Traffic Trace Info
DumpFile: 200904151400.dump
FileSize: 1361.27MB
Id: 200904151400
StartTime: Wed Apr 15 14:00:00 2009
EndTime: Wed Apr 15 14:15:01 2009
TotalTime: 900.04 seconds
TotalCapSize: 1063.02MB CapLen: 96 bytes
# of packets: 19545532 (13060.43MB)
AvgRate: 121.72Mbps stddev:11.84M
IP flow (unique src/dst pair) Information
# of flows: 771509 (avg. 25.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 3.2% 2.7% 2.2% 1.4% 1.3% 1.3% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 495981
Top 10 bandwidth usage (bytes/total in %):
7.8% 6.1% 5.8% 5.8% 5.1% 3.8% 3.3% 3.3% 3.2% 3.2%
# of IPv6 addresses: 2130
Top 10 bandwidth usage (bytes/total in %):
96.1% 95.4% 0.9% 0.7% 0.7% 0.6% 0.4% 0.4% 0.3% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904151400.pktlen.png)
detailed numbers
[ 32- 63]: 4336201
[ 64- 127]: 4544521
[ 128- 255]: 845337
[ 256- 511]: 631590
[ 512- 1023]: 633056
[ 1024- 2047]: 8554827
Protocol Breakdown
![[protocol breakdown chart]](200904151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19545532 (100.00%) 13694857145 (100.00%) 700.66
ip 19387543 ( 99.19%) 13506956721 ( 98.63%) 696.68
tcp 15137312 ( 77.45%) 11699285708 ( 85.43%) 772.88
http(s) 4969834 ( 25.43%) 6340693108 ( 46.30%) 1275.84
http(c) 4634453 ( 23.71%) 1450869413 ( 10.59%) 313.06
squid 723343 ( 3.70%) 409511623 ( 2.99%) 566.14
smtp 298714 ( 1.53%) 96085033 ( 0.70%) 321.66
nntp 71 ( 0.00%) 7195 ( 0.00%) 101.34
ftp 49475 ( 0.25%) 18704729 ( 0.14%) 378.06
pop3 19684 ( 0.10%) 4776113 ( 0.03%) 242.64
imap 9212 ( 0.05%) 6975024 ( 0.05%) 757.17
telnet 6830 ( 0.03%) 856954 ( 0.01%) 125.47
ssh 67484 ( 0.35%) 10899942 ( 0.08%) 161.52
dns 3855 ( 0.02%) 3868799 ( 0.03%) 1003.58
bgp 200 ( 0.00%) 102162 ( 0.00%) 510.81
napster 49 ( 0.00%) 4193 ( 0.00%) 85.57
realaud 72 ( 0.00%) 6638 ( 0.00%) 92.19
rtsp 395944 ( 2.03%) 240600558 ( 1.76%) 607.66
icecast 12388 ( 0.06%) 8025053 ( 0.06%) 647.81
other 3945693 ( 20.19%) 3107290051 ( 22.69%) 787.51
udp 3692215 ( 18.89%) 1757746089 ( 12.84%) 476.07
dns 1126801 ( 5.77%) 232918335 ( 1.70%) 206.71
rip 1 ( 0.00%) 73 ( 0.00%) 73.00
realaud 1031 ( 0.01%) 65505 ( 0.00%) 63.54
halflif 29 ( 0.00%) 3311 ( 0.00%) 114.17
starcra 88 ( 0.00%) 40890 ( 0.00%) 464.66
everque 76 ( 0.00%) 12868 ( 0.00%) 169.32
unreal 1301 ( 0.01%) 415477 ( 0.00%) 319.35
quake 96 ( 0.00%) 19675 ( 0.00%) 204.95
cuseeme 8 ( 0.00%) 702 ( 0.00%) 87.75
other 2562009 ( 13.11%) 1524205164 ( 11.13%) 594.93
icmp 542504 ( 2.78%) 46376302 ( 0.34%) 85.49
ipip 310 ( 0.00%) 36718 ( 0.00%) 118.45
ip6 6468 ( 0.03%) 1488014 ( 0.01%) 230.06
other 8734 ( 0.04%) 2023890 ( 0.01%) 231.73
frag 16612 ( 0.08%) 12855581 ( 0.09%) 773.87
ip6 157989 ( 0.81%) 187900424 ( 1.37%) 1189.33
tcp6 133179 ( 0.68%) 183031140 ( 1.34%) 1374.32
http(s) 2763 ( 0.01%) 1409747 ( 0.01%) 510.22
http(c) 4413 ( 0.02%) 766625 ( 0.01%) 173.72
smtp 367 ( 0.00%) 142442 ( 0.00%) 388.13
ftp 29 ( 0.00%) 2719 ( 0.00%) 93.76
ssh 6 ( 0.00%) 868 ( 0.00%) 144.67
dns 10 ( 0.00%) 1098 ( 0.00%) 109.80
bgp 374 ( 0.00%) 32222 ( 0.00%) 86.16
other 125217 ( 0.64%) 180675419 ( 1.32%) 1442.90
udp6 20096 ( 0.10%) 3449676 ( 0.03%) 171.66
dns 18098 ( 0.09%) 2968780 ( 0.02%) 164.04
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1997 ( 0.01%) 480790 ( 0.00%) 240.76
icmp6 3740 ( 0.02%) 511549 ( 0.00%) 136.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 944 ( 0.00%) 903979 ( 0.01%) 957.60
tcpdump file: 200904151400.dump.gz (477.84 MB)