Traffic Trace Info
DumpFile: 200904301400.dump
FileSize: 2286.55MB
Id: 200904301400
StartTime: Thu Apr 30 14:00:01 2009
EndTime: Thu Apr 30 14:15:01 2009
TotalTime: 899.41 seconds
TotalCapSize: 1764.89MB CapLen: 96 bytes
# of packets: 34184554 (20723.79MB)
AvgRate: 193.27Mbps stddev:19.01M
IP flow (unique src/dst pair) Information
# of flows: 1484418 (avg. 23.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.1% 2.0% 1.8% 1.8% 1.3% 0.9% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 903715
Top 10 bandwidth usage (bytes/total in %):
36.2% 5.3% 4.0% 3.4% 3.2% 3.2% 2.6% 2.4% 2.2% 2.1%
# of IPv6 addresses: 1107
Top 10 bandwidth usage (bytes/total in %):
20.3% 17.7% 15.5% 8.5% 7.4% 6.9% 6.2% 6.1% 5.4% 5.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200904301400.pktlen.png)
detailed numbers
[ 32- 63]: 8068481
[ 64- 127]: 8692495
[ 128- 255]: 1871304
[ 256- 511]: 1054155
[ 512- 1023]: 1053287
[ 1024- 2047]: 13444832
Protocol Breakdown
![[protocol breakdown chart]](200904301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34184554 (100.00%) 21730470528 (100.00%) 635.68
ip 34146740 ( 99.89%) 21720131960 ( 99.95%) 636.08
tcp 23823264 ( 69.69%) 17746098833 ( 81.66%) 744.91
http(s) 6632078 ( 19.40%) 8468516909 ( 38.97%) 1276.90
http(c) 4879968 ( 14.28%) 1091265002 ( 5.02%) 223.62
squid 943270 ( 2.76%) 718879683 ( 3.31%) 762.11
smtp 429164 ( 1.26%) 132682056 ( 0.61%) 309.16
nntp 33 ( 0.00%) 18523 ( 0.00%) 561.30
ftp 106427 ( 0.31%) 59968051 ( 0.28%) 563.47
pop3 20163 ( 0.06%) 5445372 ( 0.03%) 270.07
imap 2534 ( 0.01%) 689704 ( 0.00%) 272.18
telnet 43400 ( 0.13%) 4267634 ( 0.02%) 98.33
ssh 138482 ( 0.41%) 19802427 ( 0.09%) 143.00
dns 4021 ( 0.01%) 3928496 ( 0.02%) 976.99
bgp 172 ( 0.00%) 70925 ( 0.00%) 412.35
napster 173 ( 0.00%) 23251 ( 0.00%) 134.40
realaud 1007 ( 0.00%) 214996 ( 0.00%) 213.50
rtsp 391727 ( 1.15%) 167656226 ( 0.77%) 427.99
icecast 18530 ( 0.05%) 8829611 ( 0.04%) 476.50
hotline 2892 ( 0.01%) 188217 ( 0.00%) 65.08
other 10209215 ( 29.86%) 7063651270 ( 32.51%) 691.89
udp 9421335 ( 27.56%) 3741702737 ( 17.22%) 397.15
dns 1524898 ( 4.46%) 295983755 ( 1.36%) 194.10
rip 2 ( 0.00%) 203 ( 0.00%) 101.50
realaud 1794 ( 0.01%) 118477 ( 0.00%) 66.04
halflif 6788 ( 0.02%) 429928 ( 0.00%) 63.34
starcra 424 ( 0.00%) 81712 ( 0.00%) 192.72
everque 290 ( 0.00%) 51519 ( 0.00%) 177.65
unreal 129 ( 0.00%) 21500 ( 0.00%) 166.67
quake 65 ( 0.00%) 10712 ( 0.00%) 164.80
cuseeme 23 ( 0.00%) 4083 ( 0.00%) 177.52
other 7855474 ( 22.98%) 3442965280 ( 15.84%) 438.29
icmp 664713 ( 1.94%) 60692142 ( 0.28%) 91.31
ipip 326 ( 0.00%) 40190 ( 0.00%) 123.28
ipsec 78 ( 0.00%) 12324 ( 0.00%) 158.00
ip6 207276 ( 0.61%) 163220500 ( 0.75%) 787.45
other 29748 ( 0.09%) 8365234 ( 0.04%) 281.20
frag 67338 ( 0.20%) 50752926 ( 0.23%) 753.70
ip6 37814 ( 0.11%) 10338568 ( 0.05%) 273.41
tcp6 10450 ( 0.03%) 6045286 ( 0.03%) 578.50
http(s) 4598 ( 0.01%) 4689275 ( 0.02%) 1019.85
http(c) 3563 ( 0.01%) 688236 ( 0.00%) 193.16
smtp 401 ( 0.00%) 170575 ( 0.00%) 425.37
ftp 62 ( 0.00%) 11742 ( 0.00%) 189.39
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
dns 9 ( 0.00%) 1001 ( 0.00%) 111.22
bgp 379 ( 0.00%) 33843 ( 0.00%) 89.30
other 1433 ( 0.00%) 449832 ( 0.00%) 313.91
udp6 20626 ( 0.06%) 3433004 ( 0.02%) 166.44
dns 20600 ( 0.06%) 3430147 ( 0.02%) 166.51
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
other 25 ( 0.00%) 2750 ( 0.00%) 110.00
icmp6 6704 ( 0.02%) 853039 ( 0.00%) 127.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3159 ( 0.00%) 789.75
tcpdump file: 200904301400.dump.gz (875.49 MB)