Traffic Trace Info
DumpFile: 200903311800.dump
FileSize: 1725.96MB
Id: 200903311800
StartTime: Tue Mar 31 18:00:00 2009
EndTime: Tue Mar 31 18:15:00 2009
TotalTime: 900.04 seconds
TotalCapSize: 1353.02MB CapLen: 96 bytes
# of packets: 24432499 (15730.30MB)
AvgRate: 146.64Mbps stddev:24.37M
IP flow (unique src/dst pair) Information
# of flows: 911419 (avg. 26.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 3.9% 3.2% 2.8% 2.3% 2.0% 1.9% 1.8% 1.8% 1.6%
IP address Information
# of IPv4 addresses: 595188
Top 10 bandwidth usage (bytes/total in %):
12.6% 9.3% 6.6% 5.9% 5.6% 4.5% 4.0% 3.9% 3.3% 3.2%
# of IPv6 addresses: 2007
Top 10 bandwidth usage (bytes/total in %):
29.1% 14.8% 14.8% 9.1% 8.9% 8.9% 7.9% 5.1% 3.9% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311800.pktlen.png)
detailed numbers
[ 32- 63]: 4795710
[ 64- 127]: 7130482
[ 128- 255]: 876836
[ 256- 511]: 529520
[ 512- 1023]: 697317
[ 1024- 2047]: 10402634
Protocol Breakdown
![[protocol breakdown chart]](200903311800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24432499 (100.00%) 16494416779 (100.00%) 675.10
ip 24399654 ( 99.87%) 16485703471 ( 99.95%) 675.65
tcp 17100051 ( 69.99%) 14440139485 ( 87.55%) 844.45
http(s) 8237722 ( 33.72%) 11165937946 ( 67.70%) 1355.46
http(c) 4746284 ( 19.43%) 553474825 ( 3.36%) 116.61
squid 482028 ( 1.97%) 274147754 ( 1.66%) 568.74
smtp 333013 ( 1.36%) 78211446 ( 0.47%) 234.86
nntp 1 ( 0.00%) 74 ( 0.00%) 74.00
ftp 545528 ( 2.23%) 538248752 ( 3.26%) 986.66
pop3 8967 ( 0.04%) 3482997 ( 0.02%) 388.42
imap 4483 ( 0.02%) 744265 ( 0.00%) 166.02
telnet 6853 ( 0.03%) 1174062 ( 0.01%) 171.32
ssh 169899 ( 0.70%) 202387302 ( 1.23%) 1191.22
dns 23732 ( 0.10%) 16536259 ( 0.10%) 696.79
bgp 176 ( 0.00%) 73488 ( 0.00%) 417.55
napster 118 ( 0.00%) 31107 ( 0.00%) 263.62
realaud 54 ( 0.00%) 10288 ( 0.00%) 190.52
rtsp 36756 ( 0.15%) 32866943 ( 0.20%) 894.19
icecast 606 ( 0.00%) 63897 ( 0.00%) 105.44
hotline 10 ( 0.00%) 851 ( 0.00%) 85.10
other 2503769 ( 10.25%) 1572744109 ( 9.54%) 628.15
udp 3504551 ( 14.34%) 1738997934 ( 10.54%) 496.21
dns 1291142 ( 5.28%) 300433455 ( 1.82%) 232.69
realaud 94000 ( 0.38%) 45410681 ( 0.28%) 483.09
halflif 48 ( 0.00%) 4553 ( 0.00%) 94.85
starcra 37 ( 0.00%) 7644 ( 0.00%) 206.59
everque 57 ( 0.00%) 11365 ( 0.00%) 199.39
unreal 41 ( 0.00%) 8163 ( 0.00%) 199.10
quake 35 ( 0.00%) 3645 ( 0.00%) 104.14
cuseeme 3 ( 0.00%) 251 ( 0.00%) 83.67
other 2118993 ( 8.67%) 1392962274 ( 8.45%) 657.37
icmp 3725479 ( 15.25%) 282331371 ( 1.71%) 75.78
ipip 321 ( 0.00%) 38476 ( 0.00%) 119.86
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 33918 ( 0.14%) 7390407 ( 0.04%) 217.89
other 35226 ( 0.14%) 16788734 ( 0.10%) 476.60
frag 52050 ( 0.21%) 56922188 ( 0.35%) 1093.61
ip6 32845 ( 0.13%) 8713308 ( 0.05%) 265.29
tcp6 8689 ( 0.04%) 4675346 ( 0.03%) 538.08
http(s) 633 ( 0.00%) 583231 ( 0.00%) 921.38
http(c) 2375 ( 0.01%) 218014 ( 0.00%) 91.80
smtp 361 ( 0.00%) 142798 ( 0.00%) 395.56
ssh 2026 ( 0.01%) 772724 ( 0.00%) 381.40
dns 14 ( 0.00%) 1697 ( 0.00%) 121.21
bgp 367 ( 0.00%) 30709 ( 0.00%) 83.68
other 2913 ( 0.01%) 2926173 ( 0.02%) 1004.52
udp6 18860 ( 0.08%) 3017417 ( 0.02%) 159.99
dns 17152 ( 0.07%) 2729344 ( 0.02%) 159.13
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1707 ( 0.01%) 287964 ( 0.00%) 168.70
icmp6 4802 ( 0.02%) 605289 ( 0.00%) 126.05
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 464 ( 0.00%) 411176 ( 0.00%) 886.16
tcpdump file: 200903311800.dump.gz (543.23 MB)