Traffic Trace Info
DumpFile: 200903301200.dump
FileSize: 1090.91MB
Id: 200903301200
StartTime: Mon Mar 30 12:00:01 2009
EndTime: Mon Mar 30 12:15:00 2009
TotalTime: 899.43 seconds
TotalCapSize: 854.59MB CapLen: 96 bytes
# of packets: 15486968 (9286.32MB)
AvgRate: 86.59Mbps stddev:12.16M
IP flow (unique src/dst pair) Information
# of flows: 600705 (avg. 25.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 2.7% 2.3% 2.1% 1.4% 1.3% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 383431
Top 10 bandwidth usage (bytes/total in %):
11.2% 9.2% 7.1% 6.7% 4.7% 3.7% 2.8% 2.8% 2.6% 2.3%
# of IPv6 addresses: 1604
Top 10 bandwidth usage (bytes/total in %):
43.1% 43.0% 12.6% 8.4% 8.4% 8.3% 5.1% 5.0% 4.3% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301200.pktlen.png)
detailed numbers
[ 32- 63]: 3390978
[ 64- 127]: 4390604
[ 128- 255]: 901591
[ 256- 511]: 382277
[ 512- 1023]: 547554
[ 1024- 2047]: 5873964
Protocol Breakdown
![[protocol breakdown chart]](200903301200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15486968 (100.00%) 9737409799 (100.00%) 628.75
ip 15449989 ( 99.76%) 9724287103 ( 99.87%) 629.40
tcp 12677494 ( 81.86%) 8899905319 ( 91.40%) 702.02
http(s) 4643699 ( 29.98%) 6168506302 ( 63.35%) 1328.36
http(c) 3046882 ( 19.67%) 455686994 ( 4.68%) 149.56
squid 248107 ( 1.60%) 80822529 ( 0.83%) 325.76
smtp 244075 ( 1.58%) 98172438 ( 1.01%) 402.22
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 191689 ( 1.24%) 216594015 ( 2.22%) 1129.92
pop3 24315 ( 0.16%) 27811847 ( 0.29%) 1143.81
imap 4093 ( 0.03%) 490420 ( 0.01%) 119.82
telnet 4174 ( 0.03%) 742000 ( 0.01%) 177.77
ssh 1689103 ( 10.91%) 270792054 ( 2.78%) 160.32
dns 13146 ( 0.08%) 1321694 ( 0.01%) 100.54
bgp 156 ( 0.00%) 61179 ( 0.00%) 392.17
napster 188 ( 0.00%) 18312 ( 0.00%) 97.40
realaud 211 ( 0.00%) 20261 ( 0.00%) 96.02
rtsp 82158 ( 0.53%) 13903096 ( 0.14%) 169.22
icecast 410412 ( 2.65%) 32200451 ( 0.33%) 78.46
hotline 12 ( 0.00%) 1320 ( 0.00%) 110.00
other 2075069 ( 13.40%) 1532760107 ( 15.74%) 738.66
udp 2198612 ( 14.20%) 682388083 ( 7.01%) 310.37
dns 945659 ( 6.11%) 240995595 ( 2.47%) 254.84
realaud 23 ( 0.00%) 10488 ( 0.00%) 456.00
halflif 124 ( 0.00%) 20930 ( 0.00%) 168.79
starcra 30 ( 0.00%) 5327 ( 0.00%) 177.57
everque 98 ( 0.00%) 20986 ( 0.00%) 214.14
unreal 1294 ( 0.01%) 833662 ( 0.01%) 644.25
quake 29 ( 0.00%) 3177 ( 0.00%) 109.55
cuseeme 5 ( 0.00%) 403 ( 0.00%) 80.60
other 1250587 ( 8.08%) 440287027 ( 4.52%) 352.06
icmp 449140 ( 2.90%) 39914071 ( 0.41%) 88.87
ipip 316 ( 0.00%) 38048 ( 0.00%) 120.41
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 93806 ( 0.61%) 97036480 ( 1.00%) 1034.44
other 30511 ( 0.20%) 4987722 ( 0.05%) 163.47
frag 51725 ( 0.33%) 53550196 ( 0.55%) 1035.29
ip6 36979 ( 0.24%) 13122696 ( 0.13%) 354.87
tcp6 14044 ( 0.09%) 9254435 ( 0.10%) 658.96
http(s) 2985 ( 0.02%) 2701218 ( 0.03%) 904.93
http(c) 3792 ( 0.02%) 732142 ( 0.01%) 193.08
smtp 109 ( 0.00%) 51491 ( 0.00%) 472.39
bgp 383 ( 0.00%) 33868 ( 0.00%) 88.43
other 6775 ( 0.04%) 5735716 ( 0.06%) 846.60
udp6 15506 ( 0.10%) 2518687 ( 0.03%) 162.43
dns 14214 ( 0.09%) 2239990 ( 0.02%) 157.59
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1291 ( 0.01%) 278581 ( 0.00%) 215.79
icmp6 6970 ( 0.05%) 947053 ( 0.01%) 135.88
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 428 ( 0.00%) 398305 ( 0.00%) 930.62
tcpdump file: 200903301200.dump.gz (391.14 MB)