Traffic Trace Info
DumpFile: 200904271400.dump
FileSize: 2821.55MB
Id: 200904271400
StartTime: Mon Apr 27 14:00:01 2009
EndTime: Mon Apr 27 14:15:01 2009
TotalTime: 900.07 seconds
TotalCapSize: -1923.74MB CapLen: 96 bytes
# of packets: 42551099 (24414.43MB)
AvgRate: 227.54Mbps stddev:21.59M
IP flow (unique src/dst pair) Information
# of flows: 1541567 (avg. 27.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.3% 1.0% 0.9% 0.8% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 955864
Top 10 bandwidth usage (bytes/total in %):
39.9% 5.2% 4.9% 3.3% 2.6% 2.4% 2.0% 1.9% 1.8% 1.7%
# of IPv6 addresses: 1114
Top 10 bandwidth usage (bytes/total in %):
98.1% 71.5% 26.8% 0.5% 0.3% 0.2% 0.2% 0.2% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904271400.pktlen.png)
detailed numbers
[ 32- 63]: 9479792
[ 64- 127]: 12512483
[ 128- 255]: 2321811
[ 256- 511]: 1020578
[ 512- 1023]: 1305081
[ 1024- 2047]: 15911354
Protocol Breakdown
![[protocol breakdown chart]](200904271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42551099 (100.00%) 25600381003 (100.00%) 601.64
ip 42068851 ( 98.87%) 24944454340 ( 97.44%) 592.94
tcp 27562020 ( 64.77%) 19518697854 ( 76.24%) 708.17
http(s) 8352601 ( 19.63%) 10848144069 ( 42.37%) 1298.77
http(c) 5565672 ( 13.08%) 692354655 ( 2.70%) 124.40
squid 887075 ( 2.08%) 610085999 ( 2.38%) 687.75
smtp 366039 ( 0.86%) 156966004 ( 0.61%) 428.82
nntp 5 ( 0.00%) 536 ( 0.00%) 107.20
ftp 52669 ( 0.12%) 16628184 ( 0.06%) 315.71
pop3 14783 ( 0.03%) 3494359 ( 0.01%) 236.38
imap 2758 ( 0.01%) 484354 ( 0.00%) 175.62
telnet 8294 ( 0.02%) 959137 ( 0.00%) 115.64
ssh 442161 ( 1.04%) 56732036 ( 0.22%) 128.31
dns 5693 ( 0.01%) 5327364 ( 0.02%) 935.77
bgp 131 ( 0.00%) 36943 ( 0.00%) 282.01
napster 801 ( 0.00%) 147040 ( 0.00%) 183.57
realaud 1620 ( 0.00%) 206776 ( 0.00%) 127.64
rtsp 321001 ( 0.75%) 82978495 ( 0.32%) 258.50
icecast 19813 ( 0.05%) 10590699 ( 0.04%) 534.53
hotline 5 ( 0.00%) 654 ( 0.00%) 130.80
other 11520831 ( 27.08%) 7033527746 ( 27.47%) 610.51
udp 13345658 ( 31.36%) 5280118329 ( 20.63%) 395.64
dns 1597824 ( 3.76%) 315175547 ( 1.23%) 197.25
rip 2 ( 0.00%) 464 ( 0.00%) 232.00
realaud 12818 ( 0.03%) 5866707 ( 0.02%) 457.69
halflif 1249 ( 0.00%) 94724 ( 0.00%) 75.84
starcra 529 ( 0.00%) 101775 ( 0.00%) 192.39
everque 34683 ( 0.08%) 31132763 ( 0.12%) 897.64
unreal 132 ( 0.00%) 27477 ( 0.00%) 208.16
quake 63 ( 0.00%) 9534 ( 0.00%) 151.33
cuseeme 28 ( 0.00%) 4919 ( 0.00%) 175.68
other 11683666 ( 27.46%) 4925100574 ( 19.24%) 421.54
icmp 1046318 ( 2.46%) 122711791 ( 0.48%) 117.28
ipip 310 ( 0.00%) 37906 ( 0.00%) 122.28
ipsec 80 ( 0.00%) 12640 ( 0.00%) 158.00
ip6 34150 ( 0.08%) 8985896 ( 0.04%) 263.13
other 80315 ( 0.19%) 13889924 ( 0.05%) 172.94
frag 48576 ( 0.11%) 45689363 ( 0.18%) 940.57
ip6 482248 ( 1.13%) 655926663 ( 2.56%) 1360.14
tcp6 457245 ( 1.07%) 652092881 ( 2.55%) 1426.13
http(s) 3018 ( 0.01%) 2688871 ( 0.01%) 890.94
http(c) 3319 ( 0.01%) 616546 ( 0.00%) 185.76
smtp 528 ( 0.00%) 217095 ( 0.00%) 411.16
ssh 47 ( 0.00%) 13658 ( 0.00%) 290.60
dns 4 ( 0.00%) 462 ( 0.00%) 115.50
bgp 359 ( 0.00%) 29942 ( 0.00%) 83.40
other 449970 ( 1.06%) 648526307 ( 2.53%) 1441.27
udp6 18911 ( 0.04%) 3074575 ( 0.01%) 162.58
dns 18295 ( 0.04%) 3027757 ( 0.01%) 165.50
everque 1 ( 0.00%) 103 ( 0.00%) 103.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
other 614 ( 0.00%) 46610 ( 0.00%) 75.91
icmp6 6062 ( 0.01%) 755127 ( 0.00%) 124.57
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200904271400.dump.gz (1060.19 MB)