Traffic Trace Info
DumpFile: 200903302215.dump
FileSize: 1416.83MB
Id: 200903302215
StartTime: Mon Mar 30 22:15:01 2009
EndTime: Mon Mar 30 22:30:00 2009
TotalTime: 899.71 seconds
TotalCapSize: 1103.40MB CapLen: 96 bytes
# of packets: 20526158 (14856.53MB)
AvgRate: 138.52Mbps stddev:16.07M
IP flow (unique src/dst pair) Information
# of flows: 766003 (avg. 26.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 4.9% 1.2% 1.1% 1.1% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 503603
Top 10 bandwidth usage (bytes/total in %):
12.6% 10.8% 8.5% 7.1% 6.3% 6.3% 6.0% 5.0% 5.0% 2.7%
# of IPv6 addresses: 2587
Top 10 bandwidth usage (bytes/total in %):
25.4% 18.2% 16.6% 16.6% 12.8% 12.8% 8.5% 7.7% 7.3% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903302215.pktlen.png)
detailed numbers
[ 32- 63]: 4274281
[ 64- 127]: 4489233
[ 128- 255]: 1035577
[ 256- 511]: 445004
[ 512- 1023]: 534501
[ 1024- 2047]: 9747562
Protocol Breakdown
![[protocol breakdown chart]](200903302215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20526158 (100.00%) 15578200792 (100.00%) 758.94
ip 20472322 ( 99.74%) 15568331291 ( 99.94%) 760.46
tcp 16065299 ( 78.27%) 13725481537 ( 88.11%) 854.36
http(s) 7562868 ( 36.85%) 10435415750 ( 66.99%) 1379.82
http(c) 3463031 ( 16.87%) 296681881 ( 1.90%) 85.67
squid 372286 ( 1.81%) 190406843 ( 1.22%) 511.45
smtp 366870 ( 1.79%) 64502599 ( 0.41%) 175.82
nntp 7 ( 0.00%) 578 ( 0.00%) 82.57
ftp 255560 ( 1.25%) 248751460 ( 1.60%) 973.36
pop3 8999 ( 0.04%) 4117101 ( 0.03%) 457.51
imap 4767 ( 0.02%) 673089 ( 0.00%) 141.20
telnet 4175 ( 0.02%) 1472772 ( 0.01%) 352.76
ssh 528066 ( 2.57%) 101408303 ( 0.65%) 192.04
dns 30122 ( 0.15%) 17813187 ( 0.11%) 591.37
bgp 199 ( 0.00%) 90717 ( 0.00%) 455.86
napster 304 ( 0.00%) 62982 ( 0.00%) 207.18
realaud 21 ( 0.00%) 2680 ( 0.00%) 127.62
rtsp 4097 ( 0.02%) 1720649 ( 0.01%) 419.98
icecast 36523 ( 0.18%) 16798535 ( 0.11%) 459.94
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 3427349 ( 16.70%) 2345559111 ( 15.06%) 684.37
udp 3233360 ( 15.75%) 1657397997 ( 10.64%) 512.59
dns 1197616 ( 5.83%) 255609764 ( 1.64%) 213.43
realaud 1282 ( 0.01%) 77995 ( 0.00%) 60.84
halflif 38895 ( 0.19%) 8849306 ( 0.06%) 227.52
starcra 36 ( 0.00%) 6801 ( 0.00%) 188.92
everque 63 ( 0.00%) 12569 ( 0.00%) 199.51
unreal 543 ( 0.00%) 252557 ( 0.00%) 465.11
quake 20 ( 0.00%) 1783 ( 0.00%) 89.15
cuseeme 6 ( 0.00%) 559 ( 0.00%) 93.17
other 1994746 ( 9.72%) 1392501862 ( 8.94%) 698.08
icmp 1038031 ( 5.06%) 129694585 ( 0.83%) 124.94
ipip 325 ( 0.00%) 39634 ( 0.00%) 121.95
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 65985 ( 0.32%) 40573318 ( 0.26%) 614.89
other 69210 ( 0.34%) 15126524 ( 0.10%) 218.56
frag 68893 ( 0.34%) 70156601 ( 0.45%) 1018.34
ip6 53836 ( 0.26%) 9869501 ( 0.06%) 183.33
tcp6 31927 ( 0.16%) 6006484 ( 0.04%) 188.13
http(s) 2903 ( 0.01%) 1818272 ( 0.01%) 626.34
http(c) 26256 ( 0.13%) 2570017 ( 0.02%) 97.88
smtp 289 ( 0.00%) 144685 ( 0.00%) 500.64
imap 83 ( 0.00%) 28151 ( 0.00%) 339.17
bgp 359 ( 0.00%) 29876 ( 0.00%) 83.22
other 2037 ( 0.01%) 1415483 ( 0.01%) 694.89
udp6 16934 ( 0.08%) 2628245 ( 0.02%) 155.21
dns 14152 ( 0.07%) 2096420 ( 0.01%) 148.14
halflif 1 ( 0.00%) 142 ( 0.00%) 142.00
cuseeme 1 ( 0.00%) 119 ( 0.00%) 119.00
other 2780 ( 0.01%) 531564 ( 0.00%) 191.21
icmp6 4239 ( 0.02%) 583563 ( 0.00%) 137.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 706 ( 0.00%) 647129 ( 0.00%) 916.61
tcpdump file: 200903302215.dump.gz (502.69 MB)