Traffic Trace Info
DumpFile: 200903071400.dump
FileSize: 1516.27MB
Id: 200903071400
StartTime: Sat Mar 7 14:00:00 2009
EndTime: Sat Mar 7 14:15:00 2009
TotalTime: 900.17 seconds
TotalCapSize: 1181.08MB CapLen: 96 bytes
# of packets: 21966378 (13709.45MB)
AvgRate: 127.76Mbps stddev:14.85M
IP flow (unique src/dst pair) Information
# of flows: 629639 (avg. 34.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 3.0% 2.7% 2.6% 1.7% 1.6% 1.4% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 392007
Top 10 bandwidth usage (bytes/total in %):
22.4% 12.2% 10.0% 6.3% 3.6% 3.2% 3.1% 2.7% 2.6% 2.6%
# of IPv6 addresses: 1047
Top 10 bandwidth usage (bytes/total in %):
36.7% 25.0% 25.0% 23.4% 8.8% 7.3% 4.6% 4.5% 3.3% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903071400.pktlen.png)
detailed numbers
[ 32- 63]: 5453340
[ 64- 127]: 5190079
[ 128- 255]: 1011912
[ 256- 511]: 508945
[ 512- 1023]: 1102958
[ 1024- 2047]: 8699144
Protocol Breakdown
![[protocol breakdown chart]](200903071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21966378 (100.00%) 14375395576 (100.00%) 654.43
ip 21934657 ( 99.86%) 14366418976 ( 99.94%) 654.96
tcp 18957899 ( 86.30%) 13078398325 ( 90.98%) 689.87
http(s) 7814212 ( 35.57%) 10359351471 ( 72.06%) 1325.71
http(c) 4029337 ( 18.34%) 327832672 ( 2.28%) 81.36
squid 519822 ( 2.37%) 210303913 ( 1.46%) 404.57
smtp 174735 ( 0.80%) 23962438 ( 0.17%) 137.14
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 41696 ( 0.19%) 3864211 ( 0.03%) 92.68
pop3 7170 ( 0.03%) 2877693 ( 0.02%) 401.35
imap 1593 ( 0.01%) 188197 ( 0.00%) 118.14
telnet 762 ( 0.00%) 58551 ( 0.00%) 76.84
ssh 3998134 ( 18.20%) 584190924 ( 4.06%) 146.12
dns 1165 ( 0.01%) 107710 ( 0.00%) 92.45
bgp 145 ( 0.00%) 44605 ( 0.00%) 307.62
napster 42 ( 0.00%) 2970 ( 0.00%) 70.71
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 71707 ( 0.33%) 68601210 ( 0.48%) 956.69
icecast 26528 ( 0.12%) 23334567 ( 0.16%) 879.62
hotline 9 ( 0.00%) 1440 ( 0.00%) 160.00
other 2270839 ( 10.34%) 1473675571 ( 10.25%) 648.96
udp 2464967 ( 11.22%) 1242102675 ( 8.64%) 503.90
dns 738922 ( 3.36%) 176460349 ( 1.23%) 238.81
realaud 1433 ( 0.01%) 86777 ( 0.00%) 60.56
halflif 36 ( 0.00%) 3736 ( 0.00%) 103.78
starcra 14 ( 0.00%) 2777 ( 0.00%) 198.36
everque 46 ( 0.00%) 9572 ( 0.00%) 208.09
unreal 12 ( 0.00%) 3774 ( 0.00%) 314.50
quake 10 ( 0.00%) 806 ( 0.00%) 80.60
cuseeme 5 ( 0.00%) 627 ( 0.00%) 125.40
other 1724390 ( 7.85%) 1065482084 ( 7.41%) 617.89
icmp 500345 ( 2.28%) 43427448 ( 0.30%) 86.80
ipip 342 ( 0.00%) 42480 ( 0.00%) 124.21
ipsec 82 ( 0.00%) 12956 ( 0.00%) 158.00
ip6 9143 ( 0.04%) 2197241 ( 0.02%) 240.32
other 1879 ( 0.01%) 237851 ( 0.00%) 126.58
frag 1384 ( 0.01%) 1252445 ( 0.01%) 904.95
ip6 31721 ( 0.14%) 8976600 ( 0.06%) 282.99
tcp6 13291 ( 0.06%) 6260393 ( 0.04%) 471.02
http(s) 5573 ( 0.03%) 4621193 ( 0.03%) 829.21
http(c) 5326 ( 0.02%) 1193328 ( 0.01%) 224.06
smtp 597 ( 0.00%) 238700 ( 0.00%) 399.83
ftp 24 ( 0.00%) 3955 ( 0.00%) 164.79
ssh 21 ( 0.00%) 2446 ( 0.00%) 116.48
bgp 368 ( 0.00%) 31331 ( 0.00%) 85.14
other 1382 ( 0.01%) 169440 ( 0.00%) 122.60
udp6 12152 ( 0.06%) 1855202 ( 0.01%) 152.67
dns 12117 ( 0.06%) 1851345 ( 0.01%) 152.79
halflif 1 ( 0.00%) 117 ( 0.00%) 117.00
other 34 ( 0.00%) 3740 ( 0.00%) 110.00
icmp6 6218 ( 0.03%) 825629 ( 0.01%) 132.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 30 ( 0.00%) 31296 ( 0.00%) 1043.20
tcpdump file: 200903071400.dump.gz (548.31 MB)