Traffic Trace Info
DumpFile: 200903301500.dump
FileSize: 1619.83MB
Id: 200903301500
StartTime: Mon Mar 30 15:00:01 2009
EndTime: Mon Mar 30 15:15:00 2009
TotalTime: 899.87 seconds
TotalCapSize: 1273.04MB CapLen: 96 bytes
# of packets: 22726750 (14450.75MB)
AvgRate: 134.73Mbps stddev:13.05M
IP flow (unique src/dst pair) Information
# of flows: 814049 (avg. 27.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.9% 6.0% 3.6% 3.2% 1.4% 1.3% 1.3% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 540047
Top 10 bandwidth usage (bytes/total in %):
9.9% 9.9% 9.9% 9.3% 8.2% 6.8% 6.1% 5.6% 3.7% 3.2%
# of IPv6 addresses: 1888
Top 10 bandwidth usage (bytes/total in %):
25.1% 19.5% 17.0% 15.0% 12.6% 8.6% 6.8% 6.8% 5.3% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301500.pktlen.png)
detailed numbers
[ 32- 63]: 4691593
[ 64- 127]: 6147307
[ 128- 255]: 1063151
[ 256- 511]: 517925
[ 512- 1023]: 1288338
[ 1024- 2047]: 9018436
Protocol Breakdown
![[protocol breakdown chart]](200903301500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22726750 (100.00%) 15152713349 (100.00%) 666.73
ip 22685333 ( 99.82%) 15142624276 ( 99.93%) 667.51
tcp 19246251 ( 84.69%) 14426487410 ( 95.21%) 749.57
http(s) 7288557 ( 32.07%) 9824880449 ( 64.84%) 1347.99
http(c) 4896007 ( 21.54%) 457079732 ( 3.02%) 93.36
squid 307971 ( 1.36%) 121866632 ( 0.80%) 395.71
smtp 311920 ( 1.37%) 128467955 ( 0.85%) 411.86
ftp 111626 ( 0.49%) 88402478 ( 0.58%) 791.95
pop3 7955 ( 0.04%) 2086228 ( 0.01%) 262.25
imap 8448 ( 0.04%) 5528190 ( 0.04%) 654.38
telnet 5706 ( 0.03%) 1346233 ( 0.01%) 235.93
ssh 3004349 ( 13.22%) 2172064698 ( 14.33%) 722.97
dns 13186 ( 0.06%) 1312057 ( 0.01%) 99.50
bgp 141 ( 0.00%) 47295 ( 0.00%) 335.43
napster 91 ( 0.00%) 6060 ( 0.00%) 66.59
realaud 3019 ( 0.01%) 189220 ( 0.00%) 62.68
rtsp 32155 ( 0.14%) 30076284 ( 0.20%) 935.35
icecast 20831 ( 0.09%) 8852124 ( 0.06%) 424.95
hotline 107 ( 0.00%) 8088 ( 0.00%) 75.59
other 3234181 ( 14.23%) 1584273627 ( 10.46%) 489.85
udp 2018352 ( 8.88%) 565085150 ( 3.73%) 279.97
dns 1078644 ( 4.75%) 266278487 ( 1.76%) 246.86
realaud 16 ( 0.00%) 1771 ( 0.00%) 110.69
halflif 166 ( 0.00%) 31510 ( 0.00%) 189.82
starcra 31 ( 0.00%) 4626 ( 0.00%) 149.23
everque 66 ( 0.00%) 16654 ( 0.00%) 252.33
unreal 515 ( 0.00%) 258446 ( 0.00%) 501.84
quake 16 ( 0.00%) 1641 ( 0.00%) 102.56
cuseeme 8 ( 0.00%) 1190 ( 0.00%) 148.75
other 938727 ( 4.13%) 298362843 ( 1.97%) 317.84
icmp 1292547 ( 5.69%) 99719674 ( 0.66%) 77.15
ipip 300 ( 0.00%) 37185 ( 0.00%) 123.95
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 45359 ( 0.20%) 28650661 ( 0.19%) 631.64
other 82412 ( 0.36%) 22626500 ( 0.15%) 274.55
frag 45341 ( 0.20%) 49519578 ( 0.33%) 1092.16
ip6 41417 ( 0.18%) 10089073 ( 0.07%) 243.60
tcp6 16727 ( 0.07%) 5826660 ( 0.04%) 348.34
http(s) 2284 ( 0.01%) 1718118 ( 0.01%) 752.24
http(c) 11230 ( 0.05%) 1359952 ( 0.01%) 121.10
smtp 340 ( 0.00%) 107246 ( 0.00%) 315.43
ssh 3 ( 0.00%) 246 ( 0.00%) 82.00
bgp 385 ( 0.00%) 33388 ( 0.00%) 86.72
other 2485 ( 0.01%) 2607710 ( 0.02%) 1049.38
udp6 18004 ( 0.08%) 3096440 ( 0.02%) 171.99
dns 15778 ( 0.07%) 2571307 ( 0.02%) 162.97
quake 2 ( 0.00%) 227 ( 0.00%) 113.50
other 2224 ( 0.01%) 524906 ( 0.00%) 236.02
icmp6 6287 ( 0.03%) 821031 ( 0.01%) 130.59
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 369 ( 0.00%) 340862 ( 0.00%) 923.75
tcpdump file: 200903301500.dump.gz (543.37 MB)