Traffic Trace Info
DumpFile: 200903311115.dump
FileSize: 1032.94MB
Id: 200903311115
StartTime: Tue Mar 31 11:15:01 2009
EndTime: Tue Mar 31 11:30:00 2009
TotalTime: 899.08 seconds
TotalCapSize: 807.98MB CapLen: 96 bytes
# of packets: 14742610 (10309.03MB)
AvgRate: 96.20Mbps stddev:17.22M
IP flow (unique src/dst pair) Information
# of flows: 577001 (avg. 25.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 4.5% 2.4% 2.2% 2.1% 1.8% 1.5% 1.5% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 376343
Top 10 bandwidth usage (bytes/total in %):
11.1% 11.1% 9.5% 6.3% 6.2% 5.6% 5.1% 4.5% 3.3% 2.5%
# of IPv6 addresses: 2184
Top 10 bandwidth usage (bytes/total in %):
21.9% 21.9% 12.5% 10.2% 7.6% 4.7% 4.6% 4.5% 4.5% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311115.pktlen.png)
detailed numbers
[ 32- 63]: 3140068
[ 64- 127]: 3451779
[ 128- 255]: 505547
[ 256- 511]: 410893
[ 512- 1023]: 500728
[ 1024- 2047]: 6733595
Protocol Breakdown
![[protocol breakdown chart]](200903311115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14742610 (100.00%) 10809804632 (100.00%) 733.24
ip 14714707 ( 99.81%) 10804033642 ( 99.95%) 734.23
tcp 11679858 ( 79.23%) 9970218690 ( 92.23%) 853.62
http(s) 4189653 ( 28.42%) 5472312300 ( 50.62%) 1306.15
http(c) 2727946 ( 18.50%) 382933986 ( 3.54%) 140.37
squid 210094 ( 1.43%) 77056807 ( 0.71%) 366.77
smtp 324985 ( 2.20%) 134528253 ( 1.24%) 413.95
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 196877 ( 1.34%) 216854401 ( 2.01%) 1101.47
pop3 8497 ( 0.06%) 4599277 ( 0.04%) 541.28
imap 5473 ( 0.04%) 1175791 ( 0.01%) 214.83
telnet 2537 ( 0.02%) 329424 ( 0.00%) 129.85
ssh 22868 ( 0.16%) 3487203 ( 0.03%) 152.49
dns 13968 ( 0.09%) 1505122 ( 0.01%) 107.76
bgp 144 ( 0.00%) 47714 ( 0.00%) 331.35
realaud 26 ( 0.00%) 1718 ( 0.00%) 66.08
rtsp 225393 ( 1.53%) 214916528 ( 1.99%) 953.52
icecast 9172 ( 0.06%) 7723572 ( 0.07%) 842.08
other 3742208 ( 25.38%) 3452745574 ( 31.94%) 922.65
udp 1906388 ( 12.93%) 733532533 ( 6.79%) 384.78
dns 958020 ( 6.50%) 237553377 ( 2.20%) 247.96
realaud 1877 ( 0.01%) 114360 ( 0.00%) 60.93
halflif 31 ( 0.00%) 3710 ( 0.00%) 119.68
starcra 24 ( 0.00%) 4310 ( 0.00%) 179.58
everque 61 ( 0.00%) 11835 ( 0.00%) 194.02
unreal 12 ( 0.00%) 2008 ( 0.00%) 167.33
quake 14 ( 0.00%) 1156 ( 0.00%) 82.57
cuseeme 8 ( 0.00%) 1252 ( 0.00%) 156.50
other 946202 ( 6.42%) 495718550 ( 4.59%) 523.90
icmp 1070480 ( 7.26%) 82798376 ( 0.77%) 77.35
ipip 352 ( 0.00%) 43808 ( 0.00%) 124.45
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 29929 ( 0.20%) 11173166 ( 0.10%) 373.32
other 27590 ( 0.19%) 6249689 ( 0.06%) 226.52
frag 41449 ( 0.28%) 45318827 ( 0.42%) 1093.36
ip6 27901 ( 0.19%) 5770870 ( 0.05%) 206.83
tcp6 6908 ( 0.05%) 2222880 ( 0.02%) 321.78
http(s) 262 ( 0.00%) 49144 ( 0.00%) 187.57
http(c) 3249 ( 0.02%) 305986 ( 0.00%) 94.18
smtp 989 ( 0.01%) 389651 ( 0.00%) 393.98
imap 158 ( 0.00%) 48291 ( 0.00%) 305.64
dns 6 ( 0.00%) 555 ( 0.00%) 92.50
bgp 366 ( 0.00%) 31150 ( 0.00%) 85.11
other 1878 ( 0.01%) 1398103 ( 0.01%) 744.46
udp6 16884 ( 0.11%) 2623896 ( 0.02%) 155.41
dns 14803 ( 0.10%) 2275660 ( 0.02%) 153.73
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
other 2080 ( 0.01%) 348132 ( 0.00%) 167.37
icmp6 3636 ( 0.02%) 511348 ( 0.00%) 140.63
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 443 ( 0.00%) 408666 ( 0.00%) 922.50
tcpdump file: 200903311115.dump.gz (349.58 MB)