Traffic Trace Info
DumpFile: 200903311230.dump
FileSize: 1094.90MB
Id: 200903311230
StartTime: Tue Mar 31 12:30:01 2009
EndTime: Tue Mar 31 12:45:00 2009
TotalTime: 899.25 seconds
TotalCapSize: 856.79MB CapLen: 96 bytes
# of packets: 15603670 (10416.35MB)
AvgRate: 97.17Mbps stddev:15.70M
IP flow (unique src/dst pair) Information
# of flows: 568933 (avg. 27.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 3.7% 2.4% 1.9% 1.5% 1.5% 1.5% 1.2% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 368767
Top 10 bandwidth usage (bytes/total in %):
16.0% 9.5% 7.3% 5.3% 5.3% 4.7% 4.5% 3.9% 3.8% 3.1%
# of IPv6 addresses: 2127
Top 10 bandwidth usage (bytes/total in %):
20.2% 20.2% 18.0% 17.5% 11.5% 8.6% 4.8% 4.3% 4.2% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311230.pktlen.png)
detailed numbers
[ 32- 63]: 3931538
[ 64- 127]: 3496214
[ 128- 255]: 586999
[ 256- 511]: 414238
[ 512- 1023]: 447042
[ 1024- 2047]: 6727639
Protocol Breakdown
![[protocol breakdown chart]](200903311230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15603670 (100.00%) 10922331554 (100.00%) 699.98
ip 15575226 ( 99.82%) 10914646087 ( 99.93%) 700.77
tcp 13203041 ( 84.61%) 10362078574 ( 94.87%) 784.83
http(s) 5391101 ( 34.55%) 7248477804 ( 66.36%) 1344.53
http(c) 3549976 ( 22.75%) 471577480 ( 4.32%) 132.84
squid 263070 ( 1.69%) 87535934 ( 0.80%) 332.75
smtp 272385 ( 1.75%) 88994093 ( 0.81%) 326.72
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 230892 ( 1.48%) 76021302 ( 0.70%) 329.25
pop3 7808 ( 0.05%) 3640785 ( 0.03%) 466.29
imap 3366 ( 0.02%) 356221 ( 0.00%) 105.83
telnet 5245 ( 0.03%) 592231 ( 0.01%) 112.91
ssh 48775 ( 0.31%) 6914963 ( 0.06%) 141.77
dns 13765 ( 0.09%) 3367863 ( 0.03%) 244.67
bgp 158 ( 0.00%) 63432 ( 0.00%) 401.47
napster 48 ( 0.00%) 3400 ( 0.00%) 70.83
realaud 116 ( 0.00%) 60922 ( 0.00%) 525.19
rtsp 331098 ( 2.12%) 375658458 ( 3.44%) 1134.58
icecast 399 ( 0.00%) 32511 ( 0.00%) 81.48
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 3084800 ( 19.77%) 1998778835 ( 18.30%) 647.94
udp 1673550 ( 10.73%) 487375524 ( 4.46%) 291.22
dns 952861 ( 6.11%) 245130681 ( 2.24%) 257.26
realaud 917 ( 0.01%) 58445 ( 0.00%) 63.74
halflif 23 ( 0.00%) 5052 ( 0.00%) 219.65
starcra 35 ( 0.00%) 6737 ( 0.00%) 192.49
everque 62 ( 0.00%) 12444 ( 0.00%) 200.71
unreal 20 ( 0.00%) 4889 ( 0.00%) 244.45
quake 19 ( 0.00%) 2589 ( 0.00%) 136.26
cuseeme 4 ( 0.00%) 618 ( 0.00%) 154.50
other 719464 ( 4.61%) 242024280 ( 2.22%) 336.40
icmp 637973 ( 4.09%) 52655437 ( 0.48%) 82.54
ipip 312 ( 0.00%) 36936 ( 0.00%) 118.38
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 24708 ( 0.16%) 5380034 ( 0.05%) 217.74
other 35534 ( 0.23%) 7102518 ( 0.07%) 199.88
frag 39934 ( 0.26%) 44124269 ( 0.40%) 1104.93
ip6 28444 ( 0.18%) 7685467 ( 0.07%) 270.20
tcp6 6713 ( 0.04%) 3896894 ( 0.04%) 580.50
http(s) 1426 ( 0.01%) 2069351 ( 0.02%) 1451.16
http(c) 2640 ( 0.02%) 238935 ( 0.00%) 90.51
smtp 140 ( 0.00%) 62349 ( 0.00%) 445.35
bgp 385 ( 0.00%) 41433 ( 0.00%) 107.62
other 2122 ( 0.01%) 1484826 ( 0.01%) 699.73
udp6 16364 ( 0.10%) 2671711 ( 0.02%) 163.27
dns 14421 ( 0.09%) 2254604 ( 0.02%) 156.34
realaud 1 ( 0.00%) 117 ( 0.00%) 117.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1941 ( 0.01%) 416882 ( 0.00%) 214.78
icmp6 4786 ( 0.03%) 606660 ( 0.01%) 126.76
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 551 ( 0.00%) 506122 ( 0.00%) 918.55
tcpdump file: 200903311230.dump.gz (377.02 MB)