Traffic Trace Info
DumpFile: 200904211400.dump
FileSize: 1785.50MB
Id: 200904211400
StartTime: Tue Apr 21 14:00:01 2009
EndTime: Tue Apr 21 14:15:00 2009
TotalTime: 899.33 seconds
TotalCapSize: 1398.39MB CapLen: 96 bytes
# of packets: 25364167 (18117.80MB)
AvgRate: 169.01Mbps stddev:14.24M
IP flow (unique src/dst pair) Information
# of flows: 762964 (avg. 33.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.3% 1.9% 1.5% 1.4% 1.3% 1.2% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 489738
Top 10 bandwidth usage (bytes/total in %):
26.8% 16.5% 8.1% 6.1% 3.5% 2.2% 2.0% 1.7% 1.6% 1.5%
# of IPv6 addresses: 1125
Top 10 bandwidth usage (bytes/total in %):
94.9% 94.9% 1.2% 0.9% 0.7% 0.7% 0.5% 0.5% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904211400.pktlen.png)
detailed numbers
[ 32- 63]: 6345575
[ 64- 127]: 4735902
[ 128- 255]: 1042926
[ 256- 511]: 635924
[ 512- 1023]: 693383
[ 1024- 2047]: 11910457
Protocol Breakdown
![[protocol breakdown chart]](200904211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25364167 (100.00%) 18997892503 (100.00%) 749.01
ip 25212070 ( 99.40%) 18822502709 ( 99.08%) 746.57
tcp 21691280 ( 85.52%) 17629676528 ( 92.80%) 812.75
http(s) 8346750 ( 32.91%) 11138839832 ( 58.63%) 1334.51
http(c) 5909213 ( 23.30%) 611146614 ( 3.22%) 103.42
squid 487895 ( 1.92%) 197164997 ( 1.04%) 404.11
smtp 397839 ( 1.57%) 115862293 ( 0.61%) 291.23
ftp 62278 ( 0.25%) 22611314 ( 0.12%) 363.07
pop3 20573 ( 0.08%) 9086166 ( 0.05%) 441.65
imap 3097 ( 0.01%) 698733 ( 0.00%) 225.62
telnet 8007 ( 0.03%) 1135696 ( 0.01%) 141.84
ssh 300580 ( 1.19%) 100931812 ( 0.53%) 335.79
dns 4688 ( 0.02%) 3946613 ( 0.02%) 841.85
bgp 152 ( 0.00%) 57493 ( 0.00%) 378.24
napster 28651 ( 0.11%) 38681460 ( 0.20%) 1350.09
realaud 31 ( 0.00%) 4152 ( 0.00%) 133.94
rtsp 386770 ( 1.52%) 109273618 ( 0.58%) 282.53
icecast 17635 ( 0.07%) 8366212 ( 0.04%) 474.41
hotline 11 ( 0.00%) 2258 ( 0.00%) 205.27
other 5717073 ( 22.54%) 5271821379 ( 27.75%) 922.12
udp 3001441 ( 11.83%) 1131125921 ( 5.95%) 376.86
dns 1258231 ( 4.96%) 250634536 ( 1.32%) 199.20
realaud 19816 ( 0.08%) 8366537 ( 0.04%) 422.21
halflif 30 ( 0.00%) 3940 ( 0.00%) 131.33
starcra 180 ( 0.00%) 23239 ( 0.00%) 129.11
everque 119 ( 0.00%) 18650 ( 0.00%) 156.72
unreal 614 ( 0.00%) 322061 ( 0.00%) 524.53
quake 12 ( 0.00%) 1060 ( 0.00%) 88.33
cuseeme 4 ( 0.00%) 332 ( 0.00%) 83.00
other 1722388 ( 6.79%) 871733951 ( 4.59%) 506.12
icmp 442580 ( 1.74%) 37785931 ( 0.20%) 85.38
ipip 319 ( 0.00%) 40434 ( 0.00%) 126.75
ip6 24429 ( 0.10%) 13919891 ( 0.07%) 569.81
other 52021 ( 0.21%) 9954004 ( 0.05%) 191.35
frag 3373 ( 0.01%) 2942586 ( 0.02%) 872.39
ip6 152097 ( 0.60%) 175389794 ( 0.92%) 1153.14
tcp6 126443 ( 0.50%) 171292338 ( 0.90%) 1354.70
http(s) 3929 ( 0.02%) 2359583 ( 0.01%) 600.56
http(c) 5330 ( 0.02%) 910571 ( 0.00%) 170.84
smtp 395 ( 0.00%) 150173 ( 0.00%) 380.18
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
bgp 388 ( 0.00%) 33989 ( 0.00%) 87.60
other 116396 ( 0.46%) 167837240 ( 0.88%) 1441.95
udp6 20358 ( 0.08%) 3369229 ( 0.02%) 165.50
dns 20345 ( 0.08%) 3367799 ( 0.02%) 165.53
other 13 ( 0.00%) 1430 ( 0.00%) 110.00
icmp6 5258 ( 0.02%) 718872 ( 0.00%) 136.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 5275 ( 0.00%) 659.38
tcpdump file: 200904211400.dump.gz (613.68 MB)