Traffic Trace Info
DumpFile: 200903081400.dump
FileSize: 1221.26MB
Id: 200903081400
StartTime: Sun Mar 8 14:00:01 2009
EndTime: Sun Mar 8 14:15:00 2009
TotalTime: 899.53 seconds
TotalCapSize: 954.09MB CapLen: 96 bytes
# of packets: 17508359 (12388.77MB)
AvgRate: 115.56Mbps stddev:20.34M
IP flow (unique src/dst pair) Information
# of flows: 647385 (avg. 27.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.3% 3.1% 2.1% 2.1% 2.1% 2.0% 1.8% 1.7% 1.6%
IP address Information
# of IPv4 addresses: 409615
Top 10 bandwidth usage (bytes/total in %):
12.8% 10.7% 10.5% 8.8% 6.7% 3.7% 3.5% 3.4% 3.4% 3.2%
# of IPv6 addresses: 1048
Top 10 bandwidth usage (bytes/total in %):
59.6% 36.8% 17.1% 7.3% 6.6% 5.0% 3.2% 2.8% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903081400.pktlen.png)
detailed numbers
[ 32- 63]: 4195508
[ 64- 127]: 3796968
[ 128- 255]: 541916
[ 256- 511]: 424414
[ 512- 1023]: 395056
[ 1024- 2047]: 8154497
Protocol Breakdown
![[protocol breakdown chart]](200903081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17508359 (100.00%) 12990561700 (100.00%) 741.96
ip 17470773 ( 99.79%) 12981494154 ( 99.93%) 743.04
tcp 14570909 ( 83.22%) 11833056825 ( 91.09%) 812.10
http(s) 6495716 ( 37.10%) 9048970244 ( 69.66%) 1393.07
http(c) 4083946 ( 23.33%) 495085736 ( 3.81%) 121.23
squid 418083 ( 2.39%) 150572066 ( 1.16%) 360.15
smtp 222752 ( 1.27%) 31866092 ( 0.25%) 143.06
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 41285 ( 0.24%) 3759201 ( 0.03%) 91.05
pop3 9123 ( 0.05%) 6763778 ( 0.05%) 741.40
imap 2305 ( 0.01%) 562481 ( 0.00%) 244.03
telnet 493 ( 0.00%) 37102 ( 0.00%) 75.26
ssh 525014 ( 3.00%) 78026875 ( 0.60%) 148.62
dns 4527 ( 0.03%) 438031 ( 0.00%) 96.76
bgp 146 ( 0.00%) 51941 ( 0.00%) 355.76
napster 19 ( 0.00%) 2629 ( 0.00%) 138.37
realaud 4 ( 0.00%) 266 ( 0.00%) 66.50
rtsp 217 ( 0.00%) 141895 ( 0.00%) 653.89
icecast 143687 ( 0.82%) 169538020 ( 1.31%) 1179.91
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2623583 ( 14.98%) 1847239924 ( 14.22%) 704.09
udp 2198130 ( 12.55%) 1047451449 ( 8.06%) 476.52
dns 927713 ( 5.30%) 210904439 ( 1.62%) 227.34
realaud 233 ( 0.00%) 19526 ( 0.00%) 83.80
halflif 159 ( 0.00%) 20540 ( 0.00%) 129.18
starcra 43 ( 0.00%) 7216 ( 0.00%) 167.81
everque 53 ( 0.00%) 10472 ( 0.00%) 197.58
unreal 15 ( 0.00%) 2910 ( 0.00%) 194.00
quake 23 ( 0.00%) 2098 ( 0.00%) 91.22
cuseeme 8 ( 0.00%) 1279 ( 0.00%) 159.88
other 1269688 ( 7.25%) 836399447 ( 6.44%) 658.74
icmp 649416 ( 3.71%) 54320478 ( 0.42%) 83.65
ipip 323 ( 0.00%) 41070 ( 0.00%) 127.15
ipsec 82 ( 0.00%) 12956 ( 0.00%) 158.00
ip6 42602 ( 0.24%) 45256886 ( 0.35%) 1062.32
other 9311 ( 0.05%) 1354490 ( 0.01%) 145.47
frag 43879 ( 0.25%) 37830703 ( 0.29%) 862.16
ip6 37586 ( 0.21%) 9067546 ( 0.07%) 241.25
tcp6 19948 ( 0.11%) 6466262 ( 0.05%) 324.16
http(s) 6750 ( 0.04%) 4080701 ( 0.03%) 604.55
http(c) 7889 ( 0.05%) 1845023 ( 0.01%) 233.87
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 255 ( 0.00%) 75062 ( 0.00%) 294.36
ftp 17 ( 0.00%) 1500 ( 0.00%) 88.24
pop3 69 ( 0.00%) 7409 ( 0.00%) 107.38
ssh 22 ( 0.00%) 2544 ( 0.00%) 115.64
dns 5 ( 0.00%) 2213 ( 0.00%) 442.60
bgp 404 ( 0.00%) 44487 ( 0.00%) 110.12
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 4534 ( 0.03%) 407101 ( 0.00%) 89.79
udp6 11202 ( 0.06%) 1725715 ( 0.01%) 154.05
dns 11173 ( 0.06%) 1722545 ( 0.01%) 154.17
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
halflif 1 ( 0.00%) 99 ( 0.00%) 99.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 26 ( 0.00%) 2860 ( 0.00%) 110.00
icmp6 6392 ( 0.04%) 856892 ( 0.01%) 134.06
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14 ( 0.00%) 14597 ( 0.00%) 1042.64
tcpdump file: 200903081400.dump.gz (420.43 MB)