Traffic Trace Info
DumpFile: 200903301815.dump
FileSize: 1431.46MB
Id: 200903301815
StartTime: Mon Mar 30 18:15:00 2009
EndTime: Mon Mar 30 18:30:00 2009
TotalTime: 899.96 seconds
TotalCapSize: 1115.36MB CapLen: 96 bytes
# of packets: 20704924 (14753.44MB)
AvgRate: 137.52Mbps stddev:14.43M
IP flow (unique src/dst pair) Information
# of flows: 875489 (avg. 23.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 1.9% 1.8% 1.7% 1.6% 1.6% 1.4% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 575473
Top 10 bandwidth usage (bytes/total in %):
11.5% 9.3% 8.0% 8.0% 5.5% 4.2% 3.7% 3.6% 3.1% 2.8%
# of IPv6 addresses: 2096
Top 10 bandwidth usage (bytes/total in %):
21.9% 21.9% 16.3% 12.1% 12.1% 11.6% 8.9% 7.0% 6.8% 6.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301815.pktlen.png)
detailed numbers
[ 32- 63]: 4449387
[ 64- 127]: 4347939
[ 128- 255]: 1144777
[ 256- 511]: 482595
[ 512- 1023]: 548585
[ 1024- 2047]: 9731641
Protocol Breakdown
![[protocol breakdown chart]](200903301815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20704924 (100.00%) 15470101546 (100.00%) 747.17
ip 20671629 ( 99.84%) 15459638174 ( 99.93%) 747.87
tcp 16709917 ( 80.71%) 14160286353 ( 91.53%) 847.42
http(s) 8062629 ( 38.94%) 10942242544 ( 70.73%) 1357.16
http(c) 4604544 ( 22.24%) 605178153 ( 3.91%) 131.43
squid 309725 ( 1.50%) 123786834 ( 0.80%) 399.67
smtp 373052 ( 1.80%) 166856874 ( 1.08%) 447.28
ftp 157942 ( 0.76%) 152126770 ( 0.98%) 963.18
pop3 7241 ( 0.03%) 2336792 ( 0.02%) 322.72
imap 4649 ( 0.02%) 549622 ( 0.00%) 118.22
telnet 13633 ( 0.07%) 3120958 ( 0.02%) 228.93
ssh 210811 ( 1.02%) 35882098 ( 0.23%) 170.21
dns 14378 ( 0.07%) 1441427 ( 0.01%) 100.25
bgp 197 ( 0.00%) 96196 ( 0.00%) 488.30
napster 35 ( 0.00%) 3320 ( 0.00%) 94.86
realaud 39 ( 0.00%) 3028 ( 0.00%) 77.64
rtsp 13033 ( 0.06%) 15337593 ( 0.10%) 1176.83
icecast 25462 ( 0.12%) 7355335 ( 0.05%) 288.87
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 2912539 ( 14.07%) 2103968327 ( 13.60%) 722.38
udp 2741370 ( 13.24%) 1143414108 ( 7.39%) 417.10
dns 1126791 ( 5.44%) 258774317 ( 1.67%) 229.66
rip 1 ( 0.00%) 140 ( 0.00%) 140.00
realaud 18 ( 0.00%) 1691 ( 0.00%) 93.94
halflif 159 ( 0.00%) 25031 ( 0.00%) 157.43
starcra 56 ( 0.00%) 10223 ( 0.00%) 182.55
everque 180 ( 0.00%) 31007 ( 0.00%) 172.26
unreal 471 ( 0.00%) 220120 ( 0.00%) 467.35
quake 19 ( 0.00%) 5434 ( 0.00%) 286.00
cuseeme 10 ( 0.00%) 2458 ( 0.00%) 245.80
other 1613467 ( 7.79%) 884234499 ( 5.72%) 548.03
icmp 1109173 ( 5.36%) 96919019 ( 0.63%) 87.38
ipip 323 ( 0.00%) 41506 ( 0.00%) 128.50
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 59778 ( 0.29%) 48047546 ( 0.31%) 803.77
other 50956 ( 0.25%) 10911946 ( 0.07%) 214.14
frag 56784 ( 0.27%) 58869236 ( 0.38%) 1036.72
ip6 33295 ( 0.16%) 10463372 ( 0.07%) 314.26
tcp6 11123 ( 0.05%) 6672450 ( 0.04%) 599.88
http(s) 4316 ( 0.02%) 4395942 ( 0.03%) 1018.52
http(c) 4479 ( 0.02%) 804889 ( 0.01%) 179.70
smtp 59 ( 0.00%) 22405 ( 0.00%) 379.75
imap 129 ( 0.00%) 46469 ( 0.00%) 360.22
dns 4 ( 0.00%) 623 ( 0.00%) 155.75
bgp 383 ( 0.00%) 33956 ( 0.00%) 88.66
other 1753 ( 0.01%) 1368166 ( 0.01%) 780.47
udp6 17681 ( 0.09%) 2918912 ( 0.02%) 165.09
dns 15069 ( 0.07%) 2313322 ( 0.01%) 153.52
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
other 2611 ( 0.01%) 605474 ( 0.00%) 231.89
icmp6 4120 ( 0.02%) 545447 ( 0.00%) 132.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 341 ( 0.00%) 322483 ( 0.00%) 945.70
tcpdump file: 200903301815.dump.gz (495.93 MB)