Traffic Trace Info
DumpFile: 200903301715.dump
FileSize: 1455.11MB
Id: 200903301715
StartTime: Mon Mar 30 17:15:01 2009
EndTime: Mon Mar 30 17:30:01 2009
TotalTime: 899.63 seconds
TotalCapSize: 1132.04MB CapLen: 96 bytes
# of packets: 21158771 (14765.83MB)
AvgRate: 137.68Mbps stddev:12.96M
IP flow (unique src/dst pair) Information
# of flows: 734467 (avg. 28.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.8% 1.8% 1.2% 1.1% 1.0% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 478778
Top 10 bandwidth usage (bytes/total in %):
12.0% 9.8% 9.2% 9.2% 4.9% 4.1% 3.7% 3.6% 2.9% 2.9%
# of IPv6 addresses: 2303
Top 10 bandwidth usage (bytes/total in %):
21.2% 14.3% 14.2% 14.1% 13.5% 7.6% 7.6% 7.5% 7.3% 6.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301715.pktlen.png)
detailed numbers
[ 32- 63]: 5756914
[ 64- 127]: 3697665
[ 128- 255]: 972929
[ 256- 511]: 479476
[ 512- 1023]: 542727
[ 1024- 2047]: 9709060
Protocol Breakdown
![[protocol breakdown chart]](200903301715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21158771 (100.00%) 15483090029 (100.00%) 731.76
ip 21124957 ( 99.84%) 15474073974 ( 99.94%) 732.50
tcp 17968077 ( 84.92%) 14433957839 ( 93.22%) 803.31
http(s) 8481475 ( 40.08%) 11577736222 ( 74.78%) 1365.06
http(c) 5350627 ( 25.29%) 505650735 ( 3.27%) 94.50
squid 269089 ( 1.27%) 83961278 ( 0.54%) 312.02
smtp 333567 ( 1.58%) 136233053 ( 0.88%) 408.41
ftp 109957 ( 0.52%) 88237231 ( 0.57%) 802.47
pop3 9046 ( 0.04%) 4756493 ( 0.03%) 525.81
imap 5312 ( 0.03%) 789974 ( 0.01%) 148.71
telnet 15349 ( 0.07%) 4329223 ( 0.03%) 282.05
ssh 337785 ( 1.60%) 42774606 ( 0.28%) 126.63
dns 16799 ( 0.08%) 1573413 ( 0.01%) 93.66
bgp 146 ( 0.00%) 54649 ( 0.00%) 374.31
napster 31 ( 0.00%) 6567 ( 0.00%) 211.84
realaud 37 ( 0.00%) 6142 ( 0.00%) 166.00
rtsp 53258 ( 0.25%) 7604163 ( 0.05%) 142.78
icecast 37543 ( 0.18%) 9962902 ( 0.06%) 265.37
other 2948026 ( 13.93%) 1970279388 ( 12.73%) 668.34
udp 2437344 ( 11.52%) 873431869 ( 5.64%) 358.35
dns 1102444 ( 5.21%) 261376344 ( 1.69%) 237.09
realaud 15 ( 0.00%) 1507 ( 0.00%) 100.47
halflif 149 ( 0.00%) 24779 ( 0.00%) 166.30
starcra 21 ( 0.00%) 3481 ( 0.00%) 165.76
everque 138 ( 0.00%) 26576 ( 0.00%) 192.58
unreal 481 ( 0.00%) 234408 ( 0.00%) 487.33
quake 15 ( 0.00%) 1639 ( 0.00%) 109.27
cuseeme 3 ( 0.00%) 256 ( 0.00%) 85.33
other 1333886 ( 6.30%) 611615974 ( 3.95%) 458.52
icmp 557111 ( 2.63%) 53462537 ( 0.35%) 95.96
ipip 321 ( 0.00%) 38398 ( 0.00%) 119.62
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 98318 ( 0.46%) 95574451 ( 0.62%) 972.10
other 63674 ( 0.30%) 17591184 ( 0.11%) 276.27
frag 46210 ( 0.22%) 50341196 ( 0.33%) 1089.40
ip6 33814 ( 0.16%) 9016055 ( 0.06%) 266.64
tcp6 9816 ( 0.05%) 4688000 ( 0.03%) 477.59
http(s) 3009 ( 0.01%) 2327390 ( 0.02%) 773.48
http(c) 4181 ( 0.02%) 817638 ( 0.01%) 195.56
smtp 218 ( 0.00%) 98054 ( 0.00%) 449.79
bgp 380 ( 0.00%) 32894 ( 0.00%) 86.56
other 2028 ( 0.01%) 1412024 ( 0.01%) 696.26
udp6 17963 ( 0.08%) 3197694 ( 0.02%) 178.02
dns 14983 ( 0.07%) 2404202 ( 0.02%) 160.46
realaud 1 ( 0.00%) 102 ( 0.00%) 102.00
starcra 4 ( 0.00%) 614 ( 0.00%) 153.50
everque 1 ( 0.00%) 100 ( 0.00%) 100.00
other 2974 ( 0.01%) 792676 ( 0.01%) 266.54
icmp6 5577 ( 0.03%) 717392 ( 0.00%) 128.63
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 428 ( 0.00%) 408889 ( 0.00%) 955.35
tcpdump file: 200903301715.dump.gz (505.94 MB)