Traffic Trace Info
DumpFile: 200903301700.dump
FileSize: 1522.54MB
Id: 200903301700
StartTime: Mon Mar 30 17:00:01 2009
EndTime: Mon Mar 30 17:15:01 2009
TotalTime: 900.38 seconds
TotalCapSize: 1188.41MB CapLen: 96 bytes
# of packets: 21883955 (15977.72MB)
AvgRate: 148.86Mbps stddev:15.03M
IP flow (unique src/dst pair) Information
# of flows: 715429 (avg. 30.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 4.8% 4.3% 3.3% 2.2% 1.6% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 461559
Top 10 bandwidth usage (bytes/total in %):
9.4% 8.3% 8.3% 5.1% 5.1% 4.9% 4.9% 4.9% 4.5% 4.3%
# of IPv6 addresses: 1864
Top 10 bandwidth usage (bytes/total in %):
25.7% 17.1% 12.8% 12.8% 12.7% 7.9% 7.1% 6.5% 6.5% 5.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301700.pktlen.png)
detailed numbers
[ 32- 63]: 5377556
[ 64- 127]: 3944998
[ 128- 255]: 933821
[ 256- 511]: 495510
[ 512- 1023]: 542765
[ 1024- 2047]: 10589305
Protocol Breakdown
![[protocol breakdown chart]](200903301700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21883955 (100.00%) 16753854151 (100.00%) 765.58
ip 21850926 ( 99.85%) 16744016128 ( 99.94%) 766.28
tcp 19014507 ( 86.89%) 15869142332 ( 94.72%) 834.58
http(s) 8927503 ( 40.79%) 12157059348 ( 72.56%) 1361.75
http(c) 5288061 ( 24.16%) 538225266 ( 3.21%) 101.78
squid 295604 ( 1.35%) 115053205 ( 0.69%) 389.21
smtp 384174 ( 1.76%) 205436209 ( 1.23%) 534.75
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 98190 ( 0.45%) 72468156 ( 0.43%) 738.04
pop3 7181 ( 0.03%) 3034886 ( 0.02%) 422.63
imap 6780 ( 0.03%) 4188100 ( 0.02%) 617.71
telnet 15780 ( 0.07%) 4283973 ( 0.03%) 271.48
ssh 421800 ( 1.93%) 53301486 ( 0.32%) 126.37
dns 13965 ( 0.06%) 1369081 ( 0.01%) 98.04
bgp 169 ( 0.00%) 82514 ( 0.00%) 488.25
napster 25 ( 0.00%) 1807 ( 0.00%) 72.28
realaud 60 ( 0.00%) 5644 ( 0.00%) 94.07
rtsp 11025 ( 0.05%) 8043089 ( 0.05%) 729.53
icecast 36056 ( 0.16%) 10115431 ( 0.06%) 280.55
hotline 42 ( 0.00%) 3415 ( 0.00%) 81.31
other 3508072 ( 16.03%) 2696469522 ( 16.09%) 768.65
udp 2038258 ( 9.31%) 723887104 ( 4.32%) 355.15
dns 1153061 ( 5.27%) 279763716 ( 1.67%) 242.63
realaud 11 ( 0.00%) 909 ( 0.00%) 82.64
halflif 133 ( 0.00%) 22171 ( 0.00%) 166.70
starcra 28 ( 0.00%) 4833 ( 0.00%) 172.61
everque 112 ( 0.00%) 22356 ( 0.00%) 199.61
unreal 531 ( 0.00%) 256524 ( 0.00%) 483.10
quake 19 ( 0.00%) 2688 ( 0.00%) 141.47
cuseeme 6 ( 0.00%) 891 ( 0.00%) 148.50
other 884178 ( 4.04%) 443658586 ( 2.65%) 501.78
icmp 668516 ( 3.05%) 56644669 ( 0.34%) 84.73
ipip 326 ( 0.00%) 40080 ( 0.00%) 122.94
ipsec 116 ( 0.00%) 18256 ( 0.00%) 157.38
ip6 83554 ( 0.38%) 82626954 ( 0.49%) 988.90
other 45649 ( 0.21%) 11656733 ( 0.07%) 255.36
frag 50017 ( 0.23%) 54741869 ( 0.33%) 1094.47
ip6 33029 ( 0.15%) 9838023 ( 0.06%) 297.86
tcp6 9783 ( 0.04%) 5871851 ( 0.04%) 600.21
http(s) 2941 ( 0.01%) 2423715 ( 0.01%) 824.11
http(c) 3590 ( 0.02%) 686228 ( 0.00%) 191.15
smtp 179 ( 0.00%) 78762 ( 0.00%) 440.01
ssh 3 ( 0.00%) 246 ( 0.00%) 82.00
bgp 363 ( 0.00%) 30166 ( 0.00%) 83.10
other 2707 ( 0.01%) 2652734 ( 0.02%) 979.95
udp6 16954 ( 0.08%) 2749946 ( 0.02%) 162.20
dns 15400 ( 0.07%) 2448811 ( 0.01%) 159.01
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
unreal 1 ( 0.00%) 118 ( 0.00%) 118.00
other 1552 ( 0.01%) 300901 ( 0.00%) 193.88
icmp6 5747 ( 0.03%) 723663 ( 0.00%) 125.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 515 ( 0.00%) 488483 ( 0.00%) 948.51
tcpdump file: 200903301700.dump.gz (523.49 MB)