Traffic Trace Info
DumpFile: 200903311300.dump
FileSize: 1077.78MB
Id: 200903311300
StartTime: Tue Mar 31 13:00:00 2009
EndTime: Tue Mar 31 13:15:00 2009
TotalTime: 900.21 seconds
TotalCapSize: 841.63MB CapLen: 96 bytes
# of packets: 15475494 (10421.61MB)
AvgRate: 97.11Mbps stddev:12.25M
IP flow (unique src/dst pair) Information
# of flows: 592153 (avg. 26.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 3.2% 2.4% 1.9% 1.8% 1.7% 1.6% 1.6% 1.6% 1.4%
IP address Information
# of IPv4 addresses: 378042
Top 10 bandwidth usage (bytes/total in %):
13.4% 9.1% 4.8% 4.8% 4.8% 4.7% 3.6% 3.6% 3.3% 2.5%
# of IPv6 addresses: 1949
Top 10 bandwidth usage (bytes/total in %):
32.4% 19.3% 16.8% 9.4% 9.4% 8.7% 8.7% 5.1% 3.9% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311300.pktlen.png)
detailed numbers
[ 32- 63]: 3600798
[ 64- 127]: 3507841
[ 128- 255]: 723120
[ 256- 511]: 418094
[ 512- 1023]: 470311
[ 1024- 2047]: 6755330
Protocol Breakdown
![[protocol breakdown chart]](200903311300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15475494 (100.00%) 10927851712 (100.00%) 706.14
ip 15444267 ( 99.80%) 10919818340 ( 99.93%) 707.05
tcp 12736867 ( 82.30%) 10085036719 ( 92.29%) 791.80
http(s) 4906987 ( 31.71%) 6496769424 ( 59.45%) 1323.98
http(c) 3208717 ( 20.73%) 456602203 ( 4.18%) 142.30
squid 243325 ( 1.57%) 76916810 ( 0.70%) 316.11
smtp 261169 ( 1.69%) 83547670 ( 0.76%) 319.90
ftp 265164 ( 1.71%) 118933515 ( 1.09%) 448.53
pop3 12206 ( 0.08%) 3991170 ( 0.04%) 326.98
imap 6951 ( 0.04%) 1812044 ( 0.02%) 260.69
telnet 3807 ( 0.02%) 654814 ( 0.01%) 172.00
ssh 62702 ( 0.41%) 8756244 ( 0.08%) 139.65
dns 12534 ( 0.08%) 1298863 ( 0.01%) 103.63
bgp 160 ( 0.00%) 49732 ( 0.00%) 310.82
napster 9 ( 0.00%) 879 ( 0.00%) 97.67
realaud 24 ( 0.00%) 1941 ( 0.00%) 80.88
rtsp 243130 ( 1.57%) 249062066 ( 2.28%) 1024.40
icecast 252 ( 0.00%) 17648 ( 0.00%) 70.03
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 3509729 ( 22.68%) 2586621636 ( 23.67%) 736.99
udp 2077990 ( 13.43%) 685087051 ( 6.27%) 329.69
dns 953082 ( 6.16%) 235272655 ( 2.15%) 246.85
realaud 1235 ( 0.01%) 75250 ( 0.00%) 60.93
halflif 19 ( 0.00%) 1553 ( 0.00%) 81.74
starcra 38 ( 0.00%) 8100 ( 0.00%) 213.16
everque 50 ( 0.00%) 11039 ( 0.00%) 220.78
unreal 12 ( 0.00%) 1764 ( 0.00%) 147.00
quake 18 ( 0.00%) 2016 ( 0.00%) 112.00
cuseeme 7 ( 0.00%) 907 ( 0.00%) 129.57
other 1123353 ( 7.26%) 449565297 ( 4.11%) 400.20
icmp 459356 ( 2.97%) 40796064 ( 0.37%) 88.81
ipip 326 ( 0.00%) 39446 ( 0.00%) 121.00
ipsec 112 ( 0.00%) 17624 ( 0.00%) 157.36
ip6 84362 ( 0.55%) 93644901 ( 0.86%) 1110.04
other 85254 ( 0.55%) 15196535 ( 0.14%) 178.25
frag 43800 ( 0.28%) 48198339 ( 0.44%) 1100.42
ip6 31227 ( 0.20%) 8033372 ( 0.07%) 257.26
tcp6 9683 ( 0.06%) 4395183 ( 0.04%) 453.91
http(s) 927 ( 0.01%) 1030145 ( 0.01%) 1111.27
http(c) 5286 ( 0.03%) 467844 ( 0.00%) 88.51
smtp 212 ( 0.00%) 95935 ( 0.00%) 452.52
ftp 1 ( 0.00%) 90 ( 0.00%) 90.00
imap 102 ( 0.00%) 42721 ( 0.00%) 418.83
ssh 6 ( 0.00%) 468 ( 0.00%) 78.00
bgp 357 ( 0.00%) 29446 ( 0.00%) 82.48
other 2792 ( 0.02%) 2728534 ( 0.02%) 977.27
udp6 16852 ( 0.11%) 2781527 ( 0.03%) 165.06
dns 15040 ( 0.10%) 2378370 ( 0.02%) 158.14
everque 1 ( 0.00%) 118 ( 0.00%) 118.00
other 1811 ( 0.01%) 403039 ( 0.00%) 222.55
icmp6 4314 ( 0.03%) 553438 ( 0.01%) 128.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 348 ( 0.00%) 299144 ( 0.00%) 859.61
tcpdump file: 200903311300.dump.gz (375.43 MB)