Traffic Trace Info
DumpFile: 200903311600.dump
FileSize: 1561.65MB
Id: 200903311600
StartTime: Tue Mar 31 16:00:00 2009
EndTime: Tue Mar 31 16:15:01 2009
TotalTime: 900.32 seconds
TotalCapSize: 1223.07MB CapLen: 96 bytes
# of packets: 22176988 (12990.99MB)
AvgRate: 121.04Mbps stddev:15.05M
IP flow (unique src/dst pair) Information
# of flows: 780720 (avg. 28.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 2.3% 1.7% 1.6% 1.5% 1.4% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 481552
Top 10 bandwidth usage (bytes/total in %):
10.8% 10.6% 7.1% 6.9% 6.5% 6.5% 4.3% 3.7% 3.3% 2.4%
# of IPv6 addresses: 2183
Top 10 bandwidth usage (bytes/total in %):
51.6% 51.6% 19.8% 11.7% 8.2% 7.4% 3.3% 3.1% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311600.pktlen.png)
detailed numbers
[ 32- 63]: 4741852
[ 64- 127]: 7322923
[ 128- 255]: 786989
[ 256- 511]: 478377
[ 512- 1023]: 481475
[ 1024- 2047]: 8365372
Protocol Breakdown
![[protocol breakdown chart]](200903311600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22176988 (100.00%) 13622043489 (100.00%) 614.24
ip 22127842 ( 99.78%) 13598698507 ( 99.83%) 614.55
tcp 14480355 ( 65.29%) 11478027192 ( 84.26%) 792.66
http(s) 6334246 ( 28.56%) 8606943017 ( 63.18%) 1358.80
http(c) 4077921 ( 18.39%) 515517571 ( 3.78%) 126.42
squid 286690 ( 1.29%) 147037623 ( 1.08%) 512.88
smtp 384194 ( 1.73%) 170660559 ( 1.25%) 444.20
nntp 77 ( 0.00%) 11534 ( 0.00%) 149.79
ftp 69929 ( 0.32%) 38730718 ( 0.28%) 553.86
pop3 6867 ( 0.03%) 2168606 ( 0.02%) 315.80
imap 15869 ( 0.07%) 8378813 ( 0.06%) 528.00
telnet 5452 ( 0.02%) 789875 ( 0.01%) 144.88
ssh 31622 ( 0.14%) 18457705 ( 0.14%) 583.70
dns 16167 ( 0.07%) 5150986 ( 0.04%) 318.61
bgp 158 ( 0.00%) 59869 ( 0.00%) 378.92
napster 118 ( 0.00%) 11548 ( 0.00%) 97.86
realaud 19 ( 0.00%) 1526 ( 0.00%) 80.32
rtsp 175503 ( 0.79%) 63803991 ( 0.47%) 363.55
icecast 23322 ( 0.11%) 8662039 ( 0.06%) 371.41
hotline 54 ( 0.00%) 4417 ( 0.00%) 81.80
other 3052128 ( 13.76%) 1891635655 ( 13.89%) 619.78
udp 3713562 ( 16.75%) 1829665796 ( 13.43%) 492.70
dns 1385148 ( 6.25%) 310642445 ( 2.28%) 224.27
realaud 19557 ( 0.09%) 8363380 ( 0.06%) 427.64
halflif 38 ( 0.00%) 7233 ( 0.00%) 190.34
starcra 56 ( 0.00%) 9014 ( 0.00%) 160.96
everque 104 ( 0.00%) 18169 ( 0.00%) 174.70
unreal 26 ( 0.00%) 5197 ( 0.00%) 199.88
quake 25 ( 0.00%) 2551 ( 0.00%) 102.04
cuseeme 7 ( 0.00%) 897 ( 0.00%) 128.14
other 2308372 ( 10.41%) 1510415604 ( 11.09%) 654.32
icmp 3887770 ( 17.53%) 280844897 ( 2.06%) 72.24
ipip 323 ( 0.00%) 38453 ( 0.00%) 119.05
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 28904 ( 0.13%) 7407533 ( 0.05%) 256.28
other 16820 ( 0.08%) 2697572 ( 0.02%) 160.38
frag 51663 ( 0.23%) 57112557 ( 0.42%) 1105.48
ip6 49146 ( 0.22%) 23344982 ( 0.17%) 475.01
tcp6 25188 ( 0.11%) 19116899 ( 0.14%) 758.97
http(s) 8851 ( 0.04%) 12855105 ( 0.09%) 1452.39
http(c) 2121 ( 0.01%) 245949 ( 0.00%) 115.96
smtp 1274 ( 0.01%) 479451 ( 0.00%) 376.34
ftp 18 ( 0.00%) 1740 ( 0.00%) 96.67
bgp 376 ( 0.00%) 32117 ( 0.00%) 85.42
other 12548 ( 0.06%) 5502537 ( 0.04%) 438.52
udp6 18294 ( 0.08%) 3048345 ( 0.02%) 166.63
dns 16212 ( 0.07%) 2582702 ( 0.02%) 159.31
starcra 2 ( 0.00%) 326 ( 0.00%) 163.00
everque 1 ( 0.00%) 114 ( 0.00%) 114.00
other 2079 ( 0.01%) 465203 ( 0.00%) 223.76
icmp6 5027 ( 0.02%) 625582 ( 0.00%) 124.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 607 ( 0.00%) 550076 ( 0.00%) 906.22
tcpdump file: 200903311600.dump.gz (493.70 MB)