Traffic Trace Info
DumpFile: 200903301615.dump
FileSize: 1399.23MB
Id: 200903301615
StartTime: Mon Mar 30 16:15:01 2009
EndTime: Mon Mar 30 16:30:00 2009
TotalTime: 899.42 seconds
TotalCapSize: 1094.72MB CapLen: 96 bytes
# of packets: 19945541 (14085.52MB)
AvgRate: 131.39Mbps stddev:12.18M
IP flow (unique src/dst pair) Information
# of flows: 685011 (avg. 29.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 3.5% 2.5% 2.3% 1.6% 1.5% 1.3% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 446403
Top 10 bandwidth usage (bytes/total in %):
10.7% 9.0% 8.8% 5.5% 5.4% 5.1% 4.9% 4.5% 3.7% 3.5%
# of IPv6 addresses: 2016
Top 10 bandwidth usage (bytes/total in %):
22.2% 18.8% 15.5% 15.4% 9.6% 8.5% 7.3% 6.9% 4.5% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301615.pktlen.png)
detailed numbers
[ 32- 63]: 4516090
[ 64- 127]: 4203270
[ 128- 255]: 894304
[ 256- 511]: 491455
[ 512- 1023]: 657746
[ 1024- 2047]: 9182676
Protocol Breakdown
![[protocol breakdown chart]](200903301615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19945541 (100.00%) 14769734581 (100.00%) 740.50
ip 19913653 ( 99.84%) 14761529396 ( 99.94%) 741.28
tcp 17224605 ( 86.36%) 13988350314 ( 94.71%) 812.11
http(s) 7614816 ( 38.18%) 10264621647 ( 69.50%) 1347.98
http(c) 5010307 ( 25.12%) 467498111 ( 3.17%) 93.31
squid 307536 ( 1.54%) 140224619 ( 0.95%) 455.96
smtp 292356 ( 1.47%) 128414894 ( 0.87%) 439.24
ftp 149896 ( 0.75%) 125628463 ( 0.85%) 838.10
pop3 10392 ( 0.05%) 6245933 ( 0.04%) 601.03
imap 7644 ( 0.04%) 6134410 ( 0.04%) 802.51
telnet 13090 ( 0.07%) 3379603 ( 0.02%) 258.18
ssh 133226 ( 0.67%) 23757850 ( 0.16%) 178.33
dns 15714 ( 0.08%) 1509254 ( 0.01%) 96.05
bgp 158 ( 0.00%) 59843 ( 0.00%) 378.75
napster 77 ( 0.00%) 4624 ( 0.00%) 60.05
realaud 39 ( 0.00%) 3034 ( 0.00%) 77.79
rtsp 54923 ( 0.28%) 10774033 ( 0.07%) 196.17
icecast 33891 ( 0.17%) 10625518 ( 0.07%) 313.52
hotline 13 ( 0.00%) 2284 ( 0.00%) 175.69
other 3580523 ( 17.95%) 2799465954 ( 18.95%) 781.86
udp 2054075 ( 10.30%) 616440884 ( 4.17%) 300.11
dns 1131898 ( 5.67%) 270707306 ( 1.83%) 239.16
realaud 952 ( 0.00%) 60994 ( 0.00%) 64.07
halflif 162 ( 0.00%) 25304 ( 0.00%) 156.20
starcra 28 ( 0.00%) 8368 ( 0.00%) 298.86
everque 125 ( 0.00%) 21556 ( 0.00%) 172.45
unreal 463 ( 0.00%) 217439 ( 0.00%) 469.63
quake 20 ( 0.00%) 1712 ( 0.00%) 85.60
cuseeme 3 ( 0.00%) 663 ( 0.00%) 221.00
other 920240 ( 4.61%) 345245541 ( 2.34%) 375.17
icmp 470682 ( 2.36%) 42471121 ( 0.29%) 90.23
ipip 330 ( 0.00%) 38864 ( 0.00%) 117.77
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 99085 ( 0.50%) 99361639 ( 0.67%) 1002.79
other 64764 ( 0.32%) 14848878 ( 0.10%) 229.28
frag 47648 ( 0.24%) 52188999 ( 0.35%) 1095.30
ip6 31888 ( 0.16%) 8205185 ( 0.06%) 257.31
tcp6 9119 ( 0.05%) 4321207 ( 0.03%) 473.87
http(s) 2593 ( 0.01%) 1941921 ( 0.01%) 748.91
http(c) 3891 ( 0.02%) 753558 ( 0.01%) 193.67
smtp 464 ( 0.00%) 205556 ( 0.00%) 443.01
bgp 363 ( 0.00%) 31128 ( 0.00%) 85.75
other 1808 ( 0.01%) 1389044 ( 0.01%) 768.28
udp6 16743 ( 0.08%) 2846830 ( 0.02%) 170.03
dns 14889 ( 0.07%) 2393202 ( 0.02%) 160.74
other 1854 ( 0.01%) 453628 ( 0.00%) 244.68
icmp6 5644 ( 0.03%) 700984 ( 0.00%) 124.20
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 351 ( 0.00%) 331948 ( 0.00%) 945.72
tcpdump file: 200903301615.dump.gz (483.31 MB)