Traffic Trace Info
DumpFile: 200903311500.dump
FileSize: 1247.68MB
Id: 200903311500
StartTime: Tue Mar 31 15:00:01 2009
EndTime: Tue Mar 31 15:15:00 2009
TotalTime: 899.77 seconds
TotalCapSize: 976.30MB CapLen: 96 bytes
# of packets: 17784044 (11863.53MB)
AvgRate: 110.59Mbps stddev:18.68M
IP flow (unique src/dst pair) Information
# of flows: 668889 (avg. 26.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 2.9% 2.2% 1.6% 1.4% 1.4% 1.3% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 430011
Top 10 bandwidth usage (bytes/total in %):
11.0% 9.1% 6.8% 6.2% 5.4% 5.4% 3.1% 3.1% 3.0% 2.9%
# of IPv6 addresses: 2006
Top 10 bandwidth usage (bytes/total in %):
31.8% 31.8% 19.3% 13.8% 9.9% 9.6% 8.5% 5.8% 4.5% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311500.pktlen.png)
detailed numbers
[ 32- 63]: 4208992
[ 64- 127]: 4243676
[ 128- 255]: 634203
[ 256- 511]: 472665
[ 512- 1023]: 472243
[ 1024- 2047]: 7752265
Protocol Breakdown
![[protocol breakdown chart]](200903311500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17784044 (100.00%) 12439816759 (100.00%) 699.49
ip 17739303 ( 99.75%) 12426658586 ( 99.89%) 700.52
tcp 14854020 ( 83.52%) 11648766321 ( 93.64%) 784.22
http(s) 6689099 ( 37.61%) 9065617139 ( 72.88%) 1355.28
http(c) 3664206 ( 20.60%) 488008702 ( 3.92%) 133.18
squid 298647 ( 1.68%) 119220914 ( 0.96%) 399.20
smtp 332008 ( 1.87%) 135751358 ( 1.09%) 408.88
nntp 90 ( 0.00%) 12900 ( 0.00%) 143.33
ftp 85871 ( 0.48%) 56999334 ( 0.46%) 663.78
pop3 17255 ( 0.10%) 16305756 ( 0.13%) 944.99
imap 5542 ( 0.03%) 624033 ( 0.01%) 112.60
telnet 6610 ( 0.04%) 1202312 ( 0.01%) 181.89
ssh 28883 ( 0.16%) 8436627 ( 0.07%) 292.10
dns 14552 ( 0.08%) 2789156 ( 0.02%) 191.67
bgp 140 ( 0.00%) 55695 ( 0.00%) 397.82
napster 74 ( 0.00%) 15892 ( 0.00%) 214.76
realaud 21 ( 0.00%) 2740 ( 0.00%) 130.48
rtsp 100552 ( 0.57%) 6297280 ( 0.05%) 62.63
icecast 23600 ( 0.13%) 8938734 ( 0.07%) 378.76
hotline 525 ( 0.00%) 33044 ( 0.00%) 62.94
other 3586342 ( 20.17%) 1738454525 ( 13.97%) 484.74
udp 2166294 ( 12.18%) 710683365 ( 5.71%) 328.06
dns 1067251 ( 6.00%) 268118377 ( 2.16%) 251.22
realaud 19001 ( 0.11%) 8328168 ( 0.07%) 438.30
halflif 25 ( 0.00%) 5307 ( 0.00%) 212.28
starcra 59 ( 0.00%) 10798 ( 0.00%) 183.02
everque 65 ( 0.00%) 13076 ( 0.00%) 201.17
unreal 30 ( 0.00%) 4908 ( 0.00%) 163.60
quake 37 ( 0.00%) 3605 ( 0.00%) 97.43
cuseeme 7 ( 0.00%) 878 ( 0.00%) 125.43
other 1079685 ( 6.07%) 434075410 ( 3.49%) 402.04
icmp 674982 ( 3.80%) 55412620 ( 0.45%) 82.09
ipip 317 ( 0.00%) 39746 ( 0.00%) 125.38
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 30754 ( 0.17%) 9344534 ( 0.08%) 303.85
other 12826 ( 0.07%) 2394620 ( 0.02%) 186.70
frag 48598 ( 0.27%) 53809254 ( 0.43%) 1107.23
ip6 44741 ( 0.25%) 13158173 ( 0.11%) 294.10
tcp6 22118 ( 0.12%) 9372738 ( 0.08%) 423.76
http(s) 3527 ( 0.02%) 4978161 ( 0.04%) 1411.44
http(c) 2273 ( 0.01%) 214679 ( 0.00%) 94.45
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 310 ( 0.00%) 108016 ( 0.00%) 348.44
imap 247 ( 0.00%) 250662 ( 0.00%) 1014.83
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 353 ( 0.00%) 29064 ( 0.00%) 82.33
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 15403 ( 0.09%) 3791762 ( 0.03%) 246.17
udp6 17673 ( 0.10%) 2933831 ( 0.02%) 166.01
dns 15841 ( 0.09%) 2499193 ( 0.02%) 157.77
realaud 1 ( 0.00%) 576 ( 0.00%) 576.00
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
other 1830 ( 0.01%) 433945 ( 0.00%) 237.13
icmp6 4631 ( 0.03%) 587777 ( 0.00%) 126.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 289 ( 0.00%) 259747 ( 0.00%) 898.78
tcpdump file: 200903311500.dump.gz (423.58 MB)