Traffic Trace Info
DumpFile: 200903021400.dump
FileSize: 1478.24MB
Id: 200903021400
StartTime: Mon Mar 2 14:00:00 2009
EndTime: Mon Mar 2 14:15:00 2009
TotalTime: 900.26 seconds
TotalCapSize: 1155.80MB CapLen: 96 bytes
# of packets: 21130967 (14282.60MB)
AvgRate: 133.09Mbps stddev:10.39M
IP flow (unique src/dst pair) Information
# of flows: 656673 (avg. 32.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.2% 1.8% 1.8% 1.7% 1.6% 1.3% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 373578
Top 10 bandwidth usage (bytes/total in %):
17.7% 12.9% 6.1% 4.5% 4.1% 3.1% 2.7% 2.5% 2.4% 2.2%
# of IPv6 addresses: 1129
Top 10 bandwidth usage (bytes/total in %):
94.1% 94.1% 1.6% 1.1% 0.8% 0.7% 0.6% 0.5% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903021400.pktlen.png)
detailed numbers
[ 32- 63]: 5547860
[ 64- 127]: 4545811
[ 128- 255]: 757168
[ 256- 511]: 552711
[ 512- 1023]: 502733
[ 1024- 2047]: 9224684
Protocol Breakdown
![[protocol breakdown chart]](200903021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21130967 (100.00%) 14976393911 (100.00%) 708.74
ip 20965895 ( 99.22%) 14799224397 ( 98.82%) 705.87
tcp 17911536 ( 84.76%) 14009105110 ( 93.54%) 782.13
http(s) 6779495 ( 32.08%) 9188026964 ( 61.35%) 1355.27
http(c) 4718285 ( 22.33%) 517514127 ( 3.46%) 109.68
squid 588939 ( 2.79%) 229164898 ( 1.53%) 389.11
smtp 363626 ( 1.72%) 157181871 ( 1.05%) 432.26
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 394273 ( 1.87%) 367621645 ( 2.45%) 932.40
pop3 16745 ( 0.08%) 6019757 ( 0.04%) 359.50
imap 4690 ( 0.02%) 1178100 ( 0.01%) 251.19
telnet 8478 ( 0.04%) 810502 ( 0.01%) 95.60
ssh 415315 ( 1.97%) 60513455 ( 0.40%) 145.70
dns 1050 ( 0.00%) 98501 ( 0.00%) 93.81
bgp 240 ( 0.00%) 121457 ( 0.00%) 506.07
napster 40 ( 0.00%) 5775 ( 0.00%) 144.38
realaud 176 ( 0.00%) 28156 ( 0.00%) 159.98
rtsp 187429 ( 0.89%) 46861681 ( 0.31%) 250.02
icecast 10499 ( 0.05%) 633811 ( 0.00%) 60.37
hotline 15 ( 0.00%) 2518 ( 0.00%) 167.87
other 4422221 ( 20.93%) 3433320686 ( 22.92%) 776.38
udp 2136561 ( 10.11%) 674221715 ( 4.50%) 315.56
dns 1141856 ( 5.40%) 230874719 ( 1.54%) 202.19
rip 2 ( 0.00%) 120 ( 0.00%) 60.00
realaud 17 ( 0.00%) 1555 ( 0.00%) 91.47
halflif 31 ( 0.00%) 3216 ( 0.00%) 103.74
starcra 38 ( 0.00%) 6416 ( 0.00%) 168.84
everque 102 ( 0.00%) 23761 ( 0.00%) 232.95
unreal 18 ( 0.00%) 2057 ( 0.00%) 114.28
quake 27 ( 0.00%) 2267 ( 0.00%) 83.96
cuseeme 7 ( 0.00%) 1192 ( 0.00%) 170.29
other 994373 ( 4.71%) 443242047 ( 2.96%) 445.75
icmp 730974 ( 3.46%) 64601395 ( 0.43%) 88.38
ipip 335 ( 0.00%) 41578 ( 0.00%) 124.11
ipsec 106771 ( 0.51%) 33652138 ( 0.22%) 315.18
ip6 23615 ( 0.11%) 3729223 ( 0.02%) 157.92
other 56103 ( 0.27%) 13873238 ( 0.09%) 247.28
frag 1279 ( 0.01%) 1146722 ( 0.01%) 896.58
ip6 165072 ( 0.78%) 177169514 ( 1.18%) 1073.29
tcp6 136623 ( 0.65%) 172217121 ( 1.15%) 1260.53
http(s) 3741 ( 0.02%) 2702017 ( 0.02%) 722.27
http(c) 18557 ( 0.09%) 2273607 ( 0.02%) 122.52
smtp 606 ( 0.00%) 230466 ( 0.00%) 380.31
ftp 52 ( 0.00%) 4775 ( 0.00%) 91.83
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 107 ( 0.00%) 12542 ( 0.00%) 117.21
bgp 412 ( 0.00%) 39407 ( 0.00%) 95.65
other 113146 ( 0.54%) 166954082 ( 1.11%) 1475.56
udp6 22962 ( 0.11%) 4012972 ( 0.03%) 174.77
dns 22945 ( 0.11%) 4011104 ( 0.03%) 174.81
quake 2 ( 0.00%) 218 ( 0.00%) 109.00
other 15 ( 0.00%) 1650 ( 0.00%) 110.00
icmp6 5391 ( 0.03%) 856000 ( 0.01%) 158.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 66 ( 0.00%) 79341 ( 0.00%) 1202.14
tcpdump file: 200903021400.dump.gz (521.81 MB)