Traffic Trace Info
DumpFile: 200903311245.dump
FileSize: 1026.51MB
Id: 200903311245
StartTime: Tue Mar 31 12:45:00 2009
EndTime: Tue Mar 31 13:00:00 2009
TotalTime: 900.18 seconds
TotalCapSize: 803.73MB CapLen: 96 bytes
# of packets: 14599835 (9593.48MB)
AvgRate: 89.39Mbps stddev:10.97M
IP flow (unique src/dst pair) Information
# of flows: 589814 (avg. 24.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.7% 2.0% 1.8% 1.7% 1.2% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 379808
Top 10 bandwidth usage (bytes/total in %):
12.2% 10.3% 6.3% 5.5% 4.4% 4.4% 4.2% 4.0% 3.6% 2.8%
# of IPv6 addresses: 1749
Top 10 bandwidth usage (bytes/total in %):
55.7% 50.7% 28.5% 28.5% 5.0% 2.7% 2.6% 1.6% 1.2% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311245.pktlen.png)
detailed numbers
[ 32- 63]: 3617784
[ 64- 127]: 3255350
[ 128- 255]: 626944
[ 256- 511]: 429021
[ 512- 1023]: 568343
[ 1024- 2047]: 6102393
Protocol Breakdown
![[protocol breakdown chart]](200903311245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14599835 (100.00%) 10059491190 (100.00%) 689.01
ip 14561150 ( 99.74%) 10034193602 ( 99.75%) 689.11
tcp 12155348 ( 83.26%) 9339125813 ( 92.84%) 768.31
http(s) 4653467 ( 31.87%) 6099804264 ( 60.64%) 1310.81
http(c) 3190815 ( 21.86%) 479930465 ( 4.77%) 150.41
squid 269935 ( 1.85%) 92221115 ( 0.92%) 341.64
smtp 284763 ( 1.95%) 132160650 ( 1.31%) 464.11
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 232502 ( 1.59%) 71792852 ( 0.71%) 308.78
pop3 7542 ( 0.05%) 2773483 ( 0.03%) 367.74
imap 5485 ( 0.04%) 1909555 ( 0.02%) 348.14
telnet 4374 ( 0.03%) 562044 ( 0.01%) 128.50
ssh 53408 ( 0.37%) 7467208 ( 0.07%) 139.81
dns 11820 ( 0.08%) 1206146 ( 0.01%) 102.04
bgp 167 ( 0.00%) 71354 ( 0.00%) 427.27
napster 7 ( 0.00%) 1826 ( 0.00%) 260.86
realaud 22 ( 0.00%) 2371 ( 0.00%) 107.77
rtsp 358181 ( 2.45%) 271978862 ( 2.70%) 759.33
icecast 321 ( 0.00%) 22147 ( 0.00%) 68.99
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 3082510 ( 21.11%) 2177219731 ( 21.64%) 706.31
udp 1779493 ( 12.19%) 559211546 ( 5.56%) 314.25
dns 962652 ( 6.59%) 244650971 ( 2.43%) 254.14
realaud 3005 ( 0.02%) 1636732 ( 0.02%) 544.67
halflif 26 ( 0.00%) 3778 ( 0.00%) 145.31
starcra 44 ( 0.00%) 8126 ( 0.00%) 184.68
everque 57 ( 0.00%) 11393 ( 0.00%) 199.88
unreal 30 ( 0.00%) 5489 ( 0.00%) 182.97
quake 17 ( 0.00%) 3841 ( 0.00%) 225.94
cuseeme 5 ( 0.00%) 436 ( 0.00%) 87.20
other 813539 ( 5.57%) 312787080 ( 3.11%) 384.48
icmp 506772 ( 3.47%) 43679094 ( 0.43%) 86.19
ipip 317 ( 0.00%) 39306 ( 0.00%) 123.99
ipsec 116 ( 0.00%) 18432 ( 0.00%) 158.90
ip6 78577 ( 0.54%) 83567068 ( 0.83%) 1063.51
other 40527 ( 0.28%) 8552343 ( 0.09%) 211.03
frag 40819 ( 0.28%) 45078573 ( 0.45%) 1104.35
ip6 38685 ( 0.26%) 25297588 ( 0.25%) 653.94
tcp6 18371 ( 0.13%) 21938105 ( 0.22%) 1194.17
http(s) 5174 ( 0.04%) 7411880 ( 0.07%) 1432.52
http(c) 2171 ( 0.01%) 192984 ( 0.00%) 88.89
smtp 259 ( 0.00%) 105070 ( 0.00%) 405.68
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 5 ( 0.00%) 545 ( 0.00%) 109.00
bgp 359 ( 0.00%) 30029 ( 0.00%) 83.65
other 10399 ( 0.07%) 14197200 ( 0.14%) 1365.25
udp6 15265 ( 0.10%) 2354943 ( 0.02%) 154.27
dns 13763 ( 0.09%) 2113027 ( 0.02%) 153.53
everque 2 ( 0.00%) 232 ( 0.00%) 116.00
other 1500 ( 0.01%) 241684 ( 0.00%) 161.12
icmp6 4525 ( 0.03%) 552422 ( 0.01%) 122.08
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 494 ( 0.00%) 448038 ( 0.00%) 906.96
tcpdump file: 200903311245.dump.gz (361.43 MB)