Traffic Trace Info
DumpFile: 200904291400.dump
FileSize: 2374.74MB
Id: 200904291400
StartTime: Wed Apr 29 14:00:01 2009
EndTime: Wed Apr 29 14:15:01 2009
TotalTime: 899.97 seconds
TotalCapSize: 1820.30MB CapLen: 96 bytes
# of packets: 36335293 (22748.68MB)
AvgRate: 212.04Mbps stddev:13.00M
IP flow (unique src/dst pair) Information
# of flows: 1552692 (avg. 23.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 964774
Top 10 bandwidth usage (bytes/total in %):
39.3% 5.7% 5.4% 5.4% 3.4% 2.9% 2.4% 2.4% 2.2% 2.1%
# of IPv6 addresses: 2179
Top 10 bandwidth usage (bytes/total in %):
98.2% 34.0% 33.0% 31.6% 0.4% 0.3% 0.3% 0.2% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904291400.pktlen.png)
detailed numbers
[ 32- 63]: 7502018
[ 64- 127]: 9639692
[ 128- 255]: 2039295
[ 256- 511]: 964949
[ 512- 1023]: 1044843
[ 1024- 2047]: 15144496
Protocol Breakdown
![[protocol breakdown chart]](200904291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36335293 (100.00%) 23853724656 (100.00%) 656.49
ip 35952223 ( 98.95%) 23340520018 ( 97.85%) 649.21
tcp 22448576 ( 61.78%) 17597829660 ( 73.77%) 783.92
http(s) 7035702 ( 19.36%) 9366048208 ( 39.26%) 1331.22
http(c) 3765178 ( 10.36%) 433333236 ( 1.82%) 115.09
squid 971808 ( 2.67%) 650529382 ( 2.73%) 669.40
smtp 346237 ( 0.95%) 99253467 ( 0.42%) 286.66
nntp 230 ( 0.00%) 29117 ( 0.00%) 126.60
ftp 94261 ( 0.26%) 9867866 ( 0.04%) 104.69
pop3 11079 ( 0.03%) 4737021 ( 0.02%) 427.57
imap 3007 ( 0.01%) 1499192 ( 0.01%) 498.57
telnet 9376 ( 0.03%) 1251861 ( 0.01%) 133.52
ssh 22291 ( 0.06%) 6831461 ( 0.03%) 306.47
dns 4826 ( 0.01%) 5260300 ( 0.02%) 1089.99
bgp 191 ( 0.00%) 86616 ( 0.00%) 453.49
napster 282 ( 0.00%) 24576 ( 0.00%) 87.15
realaud 1499 ( 0.00%) 186546 ( 0.00%) 124.45
rtsp 316726 ( 0.87%) 291957958 ( 1.22%) 921.80
icecast 7995 ( 0.02%) 2785412 ( 0.01%) 348.39
hotline 17 ( 0.00%) 2672 ( 0.00%) 157.18
other 9857228 ( 27.13%) 6724067260 ( 28.19%) 682.15
udp 12814686 ( 35.27%) 5670040893 ( 23.77%) 442.46
dns 1449555 ( 3.99%) 327803471 ( 1.37%) 226.14
realaud 15855 ( 0.04%) 13412728 ( 0.06%) 845.96
halflif 181 ( 0.00%) 27785 ( 0.00%) 153.51
starcra 492 ( 0.00%) 93717 ( 0.00%) 190.48
everque 422 ( 0.00%) 65458 ( 0.00%) 155.11
unreal 211 ( 0.00%) 38882 ( 0.00%) 184.27
quake 47 ( 0.00%) 8007 ( 0.00%) 170.36
cuseeme 20 ( 0.00%) 3216 ( 0.00%) 160.80
other 11335924 ( 31.20%) 5324970777 ( 22.32%) 469.74
icmp 612401 ( 1.69%) 54259144 ( 0.23%) 88.60
ipip 321 ( 0.00%) 39192 ( 0.00%) 122.09
ipsec 80 ( 0.00%) 12640 ( 0.00%) 158.00
ip6 31835 ( 0.09%) 8549219 ( 0.04%) 268.55
other 44324 ( 0.12%) 9789270 ( 0.04%) 220.86
frag 80491 ( 0.22%) 77008152 ( 0.32%) 956.73
ip6 383070 ( 1.05%) 513204638 ( 2.15%) 1339.72
tcp6 357140 ( 0.98%) 508751551 ( 2.13%) 1424.52
http(s) 2797 ( 0.01%) 2231098 ( 0.01%) 797.68
http(c) 4727 ( 0.01%) 821176 ( 0.00%) 173.72
smtp 352 ( 0.00%) 144768 ( 0.00%) 411.27
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
dns 4 ( 0.00%) 460 ( 0.00%) 115.00
bgp 382 ( 0.00%) 33249 ( 0.00%) 87.04
other 348873 ( 0.96%) 505520018 ( 2.12%) 1449.01
udp6 19106 ( 0.05%) 3235306 ( 0.01%) 169.33
dns 17117 ( 0.05%) 2700508 ( 0.01%) 157.77
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
starcra 2 ( 0.00%) 284 ( 0.00%) 142.00
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1985 ( 0.01%) 534298 ( 0.00%) 269.17
icmp6 6330 ( 0.02%) 774742 ( 0.00%) 122.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 464 ( 0.00%) 438959 ( 0.00%) 946.03
tcpdump file: 200904291400.dump.gz (914.93 MB)