Traffic Trace Info
DumpFile: 200904181400.dump
FileSize: 1307.06MB
Id: 200904181400
StartTime: Sat Apr 18 14:00:00 2009
EndTime: Sat Apr 18 14:15:01 2009
TotalTime: 900.51 seconds
TotalCapSize: 1019.96MB CapLen: 96 bytes
# of packets: 18815189 (13892.87MB)
AvgRate: 129.43Mbps stddev:14.40M
IP flow (unique src/dst pair) Information
# of flows: 684762 (avg. 27.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.3% 3.1% 2.9% 2.0% 1.5% 1.3% 1.1% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 419500
Top 10 bandwidth usage (bytes/total in %):
17.2% 14.5% 14.2% 12.2% 4.1% 3.6% 3.2% 3.2% 2.4% 2.3%
# of IPv6 addresses: 1742
Top 10 bandwidth usage (bytes/total in %):
95.6% 95.5% 1.2% 0.8% 0.8% 0.8% 0.4% 0.4% 0.3% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904181400.pktlen.png)
detailed numbers
[ 32- 63]: 4042104
[ 64- 127]: 3936940
[ 128- 255]: 704574
[ 256- 511]: 500160
[ 512- 1023]: 481224
[ 1024- 2047]: 9150187
Protocol Breakdown
![[protocol breakdown chart]](200904181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18815189 (100.00%) 14567731755 (100.00%) 774.25
ip 18668006 ( 99.22%) 14396732636 ( 98.83%) 771.20
tcp 14800942 ( 78.66%) 12990327222 ( 89.17%) 877.67
http(s) 7413961 ( 39.40%) 10156989555 ( 69.72%) 1369.98
http(c) 2878086 ( 15.30%) 309403170 ( 2.12%) 107.50
squid 459293 ( 2.44%) 236725485 ( 1.62%) 515.41
smtp 277040 ( 1.47%) 72415067 ( 0.50%) 261.39
ftp 68712 ( 0.37%) 41079409 ( 0.28%) 597.85
pop3 7544 ( 0.04%) 2470509 ( 0.02%) 327.48
imap 2366 ( 0.01%) 636134 ( 0.00%) 268.86
telnet 3690 ( 0.02%) 286712 ( 0.00%) 77.70
ssh 36021 ( 0.19%) 6030783 ( 0.04%) 167.42
dns 3656 ( 0.02%) 3857736 ( 0.03%) 1055.18
bgp 148 ( 0.00%) 50771 ( 0.00%) 343.05
realaud 42 ( 0.00%) 7353 ( 0.00%) 175.07
rtsp 154273 ( 0.82%) 9768622 ( 0.07%) 63.32
icecast 656 ( 0.00%) 61452 ( 0.00%) 93.68
hotline 9 ( 0.00%) 1767 ( 0.00%) 196.33
other 3495423 ( 18.58%) 2150514355 ( 14.76%) 615.24
udp 3166813 ( 16.83%) 1326973855 ( 9.11%) 419.03
dns 999525 ( 5.31%) 191112152 ( 1.31%) 191.20
rip 2 ( 0.00%) 132 ( 0.00%) 66.00
realaud 4305 ( 0.02%) 262578 ( 0.00%) 60.99
halflif 71 ( 0.00%) 9425 ( 0.00%) 132.75
starcra 31 ( 0.00%) 30262 ( 0.00%) 976.19
everque 88 ( 0.00%) 16303 ( 0.00%) 185.26
unreal 7325 ( 0.04%) 5822112 ( 0.04%) 794.83
quake 58 ( 0.00%) 7266 ( 0.00%) 125.28
cuseeme 6 ( 0.00%) 574 ( 0.00%) 95.67
other 2154079 ( 11.45%) 1129587107 ( 7.75%) 524.39
icmp 657900 ( 3.50%) 54040350 ( 0.37%) 82.14
ipip 330 ( 0.00%) 41575 ( 0.00%) 125.98
ip6 12237 ( 0.07%) 9560237 ( 0.07%) 781.26
other 29784 ( 0.16%) 15789397 ( 0.11%) 530.13
frag 13431 ( 0.07%) 14430155 ( 0.10%) 1074.39
ip6 147183 ( 0.78%) 170999119 ( 1.17%) 1161.81
tcp6 125389 ( 0.67%) 167393892 ( 1.15%) 1335.00
http(s) 3278 ( 0.02%) 1588830 ( 0.01%) 484.69
http(c) 7335 ( 0.04%) 1044710 ( 0.01%) 142.43
smtp 144 ( 0.00%) 27071 ( 0.00%) 187.99
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
bgp 373 ( 0.00%) 31520 ( 0.00%) 84.50
other 114254 ( 0.61%) 164700979 ( 1.13%) 1441.53
udp6 15984 ( 0.08%) 2493827 ( 0.02%) 156.02
dns 14821 ( 0.08%) 2311668 ( 0.02%) 155.97
other 1163 ( 0.01%) 182159 ( 0.00%) 156.63
icmp6 5354 ( 0.03%) 707627 ( 0.00%) 132.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 426 ( 0.00%) 399693 ( 0.00%) 938.25
tcpdump file: 200904181400.dump.gz (447.75 MB)