Traffic Trace Info
DumpFile: 200903091400.dump
FileSize: 1388.46MB
Id: 200903091400
StartTime: Mon Mar 9 14:00:01 2009
EndTime: Mon Mar 9 14:15:00 2009
TotalTime: 899.61 seconds
TotalCapSize: 1082.99MB CapLen: 96 bytes
# of packets: 20018111 (13857.40MB)
AvgRate: 129.22Mbps stddev:17.09M
IP flow (unique src/dst pair) Information
# of flows: 718293 (avg. 27.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 2.6% 1.9% 1.7% 1.7% 1.6% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 400639
Top 10 bandwidth usage (bytes/total in %):
15.5% 10.6% 5.9% 5.3% 5.3% 4.5% 4.1% 3.2% 2.6% 2.6%
# of IPv6 addresses: 1138
Top 10 bandwidth usage (bytes/total in %):
38.2% 38.2% 16.1% 10.1% 8.8% 8.8% 8.3% 5.8% 5.8% 5.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903091400.pktlen.png)
detailed numbers
[ 32- 63]: 5189711
[ 64- 127]: 4086342
[ 128- 255]: 549217
[ 256- 511]: 553164
[ 512- 1023]: 593498
[ 1024- 2047]: 9046179
Protocol Breakdown
![[protocol breakdown chart]](200903091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20018111 (100.00%) 14530540338 (100.00%) 725.87
ip 19958830 ( 99.70%) 14502124625 ( 99.80%) 726.60
tcp 16995458 ( 84.90%) 13514225758 ( 93.01%) 795.17
http(s) 6919982 ( 34.57%) 9300896952 ( 64.01%) 1344.06
http(c) 4560010 ( 22.78%) 468852021 ( 3.23%) 102.82
squid 560908 ( 2.80%) 248020785 ( 1.71%) 442.18
smtp 248460 ( 1.24%) 65388107 ( 0.45%) 263.17
nntp 187 ( 0.00%) 18119 ( 0.00%) 96.89
ftp 65994 ( 0.33%) 7728081 ( 0.05%) 117.10
pop3 16748 ( 0.08%) 7491085 ( 0.05%) 447.28
imap 3634 ( 0.02%) 802062 ( 0.01%) 220.71
telnet 1308 ( 0.01%) 96233 ( 0.00%) 73.57
ssh 33016 ( 0.16%) 9541346 ( 0.07%) 288.99
dns 5528 ( 0.03%) 503448 ( 0.00%) 91.07
bgp 142 ( 0.00%) 45479 ( 0.00%) 320.27
napster 10 ( 0.00%) 1827 ( 0.00%) 182.70
realaud 18 ( 0.00%) 3661 ( 0.00%) 203.39
rtsp 231355 ( 1.16%) 254788743 ( 1.75%) 1101.29
icecast 775 ( 0.00%) 201140 ( 0.00%) 259.54
hotline 5 ( 0.00%) 302 ( 0.00%) 60.40
other 4347377 ( 21.72%) 3149846307 ( 21.68%) 724.54
udp 2383239 ( 11.91%) 934082623 ( 6.43%) 391.94
dns 867716 ( 4.33%) 219418815 ( 1.51%) 252.87
realaud 13722 ( 0.07%) 6306915 ( 0.04%) 459.62
halflif 101 ( 0.00%) 14885 ( 0.00%) 147.38
starcra 43 ( 0.00%) 9292 ( 0.00%) 216.09
everque 58 ( 0.00%) 10755 ( 0.00%) 185.43
unreal 15 ( 0.00%) 3904 ( 0.00%) 260.27
quake 23 ( 0.00%) 2464 ( 0.00%) 107.13
cuseeme 6 ( 0.00%) 753 ( 0.00%) 125.50
other 1499284 ( 7.49%) 708128161 ( 4.87%) 472.31
icmp 548009 ( 2.74%) 46699351 ( 0.32%) 85.22
ipip 325 ( 0.00%) 40098 ( 0.00%) 123.38
ipsec 5685 ( 0.03%) 3865878 ( 0.03%) 680.01
ip6 20174 ( 0.10%) 2420597 ( 0.02%) 119.99
other 5940 ( 0.03%) 790320 ( 0.01%) 133.05
frag 57046 ( 0.28%) 48686592 ( 0.34%) 853.46
ip6 59281 ( 0.30%) 28415713 ( 0.20%) 479.34
tcp6 33147 ( 0.17%) 24331407 ( 0.17%) 734.05
http(s) 6838 ( 0.03%) 4664119 ( 0.03%) 682.09
http(c) 6168 ( 0.03%) 1424655 ( 0.01%) 230.98
smtp 2238 ( 0.01%) 1888490 ( 0.01%) 843.83
ftp 2451 ( 0.01%) 252033 ( 0.00%) 102.83
ssh 9908 ( 0.05%) 13356324 ( 0.09%) 1348.03
bgp 390 ( 0.00%) 39618 ( 0.00%) 101.58
other 5154 ( 0.03%) 2706168 ( 0.02%) 525.06
udp6 18694 ( 0.09%) 3124105 ( 0.02%) 167.12
dns 18679 ( 0.09%) 3122462 ( 0.02%) 167.16
realaud 1 ( 0.00%) 103 ( 0.00%) 103.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 13 ( 0.00%) 1430 ( 0.00%) 110.00
icmp6 7383 ( 0.04%) 927867 ( 0.01%) 125.68
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 27 ( 0.00%) 28254 ( 0.00%) 1046.44
tcpdump file: 200903091400.dump.gz (484.41 MB)