Traffic Trace Info
DumpFile: 200903311315.dump
FileSize: 1121.59MB
Id: 200903311315
StartTime: Tue Mar 31 13:15:00 2009
EndTime: Tue Mar 31 13:30:00 2009
TotalTime: 899.69 seconds
TotalCapSize: 876.10MB CapLen: 96 bytes
# of packets: 16087756 (11226.58MB)
AvgRate: 104.67Mbps stddev:12.94M
IP flow (unique src/dst pair) Information
# of flows: 599028 (avg. 26.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.4% 2.1% 2.0% 1.9% 1.9% 1.6% 1.5% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 384388
Top 10 bandwidth usage (bytes/total in %):
12.1% 11.5% 4.8% 4.7% 4.0% 3.5% 3.5% 3.4% 3.1% 2.9%
# of IPv6 addresses: 1799
Top 10 bandwidth usage (bytes/total in %):
26.1% 26.1% 14.7% 13.3% 9.9% 7.2% 5.5% 5.2% 4.2% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311315.pktlen.png)
detailed numbers
[ 32- 63]: 3919751
[ 64- 127]: 3222751
[ 128- 255]: 626889
[ 256- 511]: 470319
[ 512- 1023]: 508760
[ 1024- 2047]: 7339286
Protocol Breakdown
![[protocol breakdown chart]](200903311315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16087756 (100.00%) 11771927049 (100.00%) 731.73
ip 16056628 ( 99.81%) 11762394108 ( 99.92%) 732.56
tcp 13584388 ( 84.44%) 11029005818 ( 93.69%) 811.89
http(s) 5650969 ( 35.13%) 7434021904 ( 63.15%) 1315.53
http(c) 3517941 ( 21.87%) 711577183 ( 6.04%) 202.27
squid 248786 ( 1.55%) 65630027 ( 0.56%) 263.80
smtp 262631 ( 1.63%) 96591016 ( 0.82%) 367.78
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 279074 ( 1.73%) 137255994 ( 1.17%) 491.83
pop3 17023 ( 0.11%) 14089805 ( 0.12%) 827.69
imap 6476 ( 0.04%) 619581 ( 0.01%) 95.67
telnet 14154 ( 0.09%) 7800310 ( 0.07%) 551.10
ssh 78209 ( 0.49%) 16625858 ( 0.14%) 212.58
dns 12892 ( 0.08%) 1447193 ( 0.01%) 112.26
bgp 164 ( 0.00%) 54661 ( 0.00%) 333.30
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 20 ( 0.00%) 1396 ( 0.00%) 69.80
rtsp 377039 ( 2.34%) 309029726 ( 2.63%) 819.62
icecast 8015 ( 0.05%) 6367832 ( 0.05%) 794.49
hotline 4 ( 0.00%) 248 ( 0.00%) 62.00
other 3110989 ( 19.34%) 2227892964 ( 18.93%) 716.14
udp 1972453 ( 12.26%) 641161697 ( 5.45%) 325.06
dns 947699 ( 5.89%) 241232434 ( 2.05%) 254.55
realaud 2075 ( 0.01%) 618863 ( 0.01%) 298.25
halflif 22 ( 0.00%) 2913 ( 0.00%) 132.41
starcra 32 ( 0.00%) 5506 ( 0.00%) 172.06
everque 76 ( 0.00%) 14182 ( 0.00%) 186.61
unreal 15 ( 0.00%) 2118 ( 0.00%) 141.20
quake 12 ( 0.00%) 1188 ( 0.00%) 99.00
cuseeme 7 ( 0.00%) 974 ( 0.00%) 139.14
other 1022189 ( 6.35%) 398906462 ( 3.39%) 390.25
icmp 398395 ( 2.48%) 36142447 ( 0.31%) 90.72
ipip 316 ( 0.00%) 38324 ( 0.00%) 121.28
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 53559 ( 0.33%) 46391267 ( 0.39%) 866.17
other 47407 ( 0.29%) 9637175 ( 0.08%) 203.29
frag 46086 ( 0.29%) 52272266 ( 0.44%) 1134.23
ip6 31128 ( 0.19%) 9532941 ( 0.08%) 306.25
tcp6 9484 ( 0.06%) 5688728 ( 0.05%) 599.82
http(s) 2209 ( 0.01%) 2915699 ( 0.02%) 1319.92
http(c) 3439 ( 0.02%) 305690 ( 0.00%) 88.89
smtp 533 ( 0.00%) 244072 ( 0.00%) 457.92
imap 304 ( 0.00%) 271635 ( 0.00%) 893.54
ssh 6 ( 0.00%) 504 ( 0.00%) 84.00
dns 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 364 ( 0.00%) 30398 ( 0.00%) 83.51
other 2627 ( 0.02%) 1920558 ( 0.02%) 731.08
udp6 15896 ( 0.10%) 2502265 ( 0.02%) 157.41
dns 14388 ( 0.09%) 2254741 ( 0.02%) 156.71
realaud 2 ( 0.00%) 213 ( 0.00%) 106.50
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
cuseeme 1 ( 0.00%) 110 ( 0.00%) 110.00
other 1504 ( 0.01%) 247088 ( 0.00%) 164.29
icmp6 4976 ( 0.03%) 636919 ( 0.01%) 128.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 741 ( 0.00%) 700813 ( 0.01%) 945.77
tcpdump file: 200903311315.dump.gz (391.30 MB)