Traffic Trace Info
DumpFile: 200904231400.dump
FileSize: 1928.44MB
Id: 200904231400
StartTime: Thu Apr 23 14:00:00 2009
EndTime: Thu Apr 23 14:15:00 2009
TotalTime: 899.82 seconds
TotalCapSize: 1508.41MB CapLen: 96 bytes
# of packets: 27526085 (18759.20MB)
AvgRate: 174.84Mbps stddev:22.19M
IP flow (unique src/dst pair) Information
# of flows: 872148 (avg. 31.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 1.5% 1.4% 1.3% 1.1% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 534070
Top 10 bandwidth usage (bytes/total in %):
16.1% 14.6% 7.8% 7.7% 6.9% 3.2% 2.9% 2.8% 2.6% 2.1%
# of IPv6 addresses: 1083
Top 10 bandwidth usage (bytes/total in %):
97.1% 49.4% 47.8% 0.8% 0.5% 0.4% 0.4% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904231400.pktlen.png)
detailed numbers
[ 32- 63]: 6087399
[ 64- 127]: 6632022
[ 128- 255]: 1079348
[ 256- 511]: 694421
[ 512- 1023]: 710358
[ 1024- 2047]: 12322537
Protocol Breakdown
![[protocol breakdown chart]](200904231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27526085 (100.00%) 19670447093 (100.00%) 714.61
ip 27273457 ( 99.08%) 19348187016 ( 98.36%) 709.41
tcp 23005941 ( 83.58%) 17901413472 ( 91.01%) 778.12
http(s) 10412424 ( 37.83%) 14225772576 ( 72.32%) 1366.23
http(c) 6650264 ( 24.16%) 791856085 ( 4.03%) 119.07
squid 597316 ( 2.17%) 311980835 ( 1.59%) 522.30
smtp 377010 ( 1.37%) 147484426 ( 0.75%) 391.19
nntp 44 ( 0.00%) 4858 ( 0.00%) 110.41
ftp 54324 ( 0.20%) 15380027 ( 0.08%) 283.12
pop3 14083 ( 0.05%) 6678935 ( 0.03%) 474.26
imap 3309 ( 0.01%) 656229 ( 0.00%) 198.32
telnet 50281 ( 0.18%) 4110763 ( 0.02%) 81.76
ssh 1139243 ( 4.14%) 177012048 ( 0.90%) 155.38
dns 72009 ( 0.26%) 11391492 ( 0.06%) 158.20
bgp 154 ( 0.00%) 61038 ( 0.00%) 396.35
napster 31 ( 0.00%) 2286 ( 0.00%) 73.74
realaud 8 ( 0.00%) 2132 ( 0.00%) 266.50
rtsp 24179 ( 0.09%) 25656542 ( 0.13%) 1061.11
icecast 596 ( 0.00%) 43283 ( 0.00%) 72.62
hotline 24 ( 0.00%) 3508 ( 0.00%) 146.17
other 3610553 ( 13.12%) 2183212463 ( 11.10%) 604.68
udp 3202436 ( 11.63%) 1296743185 ( 6.59%) 404.92
dns 1355123 ( 4.92%) 286453740 ( 1.46%) 211.39
realaud 2170 ( 0.01%) 131512 ( 0.00%) 60.60
halflif 49 ( 0.00%) 8230 ( 0.00%) 167.96
starcra 23 ( 0.00%) 4195 ( 0.00%) 182.39
everque 88 ( 0.00%) 16036 ( 0.00%) 182.23
unreal 17 ( 0.00%) 3410 ( 0.00%) 200.59
quake 17 ( 0.00%) 1768 ( 0.00%) 104.00
cuseeme 21 ( 0.00%) 1818 ( 0.00%) 86.57
other 1844886 ( 6.70%) 1010095418 ( 5.14%) 547.51
icmp 789477 ( 2.87%) 78297496 ( 0.40%) 99.18
ipip 294 ( 0.00%) 37868 ( 0.00%) 128.80
ip6 6592 ( 0.02%) 1893343 ( 0.01%) 287.22
other 268717 ( 0.98%) 69801652 ( 0.35%) 259.76
frag 654 ( 0.00%) 629208 ( 0.00%) 962.09
ip6 252628 ( 0.92%) 322260077 ( 1.64%) 1275.63
tcp6 227660 ( 0.83%) 318399958 ( 1.62%) 1398.58
http(s) 3206 ( 0.01%) 2279679 ( 0.01%) 711.07
http(c) 5267 ( 0.02%) 961368 ( 0.00%) 182.53
smtp 832 ( 0.00%) 568094 ( 0.00%) 682.81
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
bgp 382 ( 0.00%) 33336 ( 0.00%) 87.27
other 217968 ( 0.79%) 314556699 ( 1.60%) 1443.13
udp6 18588 ( 0.07%) 3038671 ( 0.02%) 163.47
dns 18556 ( 0.07%) 3035144 ( 0.02%) 163.57
everque 1 ( 0.00%) 117 ( 0.00%) 117.00
other 31 ( 0.00%) 3410 ( 0.00%) 110.00
icmp6 6347 ( 0.02%) 813981 ( 0.00%) 128.25
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3 ( 0.00%) 3387 ( 0.00%) 1129.00
tcpdump file: 200904231400.dump.gz (668.68 MB)