Traffic Trace Info
DumpFile: 200904171400.dump
FileSize: 1443.25MB
Id: 200904171400
StartTime: Fri Apr 17 14:00:00 2009
EndTime: Fri Apr 17 14:15:00 2009
TotalTime: 899.97 seconds
TotalCapSize: 1129.93MB CapLen: 96 bytes
# of packets: 20530574 (13882.38MB)
AvgRate: 129.41Mbps stddev:16.73M
IP flow (unique src/dst pair) Information
# of flows: 816347 (avg. 25.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.6% 1.4% 1.4% 1.3% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 550580
Top 10 bandwidth usage (bytes/total in %):
13.7% 10.7% 6.9% 5.1% 3.7% 2.5% 2.4% 1.8% 1.7% 1.4%
# of IPv6 addresses: 1084
Top 10 bandwidth usage (bytes/total in %):
96.8% 96.4% 1.6% 1.6% 0.5% 0.2% 0.2% 0.1% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904171400.pktlen.png)
detailed numbers
[ 32- 63]: 4975937
[ 64- 127]: 4656787
[ 128- 255]: 714483
[ 256- 511]: 527462
[ 512- 1023]: 592567
[ 1024- 2047]: 9063338
Protocol Breakdown
![[protocol breakdown chart]](200904171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20530574 (100.00%) 14556733532 (100.00%) 709.03
ip 20262842 ( 98.70%) 14214856251 ( 97.65%) 701.52
tcp 16935276 ( 82.49%) 13196989499 ( 90.66%) 779.26
http(s) 6530039 ( 31.81%) 8661808287 ( 59.50%) 1326.46
http(c) 4597182 ( 22.39%) 832028573 ( 5.72%) 180.99
squid 729276 ( 3.55%) 385406368 ( 2.65%) 528.48
smtp 445179 ( 2.17%) 243914815 ( 1.68%) 547.90
ftp 116251 ( 0.57%) 31471451 ( 0.22%) 270.72
pop3 16422 ( 0.08%) 6991220 ( 0.05%) 425.72
imap 3513 ( 0.02%) 527442 ( 0.00%) 150.14
telnet 6050 ( 0.03%) 578711 ( 0.00%) 95.65
ssh 211055 ( 1.03%) 21733709 ( 0.15%) 102.98
dns 3856 ( 0.02%) 3867314 ( 0.03%) 1002.93
bgp 173 ( 0.00%) 75707 ( 0.00%) 437.61
napster 15 ( 0.00%) 1175 ( 0.00%) 78.33
realaud 1176 ( 0.01%) 889818 ( 0.01%) 756.65
rtsp 151031 ( 0.74%) 57180774 ( 0.39%) 378.60
icecast 35524 ( 0.17%) 30812451 ( 0.21%) 867.37
other 4088513 ( 19.91%) 2919674874 ( 20.06%) 714.12
udp 2535895 ( 12.35%) 910874312 ( 6.26%) 359.19
dns 1131921 ( 5.51%) 235035249 ( 1.61%) 207.64
realaud 5568 ( 0.03%) 375667 ( 0.00%) 67.47
halflif 3639 ( 0.02%) 219782 ( 0.00%) 60.40
starcra 33 ( 0.00%) 5992 ( 0.00%) 181.58
everque 123 ( 0.00%) 24768 ( 0.00%) 201.37
unreal 428 ( 0.00%) 173038 ( 0.00%) 404.29
quake 12 ( 0.00%) 1017 ( 0.00%) 84.75
cuseeme 4 ( 0.00%) 373 ( 0.00%) 93.25
other 1394084 ( 6.79%) 675023053 ( 4.64%) 484.21
icmp 750813 ( 3.66%) 95813818 ( 0.66%) 127.61
ipip 326 ( 0.00%) 40952 ( 0.00%) 125.62
ip6 6477 ( 0.03%) 4058300 ( 0.03%) 626.57
other 34055 ( 0.17%) 7079370 ( 0.05%) 207.88
frag 3160 ( 0.02%) 2604646 ( 0.02%) 824.26
ip6 267732 ( 1.30%) 341877281 ( 2.35%) 1276.94
tcp6 244203 ( 1.19%) 338149814 ( 2.32%) 1384.71
http(s) 1343 ( 0.01%) 633819 ( 0.00%) 471.94
http(c) 7809 ( 0.04%) 609621 ( 0.00%) 78.07
smtp 459 ( 0.00%) 273957 ( 0.00%) 596.86
ftp 44 ( 0.00%) 4064 ( 0.00%) 92.36
ssh 94 ( 0.00%) 17940 ( 0.00%) 190.85
dns 10 ( 0.00%) 1090 ( 0.00%) 109.00
bgp 388 ( 0.00%) 34765 ( 0.00%) 89.60
other 234056 ( 1.14%) 336574558 ( 2.31%) 1438.01
udp6 18231 ( 0.09%) 3020350 ( 0.02%) 165.67
dns 18190 ( 0.09%) 3015831 ( 0.02%) 165.80
halflif 1 ( 0.00%) 119 ( 0.00%) 119.00
other 40 ( 0.00%) 4400 ( 0.00%) 110.00
icmp6 5251 ( 0.03%) 693374 ( 0.00%) 132.05
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 17 ( 0.00%) 9663 ( 0.00%) 568.41
tcpdump file: 200904171400.dump.gz (507.57 MB)