Traffic Trace Info
DumpFile: 200903301915.dump
FileSize: 1412.76MB
Id: 200903301915
StartTime: Mon Mar 30 19:15:01 2009
EndTime: Mon Mar 30 19:30:01 2009
TotalTime: 899.66 seconds
TotalCapSize: 1105.80MB CapLen: 96 bytes
# of packets: 20112477 (14469.74MB)
AvgRate: 134.91Mbps stddev:38.94M
IP flow (unique src/dst pair) Information
# of flows: 863742 (avg. 23.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.5% 3.3% 2.2% 1.3% 1.1% 1.1% 1.0% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 503224
Top 10 bandwidth usage (bytes/total in %):
17.5% 17.5% 9.7% 9.4% 8.3% 6.0% 3.7% 3.4% 2.3% 2.2%
# of IPv6 addresses: 2213
Top 10 bandwidth usage (bytes/total in %):
21.2% 14.9% 14.7% 14.5% 11.3% 7.6% 7.5% 6.2% 6.2% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301915.pktlen.png)
detailed numbers
[ 32- 63]: 3987430
[ 64- 127]: 4337913
[ 128- 255]: 1087797
[ 256- 511]: 430190
[ 512- 1023]: 546609
[ 1024- 2047]: 9722538
Protocol Breakdown
![[protocol breakdown chart]](200903301915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20112477 (100.00%) 15172621810 (100.00%) 754.39
ip 20076715 ( 99.82%) 15163924217 ( 99.94%) 755.30
tcp 16638319 ( 82.73%) 13808937575 ( 91.01%) 829.95
http(s) 6055902 ( 30.11%) 8205566578 ( 54.08%) 1354.97
http(c) 3701380 ( 18.40%) 346061343 ( 2.28%) 93.50
squid 434001 ( 2.16%) 264240525 ( 1.74%) 608.85
smtp 482627 ( 2.40%) 197593017 ( 1.30%) 409.41
ftp 131499 ( 0.65%) 108761470 ( 0.72%) 827.09
pop3 14438 ( 0.07%) 13780931 ( 0.09%) 954.49
imap 4437 ( 0.02%) 972520 ( 0.01%) 219.18
telnet 13243 ( 0.07%) 7371763 ( 0.05%) 556.65
ssh 2845137 ( 14.15%) 2676087275 ( 17.64%) 940.58
dns 14286 ( 0.07%) 1420288 ( 0.01%) 99.42
bgp 164 ( 0.00%) 53300 ( 0.00%) 325.00
napster 432 ( 0.00%) 297232 ( 0.00%) 688.04
realaud 43 ( 0.00%) 3358 ( 0.00%) 78.09
rtsp 51610 ( 0.26%) 71189011 ( 0.47%) 1379.36
icecast 17432 ( 0.09%) 1154772 ( 0.01%) 66.24
hotline 79 ( 0.00%) 5460 ( 0.00%) 69.11
other 2871607 ( 14.28%) 1914378612 ( 12.62%) 666.66
udp 2583592 ( 12.85%) 1189894236 ( 7.84%) 460.56
dns 1034756 ( 5.14%) 236725722 ( 1.56%) 228.77
rip 1 ( 0.00%) 104 ( 0.00%) 104.00
realaud 1721 ( 0.01%) 103923 ( 0.00%) 60.39
halflif 3712 ( 0.02%) 239854 ( 0.00%) 64.62
starcra 37 ( 0.00%) 5535 ( 0.00%) 149.59
everque 65 ( 0.00%) 12638 ( 0.00%) 194.43
unreal 507 ( 0.00%) 231430 ( 0.00%) 456.47
quake 23 ( 0.00%) 2046 ( 0.00%) 88.96
cuseeme 6 ( 0.00%) 1329 ( 0.00%) 221.50
other 1542634 ( 7.67%) 952462252 ( 6.28%) 617.43
icmp 714918 ( 3.55%) 103642406 ( 0.68%) 144.97
ipip 323 ( 0.00%) 40094 ( 0.00%) 124.13
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 70269 ( 0.35%) 46920501 ( 0.31%) 667.73
other 69184 ( 0.34%) 14472025 ( 0.10%) 209.18
frag 63351 ( 0.31%) 64317626 ( 0.42%) 1015.26
ip6 35760 ( 0.18%) 8697473 ( 0.06%) 243.22
tcp6 15404 ( 0.08%) 5090475 ( 0.03%) 330.46
http(s) 2684 ( 0.01%) 1987888 ( 0.01%) 740.64
http(c) 5068 ( 0.03%) 895771 ( 0.01%) 176.75
smtp 4886 ( 0.02%) 498785 ( 0.00%) 102.08
imap 312 ( 0.00%) 273596 ( 0.00%) 876.91
bgp 365 ( 0.00%) 30876 ( 0.00%) 84.59
other 2089 ( 0.01%) 1403559 ( 0.01%) 671.88
udp6 16337 ( 0.08%) 2810354 ( 0.02%) 172.02
dns 13675 ( 0.07%) 2120500 ( 0.01%) 155.06
halflif 1 ( 0.00%) 576 ( 0.00%) 576.00
starcra 2 ( 0.00%) 225 ( 0.00%) 112.50
other 2659 ( 0.01%) 689053 ( 0.00%) 259.14
icmp6 3751 ( 0.02%) 566884 ( 0.00%) 151.13
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 238 ( 0.00%) 225680 ( 0.00%) 948.24
tcpdump file: 200903301915.dump.gz (484.99 MB)