Traffic Trace Info
DumpFile: 200904261400.dump
FileSize: 1630.65MB
Id: 200904261400
StartTime: Sun Apr 26 14:00:00 2009
EndTime: Sun Apr 26 14:15:00 2009
TotalTime: 900.06 seconds
TotalCapSize: 1257.10MB CapLen: 96 bytes
# of packets: 24479792 (16143.71MB)
AvgRate: 150.47Mbps stddev:13.94M
IP flow (unique src/dst pair) Information
# of flows: 1097397 (avg. 22.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 4.0% 1.8% 1.5% 1.3% 1.3% 1.3% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 679166
Top 10 bandwidth usage (bytes/total in %):
26.9% 5.9% 5.2% 5.2% 4.8% 4.5% 4.5% 4.1% 3.9% 3.5%
# of IPv6 addresses: 944
Top 10 bandwidth usage (bytes/total in %):
81.3% 42.9% 38.4% 16.8% 16.8% 0.8% 0.6% 0.3% 0.3% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904261400.pktlen.png)
detailed numbers
[ 32- 63]: 5227050
[ 64- 127]: 5514190
[ 128- 255]: 1558623
[ 256- 511]: 713534
[ 512- 1023]: 675004
[ 1024- 2047]: 10791391
Protocol Breakdown
![[protocol breakdown chart]](200904261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24479792 (100.00%) 16927908319 (100.00%) 691.51
ip 24173045 ( 98.75%) 16522923859 ( 97.61%) 683.53
tcp 15735606 ( 64.28%) 12786906278 ( 75.54%) 812.61
http(s) 5846444 ( 23.88%) 7932351336 ( 46.86%) 1356.78
http(c) 2493609 ( 10.19%) 296971588 ( 1.75%) 119.09
squid 465372 ( 1.90%) 254784141 ( 1.51%) 547.48
smtp 284721 ( 1.16%) 57045240 ( 0.34%) 200.35
nntp 16 ( 0.00%) 976 ( 0.00%) 61.00
ftp 62503 ( 0.26%) 28785736 ( 0.17%) 460.55
pop3 5845 ( 0.02%) 2328139 ( 0.01%) 398.31
imap 2278 ( 0.01%) 694315 ( 0.00%) 304.79
telnet 4245 ( 0.02%) 330164 ( 0.00%) 77.78
ssh 39419 ( 0.16%) 6200391 ( 0.04%) 157.29
dns 3535 ( 0.01%) 3853997 ( 0.02%) 1090.24
bgp 169 ( 0.00%) 69433 ( 0.00%) 410.85
napster 3951 ( 0.02%) 331334 ( 0.00%) 83.86
realaud 812 ( 0.00%) 110819 ( 0.00%) 136.48
rtsp 61438 ( 0.25%) 16091501 ( 0.10%) 261.91
icecast 19114 ( 0.08%) 22088907 ( 0.13%) 1155.64
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 6442103 ( 26.32%) 4164863345 ( 24.60%) 646.51
udp 7713260 ( 31.51%) 3676007806 ( 21.72%) 476.58
dns 1326289 ( 5.42%) 240826660 ( 1.42%) 181.58
realaud 12045 ( 0.05%) 7879574 ( 0.05%) 654.18
halflif 1240 ( 0.01%) 98095 ( 0.00%) 79.11
starcra 318 ( 0.00%) 59583 ( 0.00%) 187.37
everque 222 ( 0.00%) 40291 ( 0.00%) 181.49
unreal 2199 ( 0.01%) 1292099 ( 0.01%) 587.58
quake 42 ( 0.00%) 9037 ( 0.00%) 215.17
cuseeme 7 ( 0.00%) 902 ( 0.00%) 128.86
other 6367466 ( 26.01%) 3425046051 ( 20.23%) 537.90
icmp 715413 ( 2.92%) 58372913 ( 0.34%) 81.59
ipip 305 ( 0.00%) 38274 ( 0.00%) 125.49
ipsec 80 ( 0.00%) 12640 ( 0.00%) 158.00
ip6 1969 ( 0.01%) 755244 ( 0.00%) 383.57
other 6412 ( 0.03%) 830704 ( 0.00%) 129.55
frag 40234 ( 0.16%) 34819717 ( 0.21%) 865.43
ip6 306747 ( 1.25%) 404984460 ( 2.39%) 1320.26
tcp6 289802 ( 1.18%) 402515557 ( 2.38%) 1388.93
http(s) 55955 ( 0.23%) 70454699 ( 0.42%) 1259.13
http(c) 4273 ( 0.02%) 970012 ( 0.01%) 227.01
smtp 616 ( 0.00%) 214311 ( 0.00%) 347.91
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
bgp 366 ( 0.00%) 30751 ( 0.00%) 84.02
other 228587 ( 0.93%) 330845002 ( 1.95%) 1447.35
udp6 12608 ( 0.05%) 1908487 ( 0.01%) 151.37
dns 12586 ( 0.05%) 1906057 ( 0.01%) 151.44
halflif 1 ( 0.00%) 118 ( 0.00%) 118.00
everque 1 ( 0.00%) 112 ( 0.00%) 112.00
other 20 ( 0.00%) 2200 ( 0.00%) 110.00
icmp6 4294 ( 0.02%) 541724 ( 0.00%) 126.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13 ( 0.00%) 14612 ( 0.00%) 1124.00
tcpdump file: 200904261400.dump.gz (600.11 MB)