Traffic Trace Info
DumpFile: 200903311000.dump
FileSize: 1164.02MB
Id: 200903311000
StartTime: Tue Mar 31 10:00:00 2009
EndTime: Tue Mar 31 10:15:00 2009
TotalTime: 899.98 seconds
TotalCapSize: 916.19MB CapLen: 96 bytes
# of packets: 16241171 (10770.00MB)
AvgRate: 100.38Mbps stddev:10.24M
IP flow (unique src/dst pair) Information
# of flows: 633597 (avg. 25.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.7% 1.8% 1.7% 1.5% 1.2% 1.2% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 404545
Top 10 bandwidth usage (bytes/total in %):
24.5% 18.7% 8.4% 7.3% 5.9% 5.7% 4.0% 3.7% 2.6% 1.9%
# of IPv6 addresses: 2606
Top 10 bandwidth usage (bytes/total in %):
75.4% 75.4% 7.5% 3.8% 3.7% 3.2% 2.2% 1.6% 1.3% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311000.pktlen.png)
detailed numbers
[ 32- 63]: 3241305
[ 64- 127]: 4735561
[ 128- 255]: 509241
[ 256- 511]: 375809
[ 512- 1023]: 355883
[ 1024- 2047]: 7023372
Protocol Breakdown
![[protocol breakdown chart]](200903311000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16241171 (100.00%) 11293165702 (100.00%) 695.34
ip 16192949 ( 99.70%) 11259289732 ( 99.70%) 695.32
tcp 14162671 ( 87.20%) 10676402481 ( 94.54%) 753.84
http(s) 4495102 ( 27.68%) 6002820855 ( 53.15%) 1335.41
http(c) 4834692 ( 29.77%) 433211057 ( 3.84%) 89.60
squid 209070 ( 1.29%) 65141377 ( 0.58%) 311.58
smtp 322300 ( 1.98%) 118145317 ( 1.05%) 366.57
ftp 99326 ( 0.61%) 80133053 ( 0.71%) 806.77
pop3 8858 ( 0.05%) 2849978 ( 0.03%) 321.74
imap 3199 ( 0.02%) 441967 ( 0.00%) 138.16
telnet 1716 ( 0.01%) 196686 ( 0.00%) 114.62
ssh 45726 ( 0.28%) 6975326 ( 0.06%) 152.55
dns 15356 ( 0.09%) 6334573 ( 0.06%) 412.51
bgp 143 ( 0.00%) 46049 ( 0.00%) 322.02
napster 5 ( 0.00%) 645 ( 0.00%) 129.00
realaud 11 ( 0.00%) 786 ( 0.00%) 71.45
rtsp 128185 ( 0.79%) 27834352 ( 0.25%) 217.14
icecast 439 ( 0.00%) 28675 ( 0.00%) 65.32
other 3998541 ( 24.62%) 3932241665 ( 34.82%) 983.42
udp 1583998 ( 9.75%) 537396639 ( 4.76%) 339.27
dns 942118 ( 5.80%) 240174717 ( 2.13%) 254.93
realaud 2410 ( 0.01%) 1930680 ( 0.02%) 801.11
halflif 140 ( 0.00%) 29665 ( 0.00%) 211.89
starcra 28 ( 0.00%) 4006 ( 0.00%) 143.07
everque 58 ( 0.00%) 11942 ( 0.00%) 205.90
unreal 17 ( 0.00%) 2098 ( 0.00%) 123.41
quake 20 ( 0.00%) 1899 ( 0.00%) 94.95
cuseeme 3 ( 0.00%) 258 ( 0.00%) 86.00
other 639080 ( 3.93%) 295134846 ( 2.61%) 461.81
icmp 403454 ( 2.48%) 35944300 ( 0.32%) 89.09
ipip 316 ( 0.00%) 38528 ( 0.00%) 121.92
ipsec 1003 ( 0.01%) 161306 ( 0.00%) 160.82
ip6 29957 ( 0.18%) 6661016 ( 0.06%) 222.35
other 11550 ( 0.07%) 2685462 ( 0.02%) 232.51
frag 46289 ( 0.29%) 49766290 ( 0.44%) 1075.12
ip6 48222 ( 0.30%) 33875970 ( 0.30%) 702.50
tcp6 26810 ( 0.17%) 29646634 ( 0.26%) 1105.81
http(s) 729 ( 0.00%) 782438 ( 0.01%) 1073.30
http(c) 2338 ( 0.01%) 217286 ( 0.00%) 92.94
smtp 154 ( 0.00%) 76902 ( 0.00%) 499.36
imap 398 ( 0.00%) 310487 ( 0.00%) 780.12
ssh 149 ( 0.00%) 40718 ( 0.00%) 273.28
bgp 369 ( 0.00%) 32150 ( 0.00%) 87.13
other 22673 ( 0.14%) 28186653 ( 0.25%) 1243.18
udp6 16444 ( 0.10%) 2787919 ( 0.02%) 169.54
dns 13497 ( 0.08%) 2033425 ( 0.02%) 150.66
everque 2 ( 0.00%) 210 ( 0.00%) 105.00
other 2945 ( 0.02%) 754284 ( 0.01%) 256.12
icmp6 3991 ( 0.02%) 556895 ( 0.00%) 139.54
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 946 ( 0.01%) 880306 ( 0.01%) 930.56
tcpdump file: 200903311000.dump.gz (378.54 MB)