Traffic Trace Info
DumpFile: 200903311430.dump
FileSize: 1168.87MB
Id: 200903311430
StartTime: Tue Mar 31 14:30:00 2009
EndTime: Tue Mar 31 14:45:00 2009
TotalTime: 899.72 seconds
TotalCapSize: 910.46MB CapLen: 96 bytes
# of packets: 16934640 (11913.99MB)
AvgRate: 111.07Mbps stddev:13.77M
IP flow (unique src/dst pair) Information
# of flows: 752709 (avg. 22.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.2% 2.1% 1.8% 1.5% 1.5% 1.4% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 469556
Top 10 bandwidth usage (bytes/total in %):
12.8% 9.4% 5.1% 4.9% 4.5% 3.4% 3.2% 3.2% 3.0% 2.9%
# of IPv6 addresses: 1939
Top 10 bandwidth usage (bytes/total in %):
17.4% 17.1% 16.7% 16.7% 8.9% 7.8% 5.6% 5.0% 4.7% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311430.pktlen.png)
detailed numbers
[ 32- 63]: 4264335
[ 64- 127]: 3301508
[ 128- 255]: 630341
[ 256- 511]: 470147
[ 512- 1023]: 369027
[ 1024- 2047]: 7899282
Protocol Breakdown
![[protocol breakdown chart]](200903311430.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16934640 (100.00%) 12492720545 (100.00%) 737.70
ip 16905907 ( 99.83%) 12485244927 ( 99.94%) 738.51
tcp 13999314 ( 82.67%) 11522072585 ( 92.23%) 823.05
http(s) 6078467 ( 35.89%) 8139186615 ( 65.15%) 1339.02
http(c) 3793924 ( 22.40%) 559929583 ( 4.48%) 147.59
squid 321069 ( 1.90%) 99319629 ( 0.80%) 309.34
smtp 252742 ( 1.49%) 77850522 ( 0.62%) 308.02
ftp 87688 ( 0.52%) 45253411 ( 0.36%) 516.07
pop3 18304 ( 0.11%) 15456731 ( 0.12%) 844.45
imap 4922 ( 0.03%) 578718 ( 0.00%) 117.58
telnet 4878 ( 0.03%) 1050355 ( 0.01%) 215.32
ssh 55641 ( 0.33%) 8653105 ( 0.07%) 155.52
dns 13811 ( 0.08%) 3389923 ( 0.03%) 245.45
bgp 132 ( 0.00%) 39320 ( 0.00%) 297.88
napster 94 ( 0.00%) 8516 ( 0.00%) 90.60
realaud 19 ( 0.00%) 1672 ( 0.00%) 88.00
rtsp 128805 ( 0.76%) 38411756 ( 0.31%) 298.22
icecast 15417 ( 0.09%) 8138577 ( 0.07%) 527.90
other 3223370 ( 19.03%) 2524800175 ( 20.21%) 783.28
udp 2460008 ( 14.53%) 904227933 ( 7.24%) 367.57
dns 900560 ( 5.32%) 202476943 ( 1.62%) 224.83
realaud 18885 ( 0.11%) 8320258 ( 0.07%) 440.57
halflif 34 ( 0.00%) 6923 ( 0.00%) 203.62
starcra 70 ( 0.00%) 13113 ( 0.00%) 187.33
everque 70 ( 0.00%) 13234 ( 0.00%) 189.06
unreal 15 ( 0.00%) 2572 ( 0.00%) 171.47
quake 25 ( 0.00%) 2840 ( 0.00%) 113.60
cuseeme 7 ( 0.00%) 1224 ( 0.00%) 174.86
other 1540214 ( 9.10%) 693277227 ( 5.55%) 450.12
icmp 396435 ( 2.34%) 35828724 ( 0.29%) 90.38
ipip 308 ( 0.00%) 38810 ( 0.00%) 126.01
ipsec 112 ( 0.00%) 17624 ( 0.00%) 157.36
ip6 36746 ( 0.22%) 21199333 ( 0.17%) 576.92
other 12984 ( 0.08%) 1859918 ( 0.01%) 143.25
frag 43085 ( 0.25%) 47523868 ( 0.38%) 1103.03
ip6 28733 ( 0.17%) 7475618 ( 0.06%) 260.18
tcp6 6687 ( 0.04%) 3800226 ( 0.03%) 568.30
http(s) 509 ( 0.00%) 499636 ( 0.00%) 981.60
http(c) 2199 ( 0.01%) 199740 ( 0.00%) 90.83
smtp 749 ( 0.00%) 268438 ( 0.00%) 358.40
ftp 63 ( 0.00%) 7428 ( 0.00%) 117.90
dns 5 ( 0.00%) 586 ( 0.00%) 117.20
bgp 357 ( 0.00%) 29587 ( 0.00%) 82.88
other 2805 ( 0.02%) 2794811 ( 0.02%) 996.37
udp6 17107 ( 0.10%) 2849532 ( 0.02%) 166.57
dns 15448 ( 0.09%) 2517306 ( 0.02%) 162.95
halflif 1 ( 0.00%) 135 ( 0.00%) 135.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1657 ( 0.01%) 331985 ( 0.00%) 200.35
icmp6 4609 ( 0.03%) 571859 ( 0.00%) 124.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 300 ( 0.00%) 249921 ( 0.00%) 833.07
tcpdump file: 200903311430.dump.gz (406.48 MB)