Traffic Trace Info
DumpFile: 200903302015.dump
FileSize: 1364.12MB
Id: 200903302015
StartTime: Mon Mar 30 20:15:01 2009
EndTime: Mon Mar 30 20:30:00 2009
TotalTime: 899.26 seconds
TotalCapSize: 1062.51MB CapLen: 96 bytes
# of packets: 19764144 (14022.12MB)
AvgRate: 130.83Mbps stddev:12.80M
IP flow (unique src/dst pair) Information
# of flows: 885932 (avg. 22.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 3.6% 1.9% 1.8% 1.8% 1.6% 1.5% 1.3% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 583318
Top 10 bandwidth usage (bytes/total in %):
14.5% 11.6% 9.9% 4.9% 4.8% 4.7% 4.2% 3.6% 3.2% 2.4%
# of IPv6 addresses: 2567
Top 10 bandwidth usage (bytes/total in %):
29.3% 20.1% 19.6% 14.8% 14.7% 9.2% 7.8% 3.7% 3.2% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903302015.pktlen.png)
detailed numbers
[ 32- 63]: 4086251
[ 64- 127]: 4525234
[ 128- 255]: 971290
[ 256- 511]: 484753
[ 512- 1023]: 344371
[ 1024- 2047]: 9352245
Protocol Breakdown
![[protocol breakdown chart]](200903302015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19764144 (100.00%) 14703253329 (100.00%) 743.94
ip 19730887 ( 99.83%) 14694499813 ( 99.94%) 744.75
tcp 15781380 ( 79.85%) 13571481140 ( 92.30%) 859.97
http(s) 8442372 ( 42.72%) 11510474349 ( 78.29%) 1363.42
http(c) 4037303 ( 20.43%) 354839412 ( 2.41%) 87.89
squid 338395 ( 1.71%) 152603923 ( 1.04%) 450.96
smtp 305348 ( 1.54%) 128611498 ( 0.87%) 421.20
nntp 3 ( 0.00%) 184 ( 0.00%) 61.33
ftp 95921 ( 0.49%) 83039684 ( 0.56%) 865.71
pop3 8063 ( 0.04%) 3854064 ( 0.03%) 477.99
imap 3402 ( 0.02%) 400550 ( 0.00%) 117.74
telnet 1391 ( 0.01%) 153340 ( 0.00%) 110.24
ssh 68420 ( 0.35%) 16063401 ( 0.11%) 234.78
dns 15290 ( 0.08%) 1586720 ( 0.01%) 103.78
bgp 163 ( 0.00%) 71753 ( 0.00%) 440.20
napster 23 ( 0.00%) 1941 ( 0.00%) 84.39
realaud 15 ( 0.00%) 1046 ( 0.00%) 69.73
rtsp 4833 ( 0.02%) 342910 ( 0.00%) 70.95
icecast 16529 ( 0.08%) 1091286 ( 0.01%) 66.02
hotline 12 ( 0.00%) 966 ( 0.00%) 80.50
other 2443892 ( 12.37%) 1318343813 ( 8.97%) 539.44
udp 2892501 ( 14.64%) 937803163 ( 6.38%) 324.22
dns 1011107 ( 5.12%) 233469789 ( 1.59%) 230.91
realaud 23450 ( 0.12%) 12661675 ( 0.09%) 539.94
halflif 119 ( 0.00%) 19556 ( 0.00%) 164.34
starcra 45 ( 0.00%) 6516 ( 0.00%) 144.80
everque 111 ( 0.00%) 15397 ( 0.00%) 138.71
unreal 499 ( 0.00%) 239173 ( 0.00%) 479.30
quake 19 ( 0.00%) 1846 ( 0.00%) 97.16
cuseeme 6 ( 0.00%) 2159 ( 0.00%) 359.83
other 1855648 ( 9.39%) 691177756 ( 4.70%) 372.47
icmp 829533 ( 4.20%) 117177999 ( 0.80%) 141.26
ipip 328 ( 0.00%) 39014 ( 0.00%) 118.95
ipsec 116 ( 0.00%) 18256 ( 0.00%) 157.38
ip6 69995 ( 0.35%) 42156840 ( 0.29%) 602.28
other 157034 ( 0.79%) 25823401 ( 0.18%) 164.44
frag 66872 ( 0.34%) 67131176 ( 0.46%) 1003.88
ip6 33257 ( 0.17%) 8753516 ( 0.06%) 263.21
tcp6 11481 ( 0.06%) 4550411 ( 0.03%) 396.34
http(s) 2877 ( 0.01%) 1792286 ( 0.01%) 622.97
http(c) 5631 ( 0.03%) 1076258 ( 0.01%) 191.13
smtp 423 ( 0.00%) 215446 ( 0.00%) 509.33
bgp 366 ( 0.00%) 31335 ( 0.00%) 85.61
other 2184 ( 0.01%) 1435086 ( 0.01%) 657.09
udp6 17296 ( 0.09%) 3121605 ( 0.02%) 180.48
dns 13232 ( 0.07%) 1969622 ( 0.01%) 148.85
realaud 2 ( 0.00%) 221 ( 0.00%) 110.50
halflif 1 ( 0.00%) 576 ( 0.00%) 576.00
starcra 4 ( 0.00%) 1332 ( 0.00%) 333.00
other 4057 ( 0.02%) 1149854 ( 0.01%) 283.42
icmp6 3926 ( 0.02%) 583510 ( 0.00%) 148.63
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 524 ( 0.00%) 493910 ( 0.00%) 942.58
tcpdump file: 200903302015.dump.gz (468.70 MB)