Traffic Trace Info
DumpFile: 200903311645.dump
FileSize: 1586.89MB
Id: 200903311645
StartTime: Tue Mar 31 16:45:01 2009
EndTime: Tue Mar 31 17:00:00 2009
TotalTime: 899.56 seconds
TotalCapSize: 1248.01MB CapLen: 96 bytes
# of packets: 22200804 (12381.95MB)
AvgRate: 115.46Mbps stddev:14.04M
IP flow (unique src/dst pair) Information
# of flows: 772376 (avg. 28.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.9% 2.3% 2.0% 2.0% 1.7% 1.5% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 502255
Top 10 bandwidth usage (bytes/total in %):
9.7% 9.2% 8.0% 6.1% 5.2% 4.2% 4.1% 4.1% 4.1% 3.6%
# of IPv6 addresses: 2050
Top 10 bandwidth usage (bytes/total in %):
38.4% 26.3% 19.1% 12.2% 11.9% 7.0% 5.4% 2.9% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311645.pktlen.png)
detailed numbers
[ 32- 63]: 4407425
[ 64- 127]: 8139990
[ 128- 255]: 735091
[ 256- 511]: 552719
[ 512- 1023]: 522400
[ 1024- 2047]: 7843179
Protocol Breakdown
![[protocol breakdown chart]](200903311645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22200804 (100.00%) 12983415713 (100.00%) 584.82
ip 22156218 ( 99.80%) 12972970885 ( 99.92%) 585.52
tcp 14908740 ( 67.15%) 11318746301 ( 87.18%) 759.20
http(s) 6301046 ( 28.38%) 8483230925 ( 65.34%) 1346.32
http(c) 4829778 ( 21.75%) 559995597 ( 4.31%) 115.95
squid 329822 ( 1.49%) 144501766 ( 1.11%) 438.12
smtp 372048 ( 1.68%) 142586095 ( 1.10%) 383.25
nntp 63 ( 0.00%) 7903 ( 0.00%) 125.44
ftp 280315 ( 1.26%) 255994176 ( 1.97%) 913.24
pop3 8222 ( 0.04%) 2815832 ( 0.02%) 342.48
imap 4494 ( 0.02%) 880107 ( 0.01%) 195.84
telnet 6117 ( 0.03%) 769202 ( 0.01%) 125.75
ssh 30262 ( 0.14%) 7957502 ( 0.06%) 262.95
dns 13962 ( 0.06%) 1432783 ( 0.01%) 102.62
bgp 145 ( 0.00%) 51334 ( 0.00%) 354.03
napster 69 ( 0.00%) 5266 ( 0.00%) 76.32
realaud 45 ( 0.00%) 8932 ( 0.00%) 198.49
rtsp 125473 ( 0.57%) 8144884 ( 0.06%) 64.91
icecast 12467 ( 0.06%) 832123 ( 0.01%) 66.75
hotline 31 ( 0.00%) 2827 ( 0.00%) 91.19
other 2594379 ( 11.69%) 1709528927 ( 13.17%) 658.94
udp 3032539 ( 13.66%) 1344925859 ( 10.36%) 443.50
dns 1198906 ( 5.40%) 295980104 ( 2.28%) 246.88
rip 2 ( 0.00%) 209 ( 0.00%) 104.50
realaud 18242 ( 0.08%) 8284429 ( 0.06%) 454.14
halflif 31 ( 0.00%) 3485 ( 0.00%) 112.42
starcra 38 ( 0.00%) 5329 ( 0.00%) 140.24
everque 78 ( 0.00%) 16542 ( 0.00%) 212.08
unreal 17 ( 0.00%) 2475 ( 0.00%) 145.59
quake 24 ( 0.00%) 2845 ( 0.00%) 118.54
cuseeme 7 ( 0.00%) 893 ( 0.00%) 127.57
other 1814982 ( 8.18%) 1040448176 ( 8.01%) 573.26
icmp 4172631 ( 18.79%) 302749584 ( 2.33%) 72.56
ipip 320 ( 0.00%) 40274 ( 0.00%) 125.86
ipsec 112 ( 0.00%) 17728 ( 0.00%) 158.29
ip6 23380 ( 0.11%) 4219139 ( 0.03%) 180.46
other 18496 ( 0.08%) 2272000 ( 0.02%) 122.84
frag 50077 ( 0.23%) 55365776 ( 0.43%) 1105.61
ip6 44586 ( 0.20%) 10444828 ( 0.08%) 234.26
tcp6 21000 ( 0.09%) 6461337 ( 0.05%) 307.68
http(s) 813 ( 0.00%) 752158 ( 0.01%) 925.16
http(c) 1962 ( 0.01%) 186495 ( 0.00%) 95.05
smtp 359 ( 0.00%) 139511 ( 0.00%) 388.61
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 364 ( 0.00%) 30768 ( 0.00%) 84.53
other 17500 ( 0.08%) 5352233 ( 0.04%) 305.84
udp6 18559 ( 0.08%) 3089411 ( 0.02%) 166.46
dns 16626 ( 0.07%) 2666531 ( 0.02%) 160.38
other 1933 ( 0.01%) 422880 ( 0.00%) 218.77
icmp6 4604 ( 0.02%) 563267 ( 0.00%) 122.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 393 ( 0.00%) 326733 ( 0.00%) 831.38
tcpdump file: 200903311645.dump.gz (488.56 MB)