Traffic Trace Info
DumpFile: 200903311900.dump
FileSize: 1393.63MB
Id: 200903311900
StartTime: Tue Mar 31 19:00:01 2009
EndTime: Tue Mar 31 19:15:01 2009
TotalTime: 899.97 seconds
TotalCapSize: 1084.28MB CapLen: 96 bytes
# of packets: 20261009 (13352.34MB)
AvgRate: 124.46Mbps stddev:14.54M
IP flow (unique src/dst pair) Information
# of flows: 788796 (avg. 25.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 3.3% 2.0% 1.7% 1.4% 1.4% 1.3% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 507402
Top 10 bandwidth usage (bytes/total in %):
11.2% 8.1% 7.3% 6.7% 6.7% 6.6% 3.6% 3.4% 3.3% 3.2%
# of IPv6 addresses: 2092
Top 10 bandwidth usage (bytes/total in %):
26.4% 13.4% 13.2% 11.5% 10.4% 9.5% 9.5% 7.7% 7.1% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311900.pktlen.png)
detailed numbers
[ 32- 63]: 3739185
[ 64- 127]: 5643209
[ 128- 255]: 1141903
[ 256- 511]: 514413
[ 512- 1023]: 474995
[ 1024- 2047]: 8747304
Protocol Breakdown
![[protocol breakdown chart]](200903311900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20261009 (100.00%) 14000940493 (100.00%) 691.03
ip 20218190 ( 99.79%) 13991375638 ( 99.93%) 692.02
tcp 13881942 ( 68.52%) 11332828809 ( 80.94%) 816.37
http(s) 6447603 ( 31.82%) 8680030246 ( 62.00%) 1346.24
http(c) 3656214 ( 18.05%) 318720445 ( 2.28%) 87.17
squid 671374 ( 3.31%) 496713876 ( 3.55%) 739.85
smtp 394966 ( 1.95%) 128474102 ( 0.92%) 325.28
ftp 535576 ( 2.64%) 521516021 ( 3.72%) 973.75
pop3 6742 ( 0.03%) 3486403 ( 0.02%) 517.12
imap 107059 ( 0.53%) 148860130 ( 1.06%) 1390.45
telnet 10954 ( 0.05%) 2158801 ( 0.02%) 197.08
ssh 19391 ( 0.10%) 6590682 ( 0.05%) 339.88
dns 14571 ( 0.07%) 1615748 ( 0.01%) 110.89
bgp 156 ( 0.00%) 57436 ( 0.00%) 368.18
napster 208 ( 0.00%) 115397 ( 0.00%) 554.79
realaud 12 ( 0.00%) 2102 ( 0.00%) 175.17
rtsp 46389 ( 0.23%) 3189766 ( 0.02%) 68.76
icecast 547 ( 0.00%) 51355 ( 0.00%) 93.88
hotline 13 ( 0.00%) 931 ( 0.00%) 71.62
other 1970161 ( 9.72%) 1021245008 ( 7.29%) 518.36
udp 4749808 ( 23.44%) 2508543924 ( 17.92%) 528.14
dns 1646582 ( 8.13%) 308380287 ( 2.20%) 187.29
realaud 1677 ( 0.01%) 104453 ( 0.00%) 62.29
halflif 416 ( 0.00%) 25473 ( 0.00%) 61.23
starcra 75 ( 0.00%) 17283 ( 0.00%) 230.44
everque 107 ( 0.00%) 17235 ( 0.00%) 161.07
unreal 3409 ( 0.02%) 2655556 ( 0.02%) 778.98
quake 37 ( 0.00%) 4033 ( 0.00%) 109.00
cuseeme 4 ( 0.00%) 333 ( 0.00%) 83.25
other 3097289 ( 15.29%) 2197146097 ( 15.69%) 709.38
icmp 1451482 ( 7.16%) 126527603 ( 0.90%) 87.17
ipip 299 ( 0.00%) 36642 ( 0.00%) 122.55
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 26431 ( 0.13%) 5464508 ( 0.04%) 206.75
other 108118 ( 0.53%) 17956772 ( 0.13%) 166.08
frag 52108 ( 0.26%) 57478596 ( 0.41%) 1103.07
ip6 42819 ( 0.21%) 9564855 ( 0.07%) 223.38
tcp6 18504 ( 0.09%) 5299707 ( 0.04%) 286.41
http(s) 1232 ( 0.01%) 1319070 ( 0.01%) 1070.67
http(c) 13716 ( 0.07%) 1093501 ( 0.01%) 79.72
smtp 475 ( 0.00%) 207785 ( 0.00%) 437.44
ftp 16 ( 0.00%) 1577 ( 0.00%) 98.56
ssh 4 ( 0.00%) 344 ( 0.00%) 86.00
bgp 382 ( 0.00%) 33565 ( 0.00%) 87.87
other 2679 ( 0.01%) 2643865 ( 0.02%) 986.89
udp6 18293 ( 0.09%) 2936145 ( 0.02%) 160.51
dns 16356 ( 0.08%) 2602667 ( 0.02%) 159.13
everque 1 ( 0.00%) 112 ( 0.00%) 112.00
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 1935 ( 0.01%) 333254 ( 0.00%) 172.22
icmp6 5247 ( 0.03%) 656618 ( 0.00%) 125.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 745 ( 0.00%) 668305 ( 0.00%) 897.05
tcpdump file: 200903311900.dump.gz (475.22 MB)