Traffic Trace Info
DumpFile: 200904251400.dump
FileSize: 2070.06MB
Id: 200904251400
StartTime: Sat Apr 25 14:00:01 2009
EndTime: Sat Apr 25 14:15:01 2009
TotalTime: 900.03 seconds
TotalCapSize: 1599.64MB CapLen: 96 bytes
# of packets: 30826529 (19836.75MB)
AvgRate: 184.91Mbps stddev:14.96M
IP flow (unique src/dst pair) Information
# of flows: 1522541 (avg. 20.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.4% 2.0% 1.7% 1.1% 1.0% 1.0% 1.0% 0.8% 0.6%
IP address Information
# of IPv4 addresses: 1021553
Top 10 bandwidth usage (bytes/total in %):
23.2% 9.0% 7.5% 5.6% 3.5% 3.5% 3.0% 2.6% 2.3% 2.3%
# of IPv6 addresses: 1002
Top 10 bandwidth usage (bytes/total in %):
50.1% 50.1% 49.3% 36.7% 12.7% 0.2% 0.1% 0.1% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904251400.pktlen.png)
detailed numbers
[ 32- 63]: 7010190
[ 64- 127]: 6903139
[ 128- 255]: 2038155
[ 256- 511]: 930774
[ 512- 1023]: 819308
[ 1024- 2047]: 13124963
Protocol Breakdown
![[protocol breakdown chart]](200904251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30826529 (100.00%) 20800337144 (100.00%) 674.75
ip 29822252 ( 96.74%) 19461937627 ( 93.57%) 652.60
tcp 19891700 ( 64.53%) 15627761800 ( 75.13%) 785.64
http(s) 7519694 ( 24.39%) 9801787998 ( 47.12%) 1303.48
http(c) 4675192 ( 15.17%) 1013791112 ( 4.87%) 216.84
squid 679936 ( 2.21%) 424670684 ( 2.04%) 624.57
smtp 337064 ( 1.09%) 54680092 ( 0.26%) 162.22
nntp 66 ( 0.00%) 28018 ( 0.00%) 424.52
ftp 47532 ( 0.15%) 22086981 ( 0.11%) 464.68
pop3 11818 ( 0.04%) 5219432 ( 0.03%) 441.65
imap 3515 ( 0.01%) 1543970 ( 0.01%) 439.25
telnet 15149 ( 0.05%) 1761014 ( 0.01%) 116.25
ssh 48470 ( 0.16%) 12981467 ( 0.06%) 267.82
dns 122784 ( 0.40%) 11125088 ( 0.05%) 90.61
bgp 159 ( 0.00%) 55555 ( 0.00%) 349.40
napster 174 ( 0.00%) 62861 ( 0.00%) 361.27
realaud 1098 ( 0.00%) 139759 ( 0.00%) 127.29
rtsp 94775 ( 0.31%) 112559567 ( 0.54%) 1187.65
icecast 13217 ( 0.04%) 1122110 ( 0.01%) 84.90
other 6321003 ( 20.51%) 4164092632 ( 20.02%) 658.77
udp 9058089 ( 29.38%) 3741671899 ( 17.99%) 413.08
dns 1441612 ( 4.68%) 267031302 ( 1.28%) 185.23
realaud 1967 ( 0.01%) 126637 ( 0.00%) 64.38
halflif 21628 ( 0.07%) 2202907 ( 0.01%) 101.85
starcra 393 ( 0.00%) 76956 ( 0.00%) 195.82
everque 3811 ( 0.01%) 3593343 ( 0.02%) 942.89
unreal 119 ( 0.00%) 25671 ( 0.00%) 215.72
quake 74 ( 0.00%) 11108 ( 0.00%) 150.11
cuseeme 3 ( 0.00%) 289 ( 0.00%) 96.33
other 7553377 ( 24.50%) 3466250140 ( 16.66%) 458.90
icmp 853580 ( 2.77%) 84504350 ( 0.41%) 99.00
ipip 291 ( 0.00%) 35981 ( 0.00%) 123.65
ipsec 82 ( 0.00%) 12956 ( 0.00%) 158.00
ip6 9539 ( 0.03%) 6530629 ( 0.03%) 684.62
other 8971 ( 0.03%) 1420012 ( 0.01%) 158.29
frag 72902 ( 0.24%) 56873289 ( 0.27%) 780.13
ip6 1004277 ( 3.26%) 1338399517 ( 6.43%) 1332.70
tcp6 982259 ( 3.19%) 1335030985 ( 6.42%) 1359.14
http(s) 2608 ( 0.01%) 1843681 ( 0.01%) 706.93
http(c) 4400 ( 0.01%) 914081 ( 0.00%) 207.75
smtp 324 ( 0.00%) 157040 ( 0.00%) 484.69
ssh 518612 ( 1.68%) 670941763 ( 3.23%) 1293.73
bgp 363 ( 0.00%) 30362 ( 0.00%) 83.64
other 455952 ( 1.48%) 661144058 ( 3.18%) 1450.03
udp6 16720 ( 0.05%) 2689638 ( 0.01%) 160.86
dns 16668 ( 0.05%) 2683917 ( 0.01%) 161.02
quake 2 ( 0.00%) 224 ( 0.00%) 112.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 49 ( 0.00%) 5390 ( 0.00%) 110.00
icmp6 5268 ( 0.02%) 674814 ( 0.00%) 128.10
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200904251400.dump.gz (755.92 MB)