Traffic Trace Info
DumpFile: 200903311530.dump
FileSize: 1451.78MB
Id: 200903311530
StartTime: Tue Mar 31 15:30:00 2009
EndTime: Tue Mar 31 15:45:01 2009
TotalTime: 900.48 seconds
TotalCapSize: 1139.25MB CapLen: 96 bytes
# of packets: 20473980 (12813.56MB)
AvgRate: 119.35Mbps stddev:20.49M
IP flow (unique src/dst pair) Information
# of flows: 725569 (avg. 28.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.9% 2.9% 2.8% 2.8% 2.0% 1.4% 1.3% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 476930
Top 10 bandwidth usage (bytes/total in %):
10.0% 8.4% 7.0% 4.3% 4.1% 4.1% 3.9% 3.9% 3.8% 3.6%
# of IPv6 addresses: 2094
Top 10 bandwidth usage (bytes/total in %):
23.9% 16.3% 15.7% 13.4% 10.1% 10.1% 9.2% 7.2% 4.2% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311530.pktlen.png)
detailed numbers
[ 32- 63]: 4280888
[ 64- 127]: 6218781
[ 128- 255]: 679640
[ 256- 511]: 462239
[ 512- 1023]: 515910
[ 1024- 2047]: 8316522
Protocol Breakdown
![[protocol breakdown chart]](200903311530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20473980 (100.00%) 13435995924 (100.00%) 656.25
ip 20432178 ( 99.80%) 13427891047 ( 99.94%) 657.19
tcp 14651941 ( 71.56%) 11924165639 ( 88.75%) 813.83
http(s) 6433048 ( 31.42%) 8705757812 ( 64.79%) 1353.29
http(c) 3474235 ( 16.97%) 482457310 ( 3.59%) 138.87
squid 243949 ( 1.19%) 90200424 ( 0.67%) 369.75
smtp 388325 ( 1.90%) 129766024 ( 0.97%) 334.17
nntp 66 ( 0.00%) 8193 ( 0.00%) 124.14
ftp 359944 ( 1.76%) 432310069 ( 3.22%) 1201.05
pop3 6848 ( 0.03%) 2705106 ( 0.02%) 395.02
imap 12665 ( 0.06%) 10790266 ( 0.08%) 851.98
telnet 6381 ( 0.03%) 1045166 ( 0.01%) 163.79
ssh 18850 ( 0.09%) 6987060 ( 0.05%) 370.67
dns 15622 ( 0.08%) 3582030 ( 0.03%) 229.29
bgp 145 ( 0.00%) 55475 ( 0.00%) 382.59
napster 577 ( 0.00%) 425421 ( 0.00%) 737.30
realaud 16 ( 0.00%) 1553 ( 0.00%) 97.06
rtsp 135355 ( 0.66%) 129537665 ( 0.96%) 957.02
icecast 23172 ( 0.11%) 8652408 ( 0.06%) 373.40
hotline 369 ( 0.00%) 22836 ( 0.00%) 61.89
other 3532371 ( 17.25%) 1919860641 ( 14.29%) 543.50
udp 2785875 ( 13.61%) 1281973315 ( 9.54%) 460.17
dns 1097598 ( 5.36%) 277800857 ( 2.07%) 253.10
realaud 2083 ( 0.01%) 126906 ( 0.00%) 60.92
halflif 19 ( 0.00%) 3172 ( 0.00%) 166.95
starcra 63 ( 0.00%) 10719 ( 0.00%) 170.14
everque 55 ( 0.00%) 14052 ( 0.00%) 255.49
unreal 23 ( 0.00%) 3370 ( 0.00%) 146.52
quake 16 ( 0.00%) 2479 ( 0.00%) 154.94
cuseeme 8 ( 0.00%) 1413 ( 0.00%) 176.62
other 1685880 ( 8.23%) 1003891421 ( 7.47%) 595.47
icmp 2952091 ( 14.42%) 214864386 ( 1.60%) 72.78
ipip 323 ( 0.00%) 38562 ( 0.00%) 119.39
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 28378 ( 0.14%) 4949773 ( 0.04%) 174.42
other 13460 ( 0.07%) 1881992 ( 0.01%) 139.82
frag 47489 ( 0.23%) 52454346 ( 0.39%) 1104.56
ip6 41802 ( 0.20%) 8104877 ( 0.06%) 193.89
tcp6 18585 ( 0.09%) 4082296 ( 0.03%) 219.66
http(s) 908 ( 0.00%) 1031944 ( 0.01%) 1136.50
http(c) 2658 ( 0.01%) 318086 ( 0.00%) 119.67
smtp 237 ( 0.00%) 92823 ( 0.00%) 391.66
ftp 17 ( 0.00%) 1397 ( 0.00%) 82.18
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 7 ( 0.00%) 554 ( 0.00%) 79.14
dns 11 ( 0.00%) 5400 ( 0.00%) 490.91
bgp 378 ( 0.00%) 32633 ( 0.00%) 86.33
other 14367 ( 0.07%) 2599234 ( 0.02%) 180.92
udp6 17601 ( 0.09%) 2995436 ( 0.02%) 170.19
dns 15614 ( 0.08%) 2506559 ( 0.02%) 160.53
realaud 1 ( 0.00%) 117 ( 0.00%) 117.00
starcra 2 ( 0.00%) 330 ( 0.00%) 165.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 1983 ( 0.01%) 488326 ( 0.00%) 246.26
icmp6 5190 ( 0.03%) 657974 ( 0.00%) 126.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 396 ( 0.00%) 365091 ( 0.00%) 921.95
tcpdump file: 200903311530.dump.gz (457.11 MB)