Traffic Trace Info
DumpFile: 200904221400.dump
FileSize: 1540.45MB
Id: 200904221400
StartTime: Wed Apr 22 14:00:01 2009
EndTime: Wed Apr 22 14:15:00 2009
TotalTime: 899.29 seconds
TotalCapSize: 1203.03MB CapLen: 96 bytes
# of packets: 22112052 (14467.08MB)
AvgRate: 134.95Mbps stddev:14.05M
IP flow (unique src/dst pair) Information
# of flows: 744984 (avg. 29.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.1% 2.0% 1.4% 1.2% 1.1% 1.1% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 461470
Top 10 bandwidth usage (bytes/total in %):
9.8% 9.3% 6.8% 6.6% 5.3% 4.8% 4.2% 4.0% 2.2% 2.2%
# of IPv6 addresses: 1120
Top 10 bandwidth usage (bytes/total in %):
92.2% 92.2% 1.4% 1.4% 1.0% 0.9% 0.7% 0.7% 0.7% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904221400.pktlen.png)
detailed numbers
[ 32- 63]: 5488218
[ 64- 127]: 5221261
[ 128- 255]: 896973
[ 256- 511]: 543053
[ 512- 1023]: 545700
[ 1024- 2047]: 9416847
Protocol Breakdown
![[protocol breakdown chart]](200904221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22112052 (100.00%) 15169829400 (100.00%) 686.04
ip 21927013 ( 99.16%) 14988648475 ( 98.81%) 683.57
tcp 17934562 ( 81.11%) 14077969495 ( 92.80%) 784.96
http(s) 8041828 ( 36.37%) 10934311801 ( 72.08%) 1359.68
http(c) 5041438 ( 22.80%) 498532654 ( 3.29%) 98.89
squid 548494 ( 2.48%) 264388521 ( 1.74%) 482.03
smtp 285462 ( 1.29%) 84458016 ( 0.56%) 295.86
nntp 44 ( 0.00%) 2640 ( 0.00%) 60.00
ftp 87675 ( 0.40%) 38816075 ( 0.26%) 442.73
pop3 20604 ( 0.09%) 3702103 ( 0.02%) 179.68
imap 2516 ( 0.01%) 488515 ( 0.00%) 194.16
telnet 7454 ( 0.03%) 813651 ( 0.01%) 109.16
ssh 50657 ( 0.23%) 13831877 ( 0.09%) 273.05
dns 4177 ( 0.02%) 3892005 ( 0.03%) 931.77
bgp 199 ( 0.00%) 63196 ( 0.00%) 317.57
napster 38 ( 0.00%) 3218 ( 0.00%) 84.68
realaud 16 ( 0.00%) 2261 ( 0.00%) 141.31
rtsp 284655 ( 1.29%) 28575173 ( 0.19%) 100.39
icecast 2044 ( 0.01%) 132204 ( 0.00%) 64.68
hotline 8 ( 0.00%) 1535 ( 0.00%) 191.88
other 3557238 ( 16.09%) 2205935458 ( 14.54%) 620.13
udp 3027165 ( 13.69%) 810929809 ( 5.35%) 267.88
dns 1420704 ( 6.43%) 296656186 ( 1.96%) 208.81
realaud 7114 ( 0.03%) 474972 ( 0.00%) 66.77
halflif 117 ( 0.00%) 23401 ( 0.00%) 200.01
starcra 30 ( 0.00%) 6145 ( 0.00%) 204.83
everque 79 ( 0.00%) 12960 ( 0.00%) 164.05
unreal 14 ( 0.00%) 4321 ( 0.00%) 308.64
quake 19 ( 0.00%) 2169 ( 0.00%) 114.16
cuseeme 6 ( 0.00%) 648 ( 0.00%) 108.00
other 1598998 ( 7.23%) 513693875 ( 3.39%) 321.26
icmp 904707 ( 4.09%) 85487681 ( 0.56%) 94.49
ipip 301 ( 0.00%) 39890 ( 0.00%) 132.52
ipsec 86 ( 0.00%) 13588 ( 0.00%) 158.00
ip6 5094 ( 0.02%) 1700990 ( 0.01%) 333.92
other 55098 ( 0.25%) 12507022 ( 0.08%) 227.00
frag 784 ( 0.00%) 780101 ( 0.01%) 995.03
ip6 185039 ( 0.84%) 181180925 ( 1.19%) 979.15
tcp6 160843 ( 0.73%) 177287921 ( 1.17%) 1102.24
http(s) 5393 ( 0.02%) 5108292 ( 0.03%) 947.21
http(c) 37306 ( 0.17%) 3289014 ( 0.02%) 88.16
smtp 974 ( 0.00%) 352660 ( 0.00%) 362.07
ftp 22 ( 0.00%) 4234 ( 0.00%) 192.45
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
bgp 378 ( 0.00%) 32231 ( 0.00%) 85.27
other 116765 ( 0.53%) 168500708 ( 1.11%) 1443.08
udp6 19437 ( 0.09%) 3252448 ( 0.02%) 167.33
dns 19420 ( 0.09%) 3250585 ( 0.02%) 167.38
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 15 ( 0.00%) 1650 ( 0.00%) 110.00
icmp6 4712 ( 0.02%) 628596 ( 0.00%) 133.40
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 17 ( 0.00%) 7880 ( 0.00%) 463.53
tcpdump file: 200904221400.dump.gz (522.11 MB)