Traffic Trace Info
DumpFile: 200903301215.dump
FileSize: 1206.58MB
Id: 200903301215
StartTime: Mon Mar 30 12:15:00 2009
EndTime: Mon Mar 30 12:30:01 2009
TotalTime: 900.50 seconds
TotalCapSize: 945.13MB CapLen: 96 bytes
# of packets: 17133429 (9709.54MB)
AvgRate: 90.45Mbps stddev:12.82M
IP flow (unique src/dst pair) Information
# of flows: 577138 (avg. 29.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.4% 2.0% 1.9% 1.4% 1.3% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 373932
Top 10 bandwidth usage (bytes/total in %):
13.0% 8.7% 7.1% 3.9% 3.9% 2.9% 2.8% 2.6% 2.6% 2.5%
# of IPv6 addresses: 2082
Top 10 bandwidth usage (bytes/total in %):
28.2% 24.1% 15.7% 9.2% 7.8% 6.5% 5.3% 5.2% 5.2% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301215.pktlen.png)
detailed numbers
[ 32- 63]: 3626202
[ 64- 127]: 5410237
[ 128- 255]: 970424
[ 256- 511]: 412588
[ 512- 1023]: 644083
[ 1024- 2047]: 6069895
Protocol Breakdown
![[protocol breakdown chart]](200903301215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17133429 (100.00%) 10181186314 (100.00%) 594.23
ip 17102265 ( 99.82%) 10173341874 ( 99.92%) 594.85
tcp 13571297 ( 79.21%) 9134671806 ( 89.72%) 673.09
http(s) 4829919 ( 28.19%) 6413291319 ( 62.99%) 1327.83
http(c) 3180203 ( 18.56%) 442855571 ( 4.35%) 139.25
squid 273482 ( 1.60%) 94500927 ( 0.93%) 345.55
smtp 232869 ( 1.36%) 86309772 ( 0.85%) 370.64
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 201009 ( 1.17%) 198836811 ( 1.95%) 989.19
pop3 11058 ( 0.06%) 7583152 ( 0.07%) 685.76
imap 6045 ( 0.04%) 3692475 ( 0.04%) 610.83
telnet 13167 ( 0.08%) 3071192 ( 0.03%) 233.25
ssh 2207236 ( 12.88%) 330627287 ( 3.25%) 149.79
dns 12730 ( 0.07%) 1258758 ( 0.01%) 98.88
bgp 146 ( 0.00%) 47125 ( 0.00%) 322.77
napster 107 ( 0.00%) 7038 ( 0.00%) 65.78
realaud 68 ( 0.00%) 7089 ( 0.00%) 104.25
rtsp 131629 ( 0.77%) 52113199 ( 0.51%) 395.91
icecast 410435 ( 2.40%) 32223061 ( 0.32%) 78.51
hotline 13 ( 0.00%) 1380 ( 0.00%) 106.15
other 2061157 ( 12.03%) 1468243032 ( 14.42%) 712.34
udp 2682160 ( 15.65%) 878930138 ( 8.63%) 327.69
dns 885068 ( 5.17%) 228206362 ( 2.24%) 257.84
realaud 6 ( 0.00%) 634 ( 0.00%) 105.67
halflif 111 ( 0.00%) 18539 ( 0.00%) 167.02
starcra 30 ( 0.00%) 5008 ( 0.00%) 166.93
everque 111 ( 0.00%) 20522 ( 0.00%) 184.88
unreal 1201 ( 0.01%) 762571 ( 0.01%) 634.95
quake 16 ( 0.00%) 1335 ( 0.00%) 83.44
cuseeme 1 ( 0.00%) 140 ( 0.00%) 140.00
other 1795212 ( 10.48%) 649739147 ( 6.38%) 361.93
icmp 723373 ( 4.22%) 59397092 ( 0.58%) 82.11
ipip 321 ( 0.00%) 40486 ( 0.00%) 126.12
ipsec 114 ( 0.00%) 18012 ( 0.00%) 158.00
ip6 95717 ( 0.56%) 95874551 ( 0.94%) 1001.65
other 29283 ( 0.17%) 4409789 ( 0.04%) 150.59
frag 40738 ( 0.24%) 43927440 ( 0.43%) 1078.29
ip6 31164 ( 0.18%) 7844440 ( 0.08%) 251.71
tcp6 8421 ( 0.05%) 3659113 ( 0.04%) 434.52
http(s) 3146 ( 0.02%) 2620788 ( 0.03%) 833.05
http(c) 4022 ( 0.02%) 849465 ( 0.01%) 211.20
smtp 184 ( 0.00%) 70929 ( 0.00%) 385.48
bgp 367 ( 0.00%) 31220 ( 0.00%) 85.07
other 702 ( 0.00%) 86711 ( 0.00%) 123.52
udp6 15721 ( 0.09%) 2820491 ( 0.03%) 179.41
dns 13253 ( 0.08%) 2087448 ( 0.02%) 157.51
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
other 2466 ( 0.01%) 732830 ( 0.01%) 297.17
icmp6 6457 ( 0.04%) 854412 ( 0.01%) 132.32
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 535 ( 0.00%) 506344 ( 0.00%) 946.44
tcpdump file: 200903301215.dump.gz (430.80 MB)