Traffic Trace Info
DumpFile: 200903311730.dump
FileSize: 1560.31MB
Id: 200903311730
StartTime: Tue Mar 31 17:30:00 2009
EndTime: Tue Mar 31 17:45:00 2009
TotalTime: 899.82 seconds
TotalCapSize: 1223.48MB CapLen: 96 bytes
# of packets: 22060876 (13440.84MB)
AvgRate: 125.31Mbps stddev:12.43M
IP flow (unique src/dst pair) Information
# of flows: 826769 (avg. 26.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 3.7% 2.9% 2.0% 1.8% 1.6% 1.5% 1.4% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 522060
Top 10 bandwidth usage (bytes/total in %):
11.5% 9.3% 8.8% 7.7% 5.4% 3.9% 3.9% 3.2% 3.0% 2.8%
# of IPv6 addresses: 1952
Top 10 bandwidth usage (bytes/total in %):
21.2% 20.9% 12.7% 12.7% 7.6% 5.7% 5.7% 5.1% 5.0% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311730.pktlen.png)
detailed numbers
[ 32- 63]: 4403155
[ 64- 127]: 7091155
[ 128- 255]: 917601
[ 256- 511]: 488667
[ 512- 1023]: 509568
[ 1024- 2047]: 8650730
Protocol Breakdown
![[protocol breakdown chart]](200903311730.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22060876 (100.00%) 14093746390 (100.00%) 638.86
ip 22030951 ( 99.86%) 14087683199 ( 99.96%) 639.45
tcp 15677225 ( 71.06%) 12527858955 ( 88.89%) 799.11
http(s) 6571543 ( 29.79%) 8909905997 ( 63.22%) 1355.83
http(c) 4470998 ( 20.27%) 575218256 ( 4.08%) 128.66
squid 817307 ( 3.70%) 654866058 ( 4.65%) 801.25
smtp 363808 ( 1.65%) 87797841 ( 0.62%) 241.33
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 483131 ( 2.19%) 470020626 ( 3.33%) 972.86
pop3 10068 ( 0.05%) 4434538 ( 0.03%) 440.46
imap 10756 ( 0.05%) 6256333 ( 0.04%) 581.66
telnet 6807 ( 0.03%) 897899 ( 0.01%) 131.91
ssh 151761 ( 0.69%) 109337809 ( 0.78%) 720.46
dns 16989 ( 0.08%) 3881268 ( 0.03%) 228.46
bgp 173 ( 0.00%) 59463 ( 0.00%) 343.72
napster 108 ( 0.00%) 29003 ( 0.00%) 268.55
realaud 8 ( 0.00%) 592 ( 0.00%) 74.00
rtsp 156172 ( 0.71%) 45756527 ( 0.32%) 292.99
icecast 12298 ( 0.06%) 824917 ( 0.01%) 67.08
other 2605272 ( 11.81%) 1658570268 ( 11.77%) 636.62
udp 2837936 ( 12.86%) 1279181923 ( 9.08%) 450.74
dns 1166544 ( 5.29%) 285748960 ( 2.03%) 244.95
realaud 19236 ( 0.09%) 8342007 ( 0.06%) 433.67
halflif 36 ( 0.00%) 3521 ( 0.00%) 97.81
starcra 47 ( 0.00%) 8964 ( 0.00%) 190.72
everque 56 ( 0.00%) 11255 ( 0.00%) 200.98
unreal 18 ( 0.00%) 2625 ( 0.00%) 145.83
quake 43 ( 0.00%) 4931 ( 0.00%) 114.67
cuseeme 9 ( 0.00%) 1490 ( 0.00%) 165.56
other 1651708 ( 7.49%) 984901270 ( 6.99%) 596.29
icmp 3337990 ( 15.13%) 255201251 ( 1.81%) 76.45
ipip 306 ( 0.00%) 36928 ( 0.00%) 120.68
ipsec 112 ( 0.00%) 17624 ( 0.00%) 157.36
ip6 26869 ( 0.12%) 5687780 ( 0.04%) 211.69
other 150513 ( 0.68%) 19698738 ( 0.14%) 130.88
frag 50313 ( 0.23%) 55237994 ( 0.39%) 1097.89
ip6 29925 ( 0.14%) 6063191 ( 0.04%) 202.61
tcp6 7128 ( 0.03%) 2231228 ( 0.02%) 313.02
http(s) 297 ( 0.00%) 182122 ( 0.00%) 613.21
http(c) 2580 ( 0.01%) 240358 ( 0.00%) 93.16
smtp 179 ( 0.00%) 65676 ( 0.00%) 366.91
imap 1 ( 0.00%) 74 ( 0.00%) 74.00
ssh 2074 ( 0.01%) 358268 ( 0.00%) 172.74
dns 13 ( 0.00%) 1460 ( 0.00%) 112.31
bgp 360 ( 0.00%) 29987 ( 0.00%) 83.30
other 1624 ( 0.01%) 1353283 ( 0.01%) 833.30
udp6 17269 ( 0.08%) 2679464 ( 0.02%) 155.16
dns 15709 ( 0.07%) 2438558 ( 0.02%) 155.23
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
other 1558 ( 0.01%) 240688 ( 0.00%) 154.49
icmp6 4896 ( 0.02%) 607282 ( 0.00%) 124.04
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 602 ( 0.00%) 541137 ( 0.00%) 898.90
tcpdump file: 200903311730.dump.gz (501.15 MB)