 92.01%) 720.93
http(s) 5371847 ( 31.35%) 6977812979 ( 66.46%) 1298.96
http(c) 4212217 ( 24.58%) 552286179 ( 5.26%) 131.12
squid 543867 ( 3.17%) 335178205 ( 3.19%) 616.29
smtp 356313 ( 2.08%) 120322179 ( 1.15%) 337.69
ftp 56378 ( 0.33%) 22819758 ( 0.22%) 404.76
pop3 20822 ( 0.12%) 3639097 ( 0.03%) 174.77
imap 7657 ( 0.04%) 1697537 ( 0.02%) 221.70
telnet 6156 ( 0.04%) 695578 ( 0.01%) 112.99
ssh 445347 ( 2.60%) 221419407 ( 2.11%) 497.18
dns 7683 ( 0.04%) 6186914 ( 0.06%) 805.27
bgp 145 ( 0.00%) 50000 ( 0.00%) 344.83
napster 7 ( 0.00%) 872 ( 0.00%) 124.57
realaud 6 ( 0.00%) 1820 ( 0.00%) 303.33
rtsp 86116 ( 0.50%) 40969227 ( 0.39%) 475.74
icecast 12381 ( 0.07%) 8025319 ( 0.08%) 648.20
hotline 10 ( 0.00%) 1167 ( 0.00%) 116.70
other 2271991 ( 13.26%) 1368634674 ( 13.04%) 602.39
udp 2595294 ( 15.14%) 724472578 ( 6.90%) 279.15
dns 1306647 ( 7.62%) 253852211 ( 2.42%) 194.28
realaud 13670 ( 0.08%) 6132833 ( 0.06%) 448.63
halflif 49 ( 0.00%) 6970 ( 0.00%) 142.24
starcra 84 ( 0.00%) 15129 ( 0.00%) 180.11
everque 809 ( 0.00%) 602528 ( 0.01%) 744.78
unreal 6340 ( 0.04%) 2947347 ( 0.03%) 464.88
quake 7 ( 0.00%) 901 ( 0.00%) 128.71
cuseeme 8 ( 0.00%) 1316 ( 0.00%) 164.50
other 1267437 ( 7.40%) 460720331 ( 4.39%) 363.51
icmp 1067622 ( 6.23%) 82877735 ( 0.79%) 77.63
ipip 312 ( 0.00%) 39628 ( 0.00%) 127.01
ip6 23646 ( 0.14%) 15646140 ( 0.15%) 661.68
other 13988 ( 0.08%) 2899355 ( 0.03%) 207.27
frag 4822 ( 0.03%) 4439986 ( 0.04%) 920.78
ip6 37148 ( 0.22%) 13061036 ( 0.12%) 351.59
tcp6 16371 ( 0.10%) 9702384 ( 0.09%) 592.66
http(s) 9059 ( 0.05%) 7379140 ( 0.07%) 814.56
http(c) 4236 ( 0.02%) 751050 ( 0.01%) 177.30
smtp 878 ( 0.01%) 143922 ( 0.00%) 163.92
imap 2 ( 0.00%) 209 ( 0.00%) 104.50
ssh 38 ( 0.00%) 9332 ( 0.00%) 245.58
dns 15 ( 0.00%) 1604 ( 0.00%) 106.93
bgp 376 ( 0.00%) 32449 ( 0.00%) 86.30
other 1767 ( 0.01%) 1384678 ( 0.01%) 783.63
udp6 17319 ( 0.10%) 2871980 ( 0.03%) 165.83
dns 17291 ( 0.10%) 2868898 ( 0.03%) 165.92
quake 2 ( 0.00%) 222 ( 0.00%) 111.00
other 26 ( 0.00%) 2860 ( 0.00%) 110.00
icmp6 3410 ( 0.02%) 467779 ( 0.00%) 137.18
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 18 ( 0.00%) 14813 ( 0.00%) 822.94
tcpdump file: 200904131400.dump.gz (425.53 MB)