Traffic Trace Info
DumpFile: 200903311700.dump
FileSize: 1517.71MB
Id: 200903311700
StartTime: Tue Mar 31 17:00:00 2009
EndTime: Tue Mar 31 17:15:01 2009
TotalTime: 900.46 seconds
TotalCapSize: 1190.44MB CapLen: 96 bytes
# of packets: 21438249 (13065.59MB)
AvgRate: 121.72Mbps stddev:15.40M
IP flow (unique src/dst pair) Information
# of flows: 930878 (avg. 23.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 2.8% 2.7% 2.1% 1.6% 1.5% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 595752
Top 10 bandwidth usage (bytes/total in %):
8.4% 8.0% 7.8% 7.0% 4.2% 4.2% 4.1% 3.2% 2.9% 2.9%
# of IPv6 addresses: 2008
Top 10 bandwidth usage (bytes/total in %):
32.5% 16.5% 16.2% 13.5% 10.2% 6.8% 4.1% 4.1% 3.8% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311700.pktlen.png)
detailed numbers
[ 32- 63]: 4561150
[ 64- 127]: 6709695
[ 128- 255]: 785263
[ 256- 511]: 484750
[ 512- 1023]: 490365
[ 1024- 2047]: 8407026
Protocol Breakdown
![[protocol breakdown chart]](200903311700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21438249 (100.00%) 13700267122 (100.00%) 639.06
ip 21403576 ( 99.84%) 13692487182 ( 99.94%) 639.73
tcp 15539609 ( 72.49%) 12040987102 ( 87.89%) 774.86
http(s) 6527088 ( 30.45%) 8779727527 ( 64.08%) 1345.12
http(c) 4563148 ( 21.29%) 668510218 ( 4.88%) 146.50
squid 544129 ( 2.54%) 327727792 ( 2.39%) 602.30
smtp 451970 ( 2.11%) 200242690 ( 1.46%) 443.04
nntp 56 ( 0.00%) 10644 ( 0.00%) 190.07
ftp 433237 ( 2.02%) 409144739 ( 2.99%) 944.39
pop3 9090 ( 0.04%) 2394154 ( 0.02%) 263.38
imap 4239 ( 0.02%) 1497385 ( 0.01%) 353.24
telnet 10829 ( 0.05%) 3063152 ( 0.02%) 282.87
ssh 31665 ( 0.15%) 6898153 ( 0.05%) 217.85
dns 14288 ( 0.07%) 1551351 ( 0.01%) 108.58
bgp 136 ( 0.00%) 51237 ( 0.00%) 376.74
napster 35 ( 0.00%) 2594 ( 0.00%) 74.11
realaud 8 ( 0.00%) 592 ( 0.00%) 74.00
rtsp 69220 ( 0.32%) 7396898 ( 0.05%) 106.86
icecast 12495 ( 0.06%) 834007 ( 0.01%) 66.75
hotline 2 ( 0.00%) 122 ( 0.00%) 61.00
other 2867897 ( 13.38%) 1631878107 ( 11.91%) 569.02
udp 2998118 ( 13.98%) 1419615556 ( 10.36%) 473.50
dns 1290204 ( 6.02%) 312627161 ( 2.28%) 242.31
realaud 18081 ( 0.08%) 8273657 ( 0.06%) 457.59
halflif 43 ( 0.00%) 4071 ( 0.00%) 94.67
starcra 56 ( 0.00%) 10076 ( 0.00%) 179.93
everque 64 ( 0.00%) 13748 ( 0.00%) 214.81
unreal 17 ( 0.00%) 2794 ( 0.00%) 164.35
quake 35 ( 0.00%) 3847 ( 0.00%) 109.91
cuseeme 4 ( 0.00%) 637 ( 0.00%) 159.25
other 1689420 ( 7.88%) 1098511111 ( 8.02%) 650.23
icmp 2765654 ( 12.90%) 204666124 ( 1.49%) 74.00
ipip 306 ( 0.00%) 36270 ( 0.00%) 118.53
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 25985 ( 0.12%) 5147511 ( 0.04%) 198.10
other 73794 ( 0.34%) 22017239 ( 0.16%) 298.36
frag 58060 ( 0.27%) 64781585 ( 0.47%) 1115.77
ip6 34673 ( 0.16%) 7779940 ( 0.06%) 224.38
tcp6 8845 ( 0.04%) 3443775 ( 0.03%) 389.35
http(s) 278 ( 0.00%) 182083 ( 0.00%) 654.97
http(c) 1931 ( 0.01%) 176067 ( 0.00%) 91.18
smtp 345 ( 0.00%) 117556 ( 0.00%) 340.74
ftp 21 ( 0.00%) 1985 ( 0.00%) 94.52
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 4 ( 0.00%) 461 ( 0.00%) 115.25
bgp 382 ( 0.00%) 33926 ( 0.00%) 88.81
other 5882 ( 0.03%) 2931525 ( 0.02%) 498.39
udp6 19879 ( 0.09%) 3164296 ( 0.02%) 159.18
dns 18112 ( 0.08%) 2855670 ( 0.02%) 157.67
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
starcra 1 ( 0.00%) 117 ( 0.00%) 117.00
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
other 1764 ( 0.01%) 308297 ( 0.00%) 174.77
icmp6 5391 ( 0.03%) 677071 ( 0.00%) 125.59
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 528 ( 0.00%) 490718 ( 0.00%) 929.39
tcpdump file: 200903311700.dump.gz (490.15 MB)