Traffic Trace Info
DumpFile: 200903031400.dump
FileSize: 1405.28MB
Id: 200903031400
StartTime: Tue Mar 3 14:00:01 2009
EndTime: Tue Mar 3 14:15:00 2009
TotalTime: 899.52 seconds
TotalCapSize: 1099.99MB CapLen: 96 bytes
# of packets: 20006738 (13601.59MB)
AvgRate: 126.86Mbps stddev:15.64M
IP flow (unique src/dst pair) Information
# of flows: 1178615 (avg. 16.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 4.0% 3.1% 3.1% 3.0% 2.6% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 641547
Top 10 bandwidth usage (bytes/total in %):
19.1% 14.3% 4.4% 4.4% 3.4% 3.3% 3.3% 3.3% 3.0% 2.8%
# of IPv6 addresses: 1126
Top 10 bandwidth usage (bytes/total in %):
98.0% 78.7% 19.4% 0.9% 0.9% 0.5% 0.3% 0.1% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903031400.pktlen.png)
detailed numbers
[ 32- 63]: 5232890
[ 64- 127]: 3921019
[ 128- 255]: 793909
[ 256- 511]: 675983
[ 512- 1023]: 562154
[ 1024- 2047]: 8820783
Protocol Breakdown
![[protocol breakdown chart]](200903031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20006738 (100.00%) 14262302489 (100.00%) 712.87
ip 19373259 ( 96.83%) 13372683837 ( 93.76%) 690.27
tcp 16256809 ( 81.26%) 12461996586 ( 87.38%) 766.57
http(s) 6575302 ( 32.87%) 8880296463 ( 62.26%) 1350.55
http(c) 4260350 ( 21.29%) 413645548 ( 2.90%) 97.09
squid 1013155 ( 5.06%) 707240615 ( 4.96%) 698.06
smtp 389762 ( 1.95%) 192820413 ( 1.35%) 494.71
nntp 102 ( 0.00%) 9496 ( 0.00%) 93.10
ftp 26795 ( 0.13%) 2866578 ( 0.02%) 106.98
pop3 15386 ( 0.08%) 5143314 ( 0.04%) 334.29
imap 2428 ( 0.01%) 348954 ( 0.00%) 143.72
telnet 658 ( 0.00%) 49610 ( 0.00%) 75.40
ssh 24062 ( 0.12%) 13077803 ( 0.09%) 543.50
dns 1441 ( 0.01%) 112662 ( 0.00%) 78.18
bgp 138 ( 0.00%) 48276 ( 0.00%) 349.83
napster 21 ( 0.00%) 2166 ( 0.00%) 103.14
rtsp 146024 ( 0.73%) 56000919 ( 0.39%) 383.50
icecast 5245 ( 0.03%) 489436 ( 0.00%) 93.31
hotline 37 ( 0.00%) 2692 ( 0.00%) 72.76
other 3795899 ( 18.97%) 2189841401 ( 15.35%) 576.90
udp 2514605 ( 12.57%) 831675709 ( 5.83%) 330.74
dns 1162628 ( 5.81%) 258064057 ( 1.81%) 221.97
realaud 810 ( 0.00%) 50062 ( 0.00%) 61.80
halflif 122 ( 0.00%) 16481 ( 0.00%) 135.09
starcra 88 ( 0.00%) 17725 ( 0.00%) 201.42
everque 874 ( 0.00%) 61191 ( 0.00%) 70.01
unreal 26 ( 0.00%) 4810 ( 0.00%) 185.00
quake 25 ( 0.00%) 3759 ( 0.00%) 150.36
cuseeme 11 ( 0.00%) 1852 ( 0.00%) 168.36
other 1349980 ( 6.75%) 573424820 ( 4.02%) 424.77
icmp 418986 ( 2.09%) 37914072 ( 0.27%) 90.49
ipip 303 ( 0.00%) 35978 ( 0.00%) 118.74
ipsec 102979 ( 0.51%) 23743706 ( 0.17%) 230.57
ip6 21856 ( 0.11%) 2794155 ( 0.02%) 127.84
other 57721 ( 0.29%) 14523631 ( 0.10%) 251.62
frag 4308 ( 0.02%) 3459179 ( 0.02%) 802.97
ip6 633477 ( 3.17%) 889618532 ( 6.24%) 1404.34
tcp6 608611 ( 3.04%) 885491452 ( 6.21%) 1454.94
http(s) 5392 ( 0.03%) 3659792 ( 0.03%) 678.74
http(c) 6819 ( 0.03%) 1482772 ( 0.01%) 217.45
smtp 351 ( 0.00%) 123036 ( 0.00%) 350.53
ftp 57 ( 0.00%) 5315 ( 0.00%) 93.25
ssh 20 ( 0.00%) 2356 ( 0.00%) 117.80
dns 7 ( 0.00%) 730 ( 0.00%) 104.29
bgp 385 ( 0.00%) 33721 ( 0.00%) 87.59
other 595580 ( 2.98%) 880183730 ( 6.17%) 1477.86
udp6 19473 ( 0.10%) 3343839 ( 0.02%) 171.72
dns 19432 ( 0.10%) 3338816 ( 0.02%) 171.82
everque 1 ( 0.00%) 119 ( 0.00%) 119.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 39 ( 0.00%) 4786 ( 0.00%) 122.72
icmp6 5352 ( 0.03%) 769850 ( 0.01%) 143.84
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 10 ( 0.00%) 9175 ( 0.00%) 917.50
tcpdump file: 200903031400.dump.gz (477.61 MB)