Traffic Trace Info
DumpFile: 200904201400.dump
FileSize: 1993.35MB
Id: 200904201400
StartTime: Mon Apr 20 14:00:00 2009
EndTime: Mon Apr 20 14:15:01 2009
TotalTime: 900.64 seconds
TotalCapSize: 1552.83MB CapLen: 96 bytes
# of packets: 28861152 (19017.22MB)
AvgRate: 177.13Mbps stddev:15.56M
IP flow (unique src/dst pair) Information
# of flows: 834104 (avg. 34.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.5% 2.1% 1.8% 1.5% 1.3% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 500835
Top 10 bandwidth usage (bytes/total in %):
13.3% 8.7% 3.9% 3.6% 3.6% 3.3% 3.3% 2.6% 2.2% 2.1%
# of IPv6 addresses: 2684
Top 10 bandwidth usage (bytes/total in %):
94.1% 94.1% 0.9% 0.8% 0.8% 0.6% 0.4% 0.4% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904201400.pktlen.png)
detailed numbers
[ 32- 63]: 7391978
[ 64- 127]: 6330446
[ 128- 255]: 1242345
[ 256- 511]: 676395
[ 512- 1023]: 901915
[ 1024- 2047]: 12318073
Protocol Breakdown
![[protocol breakdown chart]](200904201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28861152 (100.00%) 19941005273 (100.00%) 690.93
ip 28703610 ( 99.45%) 19763098056 ( 99.11%) 688.52
tcp 23325251 ( 80.82%) 16933634393 ( 84.92%) 725.98
http(s) 8616299 ( 29.85%) 11579090702 ( 58.07%) 1343.86
http(c) 5375787 ( 18.63%) 824229304 ( 4.13%) 153.32
squid 737029 ( 2.55%) 295565800 ( 1.48%) 401.02
smtp 282661 ( 0.98%) 91969223 ( 0.46%) 325.37
nntp 100 ( 0.00%) 17309 ( 0.00%) 173.09
ftp 58147 ( 0.20%) 22309401 ( 0.11%) 383.67
pop3 16631 ( 0.06%) 6477205 ( 0.03%) 389.47
imap 20046 ( 0.07%) 1811791 ( 0.01%) 90.38
telnet 12161 ( 0.04%) 1188704 ( 0.01%) 97.75
ssh 1100505 ( 3.81%) 171276798 ( 0.86%) 155.63
dns 4838 ( 0.02%) 3943685 ( 0.02%) 815.15
bgp 150 ( 0.00%) 49627 ( 0.00%) 330.85
napster 296 ( 0.00%) 203777 ( 0.00%) 688.44
realaud 24 ( 0.00%) 1859 ( 0.00%) 77.46
rtsp 241044 ( 0.84%) 22218052 ( 0.11%) 92.17
icecast 1747 ( 0.01%) 198992 ( 0.00%) 113.90
other 6857768 ( 23.76%) 3913059132 ( 19.62%) 570.60
udp 4621162 ( 16.01%) 2760202661 ( 13.84%) 597.30
dns 1249238 ( 4.33%) 251967155 ( 1.26%) 201.70
realaud 12428 ( 0.04%) 5697301 ( 0.03%) 458.42
halflif 31 ( 0.00%) 3070 ( 0.00%) 99.03
starcra 963 ( 0.00%) 69787 ( 0.00%) 72.47
everque 113 ( 0.00%) 18651 ( 0.00%) 165.05
unreal 5260 ( 0.02%) 4076386 ( 0.02%) 774.98
quake 12 ( 0.00%) 1581 ( 0.00%) 131.75
cuseeme 7 ( 0.00%) 566 ( 0.00%) 80.86
other 3352369 ( 11.62%) 2498211017 ( 12.53%) 745.21
icmp 704582 ( 2.44%) 56316862 ( 0.28%) 79.93
ipip 330 ( 0.00%) 40896 ( 0.00%) 123.93
ip6 14882 ( 0.05%) 6065481 ( 0.03%) 407.57
other 37403 ( 0.13%) 6837763 ( 0.03%) 182.81
frag 8294 ( 0.03%) 6796950 ( 0.03%) 819.50
ip6 157542 ( 0.55%) 177907217 ( 0.89%) 1129.27
tcp6 130608 ( 0.45%) 172922700 ( 0.87%) 1323.98
http(s) 3838 ( 0.01%) 2635742 ( 0.01%) 686.75
http(c) 3719 ( 0.01%) 707425 ( 0.00%) 190.22
smtp 328 ( 0.00%) 130102 ( 0.00%) 396.65
ftp 21 ( 0.00%) 3500 ( 0.00%) 166.67
ssh 19 ( 0.00%) 5218 ( 0.00%) 274.63
bgp 372 ( 0.00%) 31881 ( 0.00%) 85.70
other 122311 ( 0.42%) 169408832 ( 0.85%) 1385.07
udp6 21721 ( 0.08%) 3730600 ( 0.02%) 171.75
dns 18810 ( 0.07%) 3124966 ( 0.02%) 166.13
starcra 2 ( 0.00%) 718 ( 0.00%) 359.00
other 2909 ( 0.01%) 604916 ( 0.00%) 207.95
icmp6 4501 ( 0.02%) 611981 ( 0.00%) 135.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 682 ( 0.00%) 637856 ( 0.00%) 935.27
tcpdump file: 200904201400.dump.gz (709.84 MB)