Traffic Trace Info
DumpFile: 200903041400.dump
FileSize: 1384.71MB
Id: 200903041400
StartTime: Wed Mar 4 14:00:00 2009
EndTime: Wed Mar 4 14:15:00 2009
TotalTime: 900.29 seconds
TotalCapSize: 1083.63MB CapLen: 96 bytes
# of packets: 19730869 (14441.75MB)
AvgRate: 134.59Mbps stddev:15.10M
IP flow (unique src/dst pair) Information
# of flows: 574855 (avg. 34.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.7% 3.6% 3.4% 3.4% 2.7% 2.7% 2.0% 1.8% 1.8%
IP address Information
# of IPv4 addresses: 330764
Top 10 bandwidth usage (bytes/total in %):
19.9% 17.7% 6.0% 5.7% 4.3% 4.2% 3.9% 3.9% 3.8% 3.7%
# of IPv6 addresses: 1162
Top 10 bandwidth usage (bytes/total in %):
98.7% 73.6% 25.3% 0.5% 0.4% 0.1% 0.1% 0.1% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903041400.pktlen.png)
detailed numbers
[ 32- 63]: 4891942
[ 64- 127]: 3544578
[ 128- 255]: 617441
[ 256- 511]: 508108
[ 512- 1023]: 589350
[ 1024- 2047]: 9579450
Protocol Breakdown
![[protocol breakdown chart]](200903041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19730869 (100.00%) 15143273186 (100.00%) 767.49
ip 19215988 ( 97.39%) 14440762002 ( 95.36%) 751.50
tcp 16410628 ( 83.17%) 13356414620 ( 88.20%) 813.89
http(s) 7268041 ( 36.84%) 9819941481 ( 64.85%) 1351.11
http(c) 4709858 ( 23.87%) 584935099 ( 3.86%) 124.19
squid 503432 ( 2.55%) 279455667 ( 1.85%) 555.10
smtp 281917 ( 1.43%) 107022987 ( 0.71%) 379.63
nntp 41 ( 0.00%) 3244 ( 0.00%) 79.12
ftp 41869 ( 0.21%) 4376857 ( 0.03%) 104.54
pop3 28229 ( 0.14%) 4106014 ( 0.03%) 145.45
imap 3487 ( 0.02%) 896355 ( 0.01%) 257.06
telnet 1731 ( 0.01%) 129508 ( 0.00%) 74.82
ssh 166422 ( 0.84%) 12257114 ( 0.08%) 73.65
dns 927 ( 0.00%) 83276 ( 0.00%) 89.83
bgp 170 ( 0.00%) 68814 ( 0.00%) 404.79
napster 10 ( 0.00%) 1195 ( 0.00%) 119.50
realaud 11 ( 0.00%) 981 ( 0.00%) 89.18
rtsp 185206 ( 0.94%) 71293480 ( 0.47%) 384.94
icecast 3801 ( 0.02%) 239416 ( 0.00%) 62.99
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 3215472 ( 16.30%) 2471602892 ( 16.32%) 768.66
udp 2344950 ( 11.88%) 1014685858 ( 6.70%) 432.71
dns 1057902 ( 5.36%) 240013292 ( 1.58%) 226.88
rip 5 ( 0.00%) 300 ( 0.00%) 60.00
realaud 17047 ( 0.09%) 5986269 ( 0.04%) 351.16
halflif 36 ( 0.00%) 7279 ( 0.00%) 202.19
starcra 33 ( 0.00%) 5762 ( 0.00%) 174.61
everque 259 ( 0.00%) 101113 ( 0.00%) 390.40
unreal 44 ( 0.00%) 5761 ( 0.00%) 130.93
quake 17 ( 0.00%) 2566 ( 0.00%) 150.94
cuseeme 5 ( 0.00%) 384 ( 0.00%) 76.80
other 1268920 ( 6.43%) 768487909 ( 5.07%) 605.62
icmp 384365 ( 1.95%) 35180386 ( 0.23%) 91.53
ipip 307 ( 0.00%) 35766 ( 0.00%) 116.50
ipsec 1647 ( 0.01%) 1206658 ( 0.01%) 732.64
ip6 24401 ( 0.12%) 17203493 ( 0.11%) 705.03
other 49690 ( 0.25%) 16035221 ( 0.11%) 322.71
frag 14778 ( 0.07%) 11750533 ( 0.08%) 795.14
ip6 514879 ( 2.61%) 702511064 ( 4.64%) 1364.42
tcp6 492147 ( 2.49%) 698917715 ( 4.62%) 1420.14
http(s) 4639 ( 0.02%) 2749245 ( 0.02%) 592.64
http(c) 16924 ( 0.09%) 2302049 ( 0.02%) 136.02
smtp 425 ( 0.00%) 213390 ( 0.00%) 502.09
ftp 2378 ( 0.01%) 247033 ( 0.00%) 103.88
ssh 20 ( 0.00%) 2372 ( 0.00%) 118.60
bgp 426 ( 0.00%) 42230 ( 0.00%) 99.13
other 467335 ( 2.37%) 693361396 ( 4.58%) 1483.65
udp6 16853 ( 0.09%) 2718304 ( 0.02%) 161.29
dns 16832 ( 0.09%) 2715995 ( 0.02%) 161.36
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
other 20 ( 0.00%) 2200 ( 0.00%) 110.00
icmp6 5816 ( 0.03%) 838771 ( 0.01%) 144.22
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 32 ( 0.00%) 32058 ( 0.00%) 1001.81
tcpdump file: 200903041400.dump.gz (467.68 MB)