Traffic Trace Info
DumpFile: 200904281400.dump
FileSize: 2860.98MB
Id: 200904281400
StartTime: Tue Apr 28 14:00:01 2009
EndTime: Tue Apr 28 14:15:01 2009
TotalTime: 900.29 seconds
TotalCapSize: -1888.58MB CapLen: 96 bytes
# of packets: 42831242 (27493.22MB)
AvgRate: 256.19Mbps stddev:17.37M
IP flow (unique src/dst pair) Information
# of flows: 1495148 (avg. 28.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 2.5% 0.8% 0.7% 0.6% 0.5% 0.4% 0.4% 0.4% 0.4%
IP address Information
# of IPv4 addresses: 910964
Top 10 bandwidth usage (bytes/total in %):
31.5% 7.4% 7.4% 5.1% 4.2% 3.7% 3.7% 3.6% 3.2% 2.6%
# of IPv6 addresses: 1084
Top 10 bandwidth usage (bytes/total in %):
80.5% 80.5% 12.4% 12.4% 3.4% 3.2% 0.9% 0.9% 0.8% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904281400.pktlen.png)
detailed numbers
[ 32- 63]: 9490842
[ 64- 127]: 10652876
[ 128- 255]: 2290472
[ 256- 511]: 1111077
[ 512- 1023]: 1203124
[ 1024- 2047]: 18082851
Protocol Breakdown
![[protocol breakdown chart]](200904281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42831242 (100.00%) 28828730915 (100.00%) 673.08
ip 42640697 ( 99.56%) 28589291377 ( 99.17%) 670.47
tcp 30171759 ( 70.44%) 24007443004 ( 83.28%) 795.69
http(s) 9271037 ( 21.65%) 12362505992 ( 42.88%) 1333.45
http(c) 5682181 ( 13.27%) 687822240 ( 2.39%) 121.05
squid 440928 ( 1.03%) 252986670 ( 0.88%) 573.76
smtp 460532 ( 1.08%) 149118324 ( 0.52%) 323.80
nntp 31 ( 0.00%) 2846 ( 0.00%) 91.81
ftp 68402 ( 0.16%) 31589615 ( 0.11%) 461.82
pop3 22695 ( 0.05%) 9430448 ( 0.03%) 415.53
imap 2024 ( 0.00%) 432502 ( 0.00%) 213.69
telnet 18802 ( 0.04%) 3304302 ( 0.01%) 175.74
ssh 2223923 ( 5.19%) 2131804999 ( 7.39%) 958.58
dns 3798 ( 0.01%) 3879659 ( 0.01%) 1021.50
bgp 158 ( 0.00%) 65785 ( 0.00%) 416.36
napster 1561 ( 0.00%) 107510 ( 0.00%) 68.87
realaud 1295 ( 0.00%) 161562 ( 0.00%) 124.76
rtsp 427080 ( 1.00%) 248845020 ( 0.86%) 582.67
icecast 5975 ( 0.01%) 1225512 ( 0.00%) 205.11
hotline 17 ( 0.00%) 2382 ( 0.00%) 140.12
other 11541260 ( 26.95%) 8124126868 ( 28.18%) 703.92
udp 11626351 ( 27.14%) 4407824268 ( 15.29%) 379.12
dns 1361668 ( 3.18%) 277793397 ( 0.96%) 204.01
rip 1 ( 0.00%) 66 ( 0.00%) 66.00
realaud 1947 ( 0.00%) 128230 ( 0.00%) 65.86
halflif 4847 ( 0.01%) 347894 ( 0.00%) 71.78
starcra 491 ( 0.00%) 92168 ( 0.00%) 187.71
everque 534 ( 0.00%) 73072 ( 0.00%) 136.84
unreal 267 ( 0.00%) 64509 ( 0.00%) 241.61
quake 3941 ( 0.01%) 3802693 ( 0.01%) 964.91
cuseeme 32 ( 0.00%) 4891 ( 0.00%) 152.84
other 10241947 ( 23.91%) 4124440531 ( 14.31%) 402.70
icmp 650671 ( 1.52%) 75536942 ( 0.26%) 116.09
ipip 314 ( 0.00%) 39002 ( 0.00%) 124.21
ipsec 80 ( 0.00%) 12640 ( 0.00%) 158.00
ip6 130755 ( 0.31%) 88722401 ( 0.31%) 678.54
other 60767 ( 0.14%) 9713120 ( 0.03%) 159.84
frag 33620 ( 0.08%) 24634446 ( 0.09%) 732.73
ip6 190545 ( 0.44%) 239439538 ( 0.83%) 1256.60
tcp6 163822 ( 0.38%) 235262670 ( 0.82%) 1436.09
http(s) 9406 ( 0.02%) 11948209 ( 0.04%) 1270.28
http(c) 3668 ( 0.01%) 691912 ( 0.00%) 188.63
smtp 487 ( 0.00%) 157699 ( 0.00%) 323.82
ftp 80 ( 0.00%) 10586 ( 0.00%) 132.32
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
bgp 360 ( 0.00%) 30106 ( 0.00%) 83.63
other 149816 ( 0.35%) 222423376 ( 0.77%) 1484.64
udp6 20001 ( 0.05%) 3362075 ( 0.01%) 168.10
dns 19986 ( 0.05%) 3360415 ( 0.01%) 168.14
starcra 1 ( 0.00%) 111 ( 0.00%) 111.00
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 1 ( 0.00%) 119 ( 0.00%) 119.00
other 12 ( 0.00%) 1320 ( 0.00%) 110.00
icmp6 6686 ( 0.02%) 805375 ( 0.00%) 120.46
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5338 ( 0.00%) 889.67
tcpdump file: 200904281400.dump.gz (1061.46 MB)