Traffic Trace Info
DumpFile: 200903311515.dump
FileSize: 1248.48MB
Id: 200903311515
StartTime: Tue Mar 31 15:15:00 2009
EndTime: Tue Mar 31 15:30:00 2009
TotalTime: 899.93 seconds
TotalCapSize: 976.53MB CapLen: 96 bytes
# of packets: 17821847 (11468.22MB)
AvgRate: 106.87Mbps stddev:13.36M
IP flow (unique src/dst pair) Information
# of flows: 791110 (avg. 22.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.4% 1.6% 1.5% 1.4% 1.4% 1.2% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 534178
Top 10 bandwidth usage (bytes/total in %):
10.6% 8.7% 6.7% 5.4% 3.9% 3.5% 3.1% 3.1% 3.0% 2.8%
# of IPv6 addresses: 1828
Top 10 bandwidth usage (bytes/total in %):
27.0% 16.5% 16.5% 13.9% 9.0% 6.0% 5.9% 5.9% 4.5% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311515.pktlen.png)
detailed numbers
[ 32- 63]: 4348756
[ 64- 127]: 4436202
[ 128- 255]: 604736
[ 256- 511]: 444266
[ 512- 1023]: 533996
[ 1024- 2047]: 7453891
Protocol Breakdown
![[protocol breakdown chart]](200903311515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17821847 (100.00%) 12025295695 (100.00%) 674.75
ip 17781783 ( 99.78%) 12017563665 ( 99.94%) 675.84
tcp 14625620 ( 82.07%) 11130157702 ( 92.56%) 761.00
http(s) 5819822 ( 32.66%) 7846041565 ( 65.25%) 1348.16
http(c) 3323439 ( 18.65%) 456429209 ( 3.80%) 137.34
squid 264159 ( 1.48%) 93049855 ( 0.77%) 352.25
smtp 355520 ( 1.99%) 128609050 ( 1.07%) 361.75
nntp 72 ( 0.00%) 9601 ( 0.00%) 133.35
ftp 295188 ( 1.66%) 345387013 ( 2.87%) 1170.06
pop3 7466 ( 0.04%) 3563234 ( 0.03%) 477.26
imap 9204 ( 0.05%) 2697756 ( 0.02%) 293.11
telnet 6950 ( 0.04%) 1073079 ( 0.01%) 154.40
ssh 56561 ( 0.32%) 11999512 ( 0.10%) 212.15
dns 15105 ( 0.08%) 1874813 ( 0.02%) 124.12
bgp 155 ( 0.00%) 59700 ( 0.00%) 385.16
napster 344 ( 0.00%) 242344 ( 0.00%) 704.49
realaud 19 ( 0.00%) 1352 ( 0.00%) 71.16
rtsp 230963 ( 1.30%) 107708708 ( 0.90%) 466.35
icecast 23518 ( 0.13%) 8935106 ( 0.07%) 379.93
hotline 436 ( 0.00%) 26982 ( 0.00%) 61.89
other 4216697 ( 23.66%) 2122448703 ( 17.65%) 503.34
udp 2232337 ( 12.53%) 807256510 ( 6.71%) 361.62
dns 1027863 ( 5.77%) 260328884 ( 2.16%) 253.27
realaud 15513 ( 0.09%) 6305274 ( 0.05%) 406.45
halflif 31 ( 0.00%) 3700 ( 0.00%) 119.35
starcra 34 ( 0.00%) 5758 ( 0.00%) 169.35
everque 80 ( 0.00%) 14182 ( 0.00%) 177.28
unreal 25 ( 0.00%) 6051 ( 0.00%) 242.04
quake 14 ( 0.00%) 1546 ( 0.00%) 110.43
cuseeme 7 ( 0.00%) 870 ( 0.00%) 124.29
other 1188593 ( 6.67%) 540436093 ( 4.49%) 454.69
icmp 881357 ( 4.95%) 70038175 ( 0.58%) 79.47
ipip 314 ( 0.00%) 36940 ( 0.00%) 117.64
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 27894 ( 0.16%) 7985486 ( 0.07%) 286.28
other 14153 ( 0.08%) 2071788 ( 0.02%) 146.39
frag 46760 ( 0.26%) 51541323 ( 0.43%) 1102.25
ip6 40062 ( 0.22%) 7731910 ( 0.06%) 193.00
tcp6 18300 ( 0.10%) 3837558 ( 0.03%) 209.70
http(s) 719 ( 0.00%) 673812 ( 0.01%) 937.15
http(c) 1715 ( 0.01%) 173438 ( 0.00%) 101.13
smtp 1169 ( 0.01%) 458740 ( 0.00%) 392.42
ssh 4 ( 0.00%) 296 ( 0.00%) 74.00
bgp 386 ( 0.00%) 39567 ( 0.00%) 102.51
other 14307 ( 0.08%) 2491705 ( 0.02%) 174.16
udp6 16214 ( 0.09%) 2525987 ( 0.02%) 155.79
dns 14609 ( 0.08%) 2269126 ( 0.02%) 155.32
unreal 1 ( 0.00%) 112 ( 0.00%) 112.00
other 1604 ( 0.01%) 256749 ( 0.00%) 160.07
icmp6 4702 ( 0.03%) 588849 ( 0.00%) 125.23
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 815 ( 0.00%) 775300 ( 0.01%) 951.29
tcpdump file: 200903311515.dump.gz (423.62 MB)