Traffic Trace Info
DumpFile: 200903311545.dump
FileSize: 1453.44MB
Id: 200903311545
StartTime: Tue Mar 31 15:45:01 2009
EndTime: Tue Mar 31 16:00:00 2009
TotalTime: 899.59 seconds
TotalCapSize: 1134.51MB CapLen: 96 bytes
# of packets: 20890865 (12627.20MB)
AvgRate: 117.74Mbps stddev:11.59M
IP flow (unique src/dst pair) Information
# of flows: 753518 (avg. 27.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.3% 2.8% 1.9% 1.4% 1.3% 1.2% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 490428
Top 10 bandwidth usage (bytes/total in %):
9.7% 9.6% 8.1% 7.6% 7.6% 4.6% 3.6% 3.5% 3.1% 2.9%
# of IPv6 addresses: 1888
Top 10 bandwidth usage (bytes/total in %):
24.8% 24.8% 17.5% 9.2% 9.2% 8.6% 8.5% 5.9% 3.8% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311545.pktlen.png)
detailed numbers
[ 32- 63]: 4805490
[ 64- 127]: 6070928
[ 128- 255]: 909532
[ 256- 511]: 463491
[ 512- 1023]: 498601
[ 1024- 2047]: 8142823
Protocol Breakdown
![[protocol breakdown chart]](200903311545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20890865 (100.00%) 13240580902 (100.00%) 633.80
ip 20854939 ( 99.83%) 13232291155 ( 99.94%) 634.49
tcp 14045727 ( 67.23%) 11026952097 ( 83.28%) 785.08
http(s) 6201073 ( 29.68%) 8402261737 ( 63.46%) 1354.97
http(c) 3881378 ( 18.58%) 489386060 ( 3.70%) 126.09
squid 302810 ( 1.45%) 165306840 ( 1.25%) 545.91
smtp 301531 ( 1.44%) 103047892 ( 0.78%) 341.75
nntp 65 ( 0.00%) 8816 ( 0.00%) 135.63
ftp 72040 ( 0.34%) 45964596 ( 0.35%) 638.04
pop3 6535 ( 0.03%) 1739961 ( 0.01%) 266.25
imap 11313 ( 0.05%) 9922672 ( 0.07%) 877.10
telnet 5569 ( 0.03%) 838709 ( 0.01%) 150.60
ssh 41228 ( 0.20%) 13259074 ( 0.10%) 321.60
dns 14154 ( 0.07%) 1442274 ( 0.01%) 101.90
bgp 153 ( 0.00%) 63521 ( 0.00%) 415.17
napster 403 ( 0.00%) 277461 ( 0.00%) 688.49
realaud 19 ( 0.00%) 1306 ( 0.00%) 68.74
rtsp 295801 ( 1.42%) 102671249 ( 0.78%) 347.10
icecast 23168 ( 0.11%) 8645616 ( 0.07%) 373.17
hotline 267 ( 0.00%) 16530 ( 0.00%) 61.91
other 2888154 ( 13.82%) 1682090781 ( 12.70%) 582.41
udp 3988639 ( 19.09%) 1994030599 ( 15.06%) 499.93
dns 1614284 ( 7.73%) 331925722 ( 2.51%) 205.62
realaud 3054 ( 0.01%) 695013 ( 0.01%) 227.57
halflif 24 ( 0.00%) 4562 ( 0.00%) 190.08
starcra 35 ( 0.00%) 6877 ( 0.00%) 196.49
everque 64 ( 0.00%) 13690 ( 0.00%) 213.91
unreal 33 ( 0.00%) 5025 ( 0.00%) 152.27
quake 25 ( 0.00%) 2577 ( 0.00%) 103.08
cuseeme 3 ( 0.00%) 267 ( 0.00%) 89.00
other 2370958 ( 11.35%) 1661238357 ( 12.55%) 700.66
icmp 2779826 ( 13.31%) 203140181 ( 1.53%) 73.08
ipip 331 ( 0.00%) 40782 ( 0.00%) 123.21
ipsec 114 ( 0.00%) 17972 ( 0.00%) 157.65
ip6 26297 ( 0.13%) 5820023 ( 0.04%) 221.32
other 14005 ( 0.07%) 2289501 ( 0.02%) 163.48
frag 49835 ( 0.24%) 55073550 ( 0.42%) 1105.12
ip6 35926 ( 0.17%) 8289747 ( 0.06%) 230.75
tcp6 13780 ( 0.07%) 4532357 ( 0.03%) 328.91
http(s) 1182 ( 0.01%) 1347296 ( 0.01%) 1139.84
http(c) 1669 ( 0.01%) 154438 ( 0.00%) 92.53
smtp 274 ( 0.00%) 104561 ( 0.00%) 381.61
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 6 ( 0.00%) 630 ( 0.00%) 105.00
bgp 359 ( 0.00%) 29952 ( 0.00%) 83.43
other 10288 ( 0.05%) 2895308 ( 0.02%) 281.43
udp6 16432 ( 0.08%) 2609004 ( 0.02%) 158.78
dns 14830 ( 0.07%) 2361040 ( 0.02%) 159.21
quake 1 ( 0.00%) 103 ( 0.00%) 103.00
other 1601 ( 0.01%) 247861 ( 0.00%) 154.82
icmp6 5126 ( 0.02%) 644582 ( 0.00%) 125.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 558 ( 0.00%) 499724 ( 0.00%) 895.56
tcpdump file: 200903311545.dump.gz (472.29 MB)