Traffic Trace Info
DumpFile: 200903311630.dump
FileSize: 1474.01MB
Id: 200903311630
StartTime: Tue Mar 31 16:30:00 2009
EndTime: Tue Mar 31 16:45:01 2009
TotalTime: 900.28 seconds
TotalCapSize: 1155.67MB CapLen: 96 bytes
# of packets: 20852129 (12272.82MB)
AvgRate: 114.36Mbps stddev:14.24M
IP flow (unique src/dst pair) Information
# of flows: 819890 (avg. 25.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.0% 2.7% 1.5% 1.5% 1.3% 1.3% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 536563
Top 10 bandwidth usage (bytes/total in %):
8.5% 8.0% 7.8% 5.2% 4.6% 4.6% 4.3% 4.2% 3.8% 3.4%
# of IPv6 addresses: 1916
Top 10 bandwidth usage (bytes/total in %):
18.7% 18.4% 15.7% 9.6% 8.7% 8.7% 7.1% 5.4% 4.3% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311630.pktlen.png)
detailed numbers
[ 32- 63]: 4446060
[ 64- 127]: 6856322
[ 128- 255]: 693073
[ 256- 511]: 539283
[ 512- 1023]: 505109
[ 1024- 2047]: 7812282
Protocol Breakdown
![[protocol breakdown chart]](200903311630.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20852129 (100.00%) 12868979604 (100.00%) 617.15
ip 20820343 ( 99.85%) 12862107501 ( 99.95%) 617.77
tcp 14419446 ( 69.15%) 11175126711 ( 86.84%) 775.00
http(s) 6290230 ( 30.17%) 8547360567 ( 66.42%) 1358.83
http(c) 4276487 ( 20.51%) 511849314 ( 3.98%) 119.69
squid 243428 ( 1.17%) 92829171 ( 0.72%) 381.34
smtp 372428 ( 1.79%) 135958150 ( 1.06%) 365.06
nntp 122 ( 0.00%) 18120 ( 0.00%) 148.52
ftp 84551 ( 0.41%) 45893932 ( 0.36%) 542.80
pop3 13510 ( 0.06%) 8518197 ( 0.07%) 630.51
imap 6336 ( 0.03%) 2537303 ( 0.02%) 400.46
telnet 6843 ( 0.03%) 967784 ( 0.01%) 141.43
ssh 55109 ( 0.26%) 7528258 ( 0.06%) 136.61
dns 15179 ( 0.07%) 3523902 ( 0.03%) 232.16
bgp 138 ( 0.00%) 51112 ( 0.00%) 370.38
napster 70 ( 0.00%) 5591 ( 0.00%) 79.87
realaud 27 ( 0.00%) 4368 ( 0.00%) 161.78
rtsp 242543 ( 1.16%) 65100894 ( 0.51%) 268.41
icecast 12517 ( 0.06%) 836338 ( 0.01%) 66.82
hotline 12 ( 0.00%) 2552 ( 0.00%) 212.67
other 2799883 ( 13.43%) 1752139178 ( 13.62%) 625.79
udp 3238655 ( 15.53%) 1451659011 ( 11.28%) 448.23
dns 1202195 ( 5.77%) 299520480 ( 2.33%) 249.14
realaud 19014 ( 0.09%) 8331652 ( 0.06%) 438.19
halflif 27 ( 0.00%) 3432 ( 0.00%) 127.11
starcra 33 ( 0.00%) 6670 ( 0.00%) 202.12
everque 58 ( 0.00%) 13063 ( 0.00%) 225.22
unreal 27 ( 0.00%) 3715 ( 0.00%) 137.59
quake 20 ( 0.00%) 3043 ( 0.00%) 152.15
cuseeme 5 ( 0.00%) 817 ( 0.00%) 163.40
other 2016446 ( 9.67%) 1143261477 ( 8.88%) 566.97
icmp 3096889 ( 14.85%) 225606221 ( 1.75%) 72.85
ipip 316 ( 0.00%) 37678 ( 0.00%) 119.23
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 23198 ( 0.11%) 4576595 ( 0.04%) 197.28
other 41731 ( 0.20%) 5084221 ( 0.04%) 121.83
frag 50335 ( 0.24%) 54886780 ( 0.43%) 1090.43
ip6 31786 ( 0.15%) 6872103 ( 0.05%) 216.20
tcp6 9717 ( 0.05%) 3155236 ( 0.02%) 324.71
http(s) 510 ( 0.00%) 479210 ( 0.00%) 939.63
http(c) 2075 ( 0.01%) 184955 ( 0.00%) 89.13
smtp 1029 ( 0.00%) 731623 ( 0.01%) 711.00
bgp 375 ( 0.00%) 32115 ( 0.00%) 85.64
other 5728 ( 0.03%) 1727333 ( 0.01%) 301.56
udp6 16503 ( 0.08%) 2675859 ( 0.02%) 162.14
dns 14900 ( 0.07%) 2379679 ( 0.02%) 159.71
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1601 ( 0.01%) 295974 ( 0.00%) 184.87
icmp6 5077 ( 0.02%) 619978 ( 0.00%) 122.12
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 459 ( 0.00%) 416950 ( 0.00%) 908.39
tcpdump file: 200903311630.dump.gz (467.66 MB)