Traffic Trace Info
DumpFile: 200903301900.dump
FileSize: 1610.85MB
Id: 200903301900
StartTime: Mon Mar 30 19:00:01 2009
EndTime: Mon Mar 30 19:15:01 2009
TotalTime: 900.36 seconds
TotalCapSize: 1262.64MB CapLen: 96 bytes
# of packets: 22815887 (17086.73MB)
AvgRate: 159.20Mbps stddev:38.65M
IP flow (unique src/dst pair) Information
# of flows: 861181 (avg. 26.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.9% 8.8% 2.2% 2.1% 1.6% 1.2% 1.1% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 570100
Top 10 bandwidth usage (bytes/total in %):
11.9% 11.9% 9.0% 9.0% 8.1% 8.0% 7.8% 5.3% 3.6% 3.5%
# of IPv6 addresses: 1900
Top 10 bandwidth usage (bytes/total in %):
23.8% 18.4% 12.3% 12.3% 12.0% 7.7% 6.9% 6.2% 5.5% 5.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301900.pktlen.png)
detailed numbers
[ 32- 63]: 4168427
[ 64- 127]: 4930204
[ 128- 255]: 1149566
[ 256- 511]: 449967
[ 512- 1023]: 572040
[ 1024- 2047]: 11545683
Protocol Breakdown
![[protocol breakdown chart]](200903301900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22815887 (100.00%) 17916736532 (100.00%) 785.27
ip 22781407 ( 99.85%) 17906060197 ( 99.94%) 785.99
tcp 18664034 ( 81.80%) 16311737158 ( 91.04%) 873.97
http(s) 8115643 ( 35.57%) 11160643694 ( 62.29%) 1375.20
http(c) 4548038 ( 19.93%) 388687391 ( 2.17%) 85.46
squid 425422 ( 1.86%) 255729407 ( 1.43%) 601.12
smtp 317362 ( 1.39%) 96354085 ( 0.54%) 303.61
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 126421 ( 0.55%) 101927108 ( 0.57%) 806.25
pop3 25555 ( 0.11%) 27434294 ( 0.15%) 1073.54
imap 4113 ( 0.02%) 563679 ( 0.00%) 137.05
telnet 14167 ( 0.06%) 3543719 ( 0.02%) 250.14
ssh 1986230 ( 8.71%) 2157634970 ( 12.04%) 1086.30
dns 15476 ( 0.07%) 1570440 ( 0.01%) 101.48
bgp 192 ( 0.00%) 92912 ( 0.00%) 483.92
napster 14 ( 0.00%) 858 ( 0.00%) 61.29
realaud 42 ( 0.00%) 3694 ( 0.00%) 87.95
rtsp 14066 ( 0.06%) 15506498 ( 0.09%) 1102.41
icecast 17134 ( 0.08%) 1142791 ( 0.01%) 66.70
hotline 129 ( 0.00%) 7980 ( 0.00%) 61.86
other 3054022 ( 13.39%) 2100893158 ( 11.73%) 687.91
udp 2929672 ( 12.84%) 1417964800 ( 7.91%) 484.00
dns 1111993 ( 4.87%) 254041553 ( 1.42%) 228.46
realaud 2152 ( 0.01%) 130778 ( 0.00%) 60.77
halflif 524 ( 0.00%) 55543 ( 0.00%) 106.00
starcra 27 ( 0.00%) 4579 ( 0.00%) 169.59
everque 66 ( 0.00%) 12705 ( 0.00%) 192.50
unreal 517 ( 0.00%) 250701 ( 0.00%) 484.91
quake 12 ( 0.00%) 1269 ( 0.00%) 105.75
cuseeme 5 ( 0.00%) 1980 ( 0.00%) 396.00
other 1813879 ( 7.95%) 1163310358 ( 6.49%) 641.34
icmp 1047997 ( 4.59%) 107494077 ( 0.60%) 102.57
ipip 326 ( 0.00%) 39048 ( 0.00%) 119.78
ipsec 114 ( 0.00%) 17940 ( 0.00%) 157.37
ip6 76781 ( 0.34%) 56320275 ( 0.31%) 733.52
other 62483 ( 0.27%) 12486899 ( 0.07%) 199.84
frag 53758 ( 0.24%) 57886198 ( 0.32%) 1076.79
ip6 34480 ( 0.15%) 10676335 ( 0.06%) 309.64
tcp6 12447 ( 0.05%) 6808656 ( 0.04%) 547.01
http(s) 3215 ( 0.01%) 2519941 ( 0.01%) 783.81
http(c) 4959 ( 0.02%) 896145 ( 0.01%) 180.71
smtp 360 ( 0.00%) 172632 ( 0.00%) 479.53
ftp 20 ( 0.00%) 1929 ( 0.00%) 96.45
ssh 3 ( 0.00%) 246 ( 0.00%) 82.00
dns 4 ( 0.00%) 458 ( 0.00%) 114.50
bgp 362 ( 0.00%) 30337 ( 0.00%) 83.80
other 3524 ( 0.02%) 3186968 ( 0.02%) 904.36
udp6 17593 ( 0.08%) 2798894 ( 0.02%) 159.09
dns 16081 ( 0.07%) 2514469 ( 0.01%) 156.36
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
unreal 1 ( 0.00%) 118 ( 0.00%) 118.00
other 1509 ( 0.01%) 284084 ( 0.00%) 188.26
icmp6 3836 ( 0.02%) 521374 ( 0.00%) 135.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 574 ( 0.00%) 543331 ( 0.00%) 946.57
tcpdump file: 200903301900.dump.gz (539.50 MB)