Traffic Trace Info
DumpFile: 200903311330.dump
FileSize: 1140.68MB
Id: 200903311330
StartTime: Tue Mar 31 13:30:00 2009
EndTime: Tue Mar 31 13:45:01 2009
TotalTime: 900.52 seconds
TotalCapSize: 887.92MB CapLen: 96 bytes
# of packets: 16564621 (11189.99MB)
AvgRate: 104.25Mbps stddev:11.73M
IP flow (unique src/dst pair) Information
# of flows: 644003 (avg. 25.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.4% 2.1% 1.5% 1.5% 1.4% 1.4% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 415333
Top 10 bandwidth usage (bytes/total in %):
12.0% 11.8% 4.8% 4.0% 3.7% 3.7% 3.2% 2.9% 2.8% 2.6%
# of IPv6 addresses: 1922
Top 10 bandwidth usage (bytes/total in %):
44.6% 43.0% 11.0% 11.0% 6.5% 6.5% 6.1% 5.8% 3.0% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311330.pktlen.png)
detailed numbers
[ 32- 63]: 4061106
[ 64- 127]: 3394159
[ 128- 255]: 703454
[ 256- 511]: 500850
[ 512- 1023]: 552366
[ 1024- 2047]: 7352686
Protocol Breakdown
![[protocol breakdown chart]](200903311330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16564621 (100.00%) 11733557585 (100.00%) 708.35
ip 16533236 ( 99.81%) 11722003230 ( 99.90%) 709.00
tcp 13384496 ( 80.80%) 10640631316 ( 90.69%) 795.00
http(s) 5969834 ( 36.04%) 7773744678 ( 66.25%) 1302.17
http(c) 3593353 ( 21.69%) 550019785 ( 4.69%) 153.07
squid 306986 ( 1.85%) 118355304 ( 1.01%) 385.54
smtp 256252 ( 1.55%) 115778987 ( 0.99%) 451.82
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 291993 ( 1.76%) 141759348 ( 1.21%) 485.49
pop3 10907 ( 0.07%) 6217516 ( 0.05%) 570.05
imap 6254 ( 0.04%) 1137720 ( 0.01%) 181.92
telnet 4222 ( 0.03%) 702223 ( 0.01%) 166.32
ssh 46933 ( 0.28%) 12388314 ( 0.11%) 263.96
dns 14491 ( 0.09%) 3510898 ( 0.03%) 242.28
bgp 133 ( 0.00%) 38793 ( 0.00%) 291.68
napster 8 ( 0.00%) 1211 ( 0.00%) 151.38
realaud 37 ( 0.00%) 3747 ( 0.00%) 101.27
rtsp 232556 ( 1.40%) 154324208 ( 1.32%) 663.60
icecast 9814 ( 0.06%) 7772776 ( 0.07%) 792.01
hotline 33 ( 0.00%) 4682 ( 0.00%) 141.88
other 2640570 ( 15.94%) 1754859558 ( 14.96%) 664.58
udp 2479848 ( 14.97%) 1011090591 ( 8.62%) 407.72
dns 942070 ( 5.69%) 243701391 ( 2.08%) 258.69
realaud 19794 ( 0.12%) 8379549 ( 0.07%) 423.34
halflif 38 ( 0.00%) 4029 ( 0.00%) 106.03
starcra 38 ( 0.00%) 7527 ( 0.00%) 198.08
everque 65 ( 0.00%) 13593 ( 0.00%) 209.12
unreal 14 ( 0.00%) 1328 ( 0.00%) 94.86
quake 15 ( 0.00%) 1776 ( 0.00%) 118.40
cuseeme 4 ( 0.00%) 650 ( 0.00%) 162.50
other 1517539 ( 9.16%) 758663664 ( 6.47%) 499.93
icmp 484435 ( 2.92%) 41866879 ( 0.36%) 86.42
ipip 309 ( 0.00%) 37954 ( 0.00%) 122.83
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 25315 ( 0.15%) 5108788 ( 0.04%) 201.81
other 158723 ( 0.96%) 23250322 ( 0.20%) 146.48
frag 46719 ( 0.28%) 52948035 ( 0.45%) 1133.33
ip6 31385 ( 0.19%) 11554355 ( 0.10%) 368.15
tcp6 10326 ( 0.06%) 8035439 ( 0.07%) 778.18
http(s) 995 ( 0.01%) 1025916 ( 0.01%) 1031.07
http(c) 2268 ( 0.01%) 209026 ( 0.00%) 92.16
smtp 399 ( 0.00%) 192204 ( 0.00%) 481.71
imap 152 ( 0.00%) 37092 ( 0.00%) 244.03
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 363 ( 0.00%) 30382 ( 0.00%) 83.70
other 6147 ( 0.04%) 6540647 ( 0.06%) 1064.04
udp6 16053 ( 0.10%) 2616951 ( 0.02%) 163.02
dns 14373 ( 0.09%) 2230685 ( 0.02%) 155.20
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1679 ( 0.01%) 386160 ( 0.00%) 229.99
icmp6 4643 ( 0.03%) 578347 ( 0.00%) 124.56
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 333 ( 0.00%) 319538 ( 0.00%) 959.57
tcpdump file: 200903311330.dump.gz (399.23 MB)