Traffic Trace Info
DumpFile: 200904161400.dump
FileSize: 1224.23MB
Id: 200904161400
StartTime: Thu Apr 16 14:00:00 2009
EndTime: Thu Apr 16 14:15:00 2009
TotalTime: 899.87 seconds
TotalCapSize: 954.61MB CapLen: 96 bytes
# of packets: 17669299 (11016.87MB)
AvgRate: 102.69Mbps stddev:15.52M
IP flow (unique src/dst pair) Information
# of flows: 752154 (avg. 23.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.5% 1.9% 1.9% 1.6% 1.5% 1.4% 1.4% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 473147
Top 10 bandwidth usage (bytes/total in %):
8.0% 6.0% 5.1% 3.8% 3.0% 2.8% 2.6% 2.5% 2.5% 2.5%
# of IPv6 addresses: 1097
Top 10 bandwidth usage (bytes/total in %):
95.9% 95.1% 0.9% 0.7% 0.6% 0.5% 0.5% 0.4% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904161400.pktlen.png)
detailed numbers
[ 32- 63]: 4135065
[ 64- 127]: 4280548
[ 128- 255]: 845042
[ 256- 511]: 667181
[ 512- 1023]: 694382
[ 1024- 2047]: 7047081
Protocol Breakdown
![[protocol breakdown chart]](200904161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17669299 (100.00%) 11552021516 (100.00%) 653.79
ip 17512194 ( 99.11%) 11379107673 ( 98.50%) 649.78
tcp 13291286 ( 75.22%) 9824153437 ( 85.04%) 739.14
http(s) 5225259 ( 29.57%) 6750762152 ( 58.44%) 1291.95
http(c) 3927056 ( 22.23%) 530605465 ( 4.59%) 135.12
squid 595717 ( 3.37%) 285706740 ( 2.47%) 479.60
smtp 340697 ( 1.93%) 109804481 ( 0.95%) 322.29
ftp 54430 ( 0.31%) 5768197 ( 0.05%) 105.97
pop3 54131 ( 0.31%) 9375685 ( 0.08%) 173.20
imap 4019 ( 0.02%) 483152 ( 0.00%) 120.22
telnet 6839 ( 0.04%) 881588 ( 0.01%) 128.91
ssh 159460 ( 0.90%) 90446173 ( 0.78%) 567.20
dns 4179 ( 0.02%) 3892598 ( 0.03%) 931.47
bgp 421 ( 0.00%) 267144 ( 0.00%) 634.55
napster 266 ( 0.00%) 20674 ( 0.00%) 77.72
realaud 120 ( 0.00%) 10294 ( 0.00%) 85.78
rtsp 169537 ( 0.96%) 10848176 ( 0.09%) 63.99
icecast 11304 ( 0.06%) 9652369 ( 0.08%) 853.89
hotline 7 ( 0.00%) 572 ( 0.00%) 81.71
other 2737812 ( 15.49%) 2015589803 ( 17.45%) 736.20
udp 3401024 ( 19.25%) 1452135819 ( 12.57%) 426.97
dns 1107584 ( 6.27%) 237235650 ( 2.05%) 214.19
realaud 3193 ( 0.02%) 3334016 ( 0.03%) 1044.16
halflif 110 ( 0.00%) 20777 ( 0.00%) 188.88
starcra 39 ( 0.00%) 6534 ( 0.00%) 167.54
everque 190 ( 0.00%) 33987 ( 0.00%) 178.88
unreal 676 ( 0.00%) 258870 ( 0.00%) 382.94
quake 9 ( 0.00%) 769 ( 0.00%) 85.44
cuseeme 3 ( 0.00%) 269 ( 0.00%) 89.67
other 2289088 ( 12.96%) 1211160569 ( 10.48%) 529.10
icmp 689306 ( 3.90%) 57769223 ( 0.50%) 83.81
ipip 317 ( 0.00%) 38880 ( 0.00%) 122.65
ip6 5816 ( 0.03%) 1331939 ( 0.01%) 229.01
other 124445 ( 0.70%) 43678375 ( 0.38%) 350.99
frag 4414 ( 0.02%) 3695953 ( 0.03%) 837.33
ip6 157105 ( 0.89%) 172913843 ( 1.50%) 1100.63
tcp6 133714 ( 0.76%) 169076085 ( 1.46%) 1264.46
http(s) 2758 ( 0.02%) 1453910 ( 0.01%) 527.16
http(c) 14834 ( 0.08%) 1473555 ( 0.01%) 99.34
smtp 249 ( 0.00%) 102865 ( 0.00%) 413.11
ssh 585 ( 0.00%) 127590 ( 0.00%) 218.10
dns 13 ( 0.00%) 1463 ( 0.00%) 112.54
bgp 380 ( 0.00%) 44278 ( 0.00%) 116.52
other 114895 ( 0.65%) 165872424 ( 1.44%) 1443.69
udp6 20032 ( 0.11%) 3358158 ( 0.03%) 167.64
dns 19996 ( 0.11%) 3353828 ( 0.03%) 167.72
everque 2 ( 0.00%) 227 ( 0.00%) 113.50
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
other 33 ( 0.00%) 3994 ( 0.00%) 121.03
icmp6 3316 ( 0.02%) 464164 ( 0.00%) 139.98
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13 ( 0.00%) 11356 ( 0.00%) 873.54
tcpdump file: 200904161400.dump.gz (435.49 MB)