Traffic Trace Info
DumpFile: 200903301600.dump
FileSize: 1340.26MB
Id: 200903301600
StartTime: Mon Mar 30 16:00:01 2009
EndTime: Mon Mar 30 16:15:01 2009
TotalTime: 899.82 seconds
TotalCapSize: 1047.72MB CapLen: 96 bytes
# of packets: 19159148 (13189.40MB)
AvgRate: 122.93Mbps stddev:13.74M
IP flow (unique src/dst pair) Information
# of flows: 666002 (avg. 28.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 4.0% 3.7% 2.1% 1.7% 1.1% 1.0% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 428471
Top 10 bandwidth usage (bytes/total in %):
10.0% 9.8% 8.2% 8.0% 4.9% 4.1% 4.1% 3.8% 3.7% 3.7%
# of IPv6 addresses: 2155
Top 10 bandwidth usage (bytes/total in %):
64.8% 33.9% 31.1% 7.5% 6.1% 5.4% 3.9% 3.1% 2.5% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301600.pktlen.png)
detailed numbers
[ 32- 63]: 4885682
[ 64- 127]: 3745679
[ 128- 255]: 785814
[ 256- 511]: 540664
[ 512- 1023]: 652439
[ 1024- 2047]: 8548870
Protocol Breakdown
![[protocol breakdown chart]](200903301600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19159148 (100.00%) 13830084116 (100.00%) 721.85
ip 19117431 ( 99.78%) 13811063641 ( 99.86%) 722.43
tcp 16551835 ( 86.39%) 13086940859 ( 94.63%) 790.66
http(s) 7371996 ( 38.48%) 9907208291 ( 71.64%) 1343.90
http(c) 5222527 ( 27.26%) 518544818 ( 3.75%) 99.29
squid 261122 ( 1.36%) 94208933 ( 0.68%) 360.79
smtp 313505 ( 1.64%) 129107633 ( 0.93%) 411.82
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 141311 ( 0.74%) 100150763 ( 0.72%) 708.73
pop3 9347 ( 0.05%) 3632727 ( 0.03%) 388.65
imap 8854 ( 0.05%) 5154025 ( 0.04%) 582.11
telnet 12801 ( 0.07%) 3174194 ( 0.02%) 247.96
ssh 401447 ( 2.10%) 266429289 ( 1.93%) 663.67
dns 13447 ( 0.07%) 1324909 ( 0.01%) 98.53
bgp 140 ( 0.00%) 48714 ( 0.00%) 347.96
napster 77 ( 0.00%) 4828 ( 0.00%) 62.70
realaud 52 ( 0.00%) 3286 ( 0.00%) 63.19
rtsp 70101 ( 0.37%) 11664385 ( 0.08%) 166.39
icecast 40827 ( 0.21%) 16488732 ( 0.12%) 403.87
other 2684277 ( 14.01%) 2029795092 ( 14.68%) 756.18
udp 1992283 ( 10.40%) 598999561 ( 4.33%) 300.66
dns 1092852 ( 5.70%) 261038083 ( 1.89%) 238.86
realaud 934 ( 0.00%) 58963 ( 0.00%) 63.13
halflif 189 ( 0.00%) 26428 ( 0.00%) 139.83
starcra 29 ( 0.00%) 5739 ( 0.00%) 197.90
everque 90 ( 0.00%) 19785 ( 0.00%) 219.83
unreal 592 ( 0.00%) 254780 ( 0.00%) 430.37
quake 21 ( 0.00%) 2170 ( 0.00%) 103.33
cuseeme 7 ( 0.00%) 891 ( 0.00%) 127.29
other 897378 ( 4.68%) 337427655 ( 2.44%) 376.02
icmp 433482 ( 2.26%) 38920671 ( 0.28%) 89.79
ipip 300 ( 0.00%) 38656 ( 0.00%) 128.85
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 78804 ( 0.41%) 72335664 ( 0.52%) 917.92
other 60615 ( 0.32%) 13810534 ( 0.10%) 227.84
frag 48275 ( 0.25%) 53175665 ( 0.38%) 1101.52
ip6 41717 ( 0.22%) 19020475 ( 0.14%) 455.94
tcp6 15616 ( 0.08%) 14371869 ( 0.10%) 920.33
http(s) 1877 ( 0.01%) 1073474 ( 0.01%) 571.91
http(c) 3520 ( 0.02%) 645961 ( 0.00%) 183.51
smtp 303 ( 0.00%) 156583 ( 0.00%) 516.78
bgp 364 ( 0.00%) 30649 ( 0.00%) 84.20
other 9552 ( 0.05%) 12465202 ( 0.09%) 1304.98
udp6 19635 ( 0.10%) 3424933 ( 0.02%) 174.43
dns 17079 ( 0.09%) 2748666 ( 0.02%) 160.94
other 2556 ( 0.01%) 676267 ( 0.00%) 264.58
icmp6 5949 ( 0.03%) 750661 ( 0.01%) 126.18
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 487 ( 0.00%) 468932 ( 0.00%) 962.90
tcpdump file: 200903301600.dump.gz (467.49 MB)