Traffic Trace Info
DumpFile: 200904141400.dump
FileSize: 1454.68MB
Id: 200904141400
StartTime: Tue Apr 14 14:00:00 2009
EndTime: Tue Apr 14 14:15:00 2009
TotalTime: 900.14 seconds
TotalCapSize: 1133.03MB CapLen: 96 bytes
# of packets: 21079296 (14522.23MB)
AvgRate: 135.25Mbps stddev:11.69M
IP flow (unique src/dst pair) Information
# of flows: 886896 (avg. 23.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.5% 1.8% 1.6% 1.3% 1.3% 1.2% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 491872
Top 10 bandwidth usage (bytes/total in %):
9.5% 9.5% 7.1% 5.9% 5.4% 5.1% 4.7% 4.2% 2.6% 2.3%
# of IPv6 addresses: 1334
Top 10 bandwidth usage (bytes/total in %):
29.3% 23.5% 10.2% 8.7% 7.5% 5.5% 5.4% 3.8% 3.7% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904141400.pktlen.png)
detailed numbers
[ 32- 63]: 4763900
[ 64- 127]: 4456969
[ 128- 255]: 1118548
[ 256- 511]: 480215
[ 512- 1023]: 726306
[ 1024- 2047]: 9533358
Protocol Breakdown
![[protocol breakdown chart]](200904141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21079296 (100.00%) 15227666638 (100.00%) 722.40
ip 21043570 ( 99.83%) 15220612235 ( 99.95%) 723.29
tcp 16704717 ( 79.25%) 13301747804 ( 87.35%) 796.29
http(s) 7618032 ( 36.14%) 10237658081 ( 67.23%) 1343.87
http(c) 4383657 ( 20.80%) 494017817 ( 3.24%) 112.70
squid 646127 ( 3.07%) 363936760 ( 2.39%) 563.26
smtp 307353 ( 1.46%) 96262724 ( 0.63%) 313.20
ftp 43385 ( 0.21%) 7859682 ( 0.05%) 181.16
pop3 17386 ( 0.08%) 7509259 ( 0.05%) 431.91
imap 5716 ( 0.03%) 697001 ( 0.00%) 121.94
telnet 7750 ( 0.04%) 953987 ( 0.01%) 123.10
ssh 454578 ( 2.16%) 69396284 ( 0.46%) 152.66
dns 4124 ( 0.02%) 3927407 ( 0.03%) 952.33
bgp 137 ( 0.00%) 45503 ( 0.00%) 332.14
napster 6 ( 0.00%) 752 ( 0.00%) 125.33
realaud 32 ( 0.00%) 3475 ( 0.00%) 108.59
rtsp 258329 ( 1.23%) 103361503 ( 0.68%) 400.12
icecast 14570 ( 0.07%) 935569 ( 0.01%) 64.21
hotline 4 ( 0.00%) 322 ( 0.00%) 80.50
other 2911680 ( 13.81%) 1913270618 ( 12.56%) 657.10
udp 3685756 ( 17.49%) 1845952904 ( 12.12%) 500.83
dns 1218400 ( 5.78%) 245169317 ( 1.61%) 201.22
realaud 3285 ( 0.02%) 339759 ( 0.00%) 103.43
halflif 45 ( 0.00%) 5159 ( 0.00%) 114.64
starcra 37 ( 0.00%) 5130 ( 0.00%) 138.65
everque 138 ( 0.00%) 26073 ( 0.00%) 188.93
unreal 1328 ( 0.01%) 597281 ( 0.00%) 449.76
quake 21 ( 0.00%) 2159 ( 0.00%) 102.81
cuseeme 7 ( 0.00%) 598 ( 0.00%) 85.43
other 2462402 ( 11.68%) 1599788155 ( 10.51%) 649.69
icmp 506847 ( 2.40%) 45785893 ( 0.30%) 90.33
ipip 321 ( 0.00%) 39556 ( 0.00%) 123.23
ip6 41332 ( 0.20%) 11479038 ( 0.08%) 277.73
other 104597 ( 0.50%) 15607040 ( 0.10%) 149.21
frag 65795 ( 0.31%) 51613260 ( 0.34%) 784.46
ip6 35726 ( 0.17%) 7054403 ( 0.05%) 197.46
tcp6 12427 ( 0.06%) 3505407 ( 0.02%) 282.08
http(s) 3308 ( 0.02%) 2048554 ( 0.01%) 619.27
http(c) 7132 ( 0.03%) 987232 ( 0.01%) 138.42
smtp 734 ( 0.00%) 317178 ( 0.00%) 432.12
ssh 6 ( 0.00%) 868 ( 0.00%) 144.67
dns 8 ( 0.00%) 914 ( 0.00%) 114.25
bgp 374 ( 0.00%) 31857 ( 0.00%) 85.18
other 865 ( 0.00%) 118804 ( 0.00%) 137.35
udp6 18690 ( 0.09%) 2952701 ( 0.02%) 157.98
dns 16953 ( 0.08%) 2798761 ( 0.02%) 165.09
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1736 ( 0.01%) 153833 ( 0.00%) 88.61
icmp6 4572 ( 0.02%) 591719 ( 0.00%) 129.42
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6 ( 0.00%) 360 ( 0.00%) 60.00
tcpdump file: 200904141400.dump.gz (500.53 MB)