Traffic Trace Info
DumpFile: 200903111400.dump
FileSize: 1317.10MB
Id: 200903111400
StartTime: Wed Mar 11 14:00:00 2009
EndTime: Wed Mar 11 14:15:00 2009
TotalTime: 900.17 seconds
TotalCapSize: 1034.06MB CapLen: 96 bytes
# of packets: 18548920 (11779.66MB)
AvgRate: 109.74Mbps stddev:15.12M
IP flow (unique src/dst pair) Information
# of flows: 677876 (avg. 27.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.3% 3.1% 2.0% 1.9% 1.6% 1.5% 1.4% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 403131
Top 10 bandwidth usage (bytes/total in %):
9.7% 6.5% 6.4% 6.2% 5.8% 5.5% 4.1% 3.4% 3.4% 3.1%
# of IPv6 addresses: 1154
Top 10 bandwidth usage (bytes/total in %):
17.0% 11.9% 10.8% 8.8% 7.9% 7.7% 7.2% 5.5% 4.4% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903111400.pktlen.png)
detailed numbers
[ 32- 63]: 3856241
[ 64- 127]: 5432124
[ 128- 255]: 808405
[ 256- 511]: 462131
[ 512- 1023]: 510381
[ 1024- 2047]: 7479638
Protocol Breakdown
![[protocol breakdown chart]](200903111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18548920 (100.00%) 12351872890 (100.00%) 665.91
ip 18512939 ( 99.81%) 12345482504 ( 99.95%) 666.86
tcp 15770778 ( 85.02%) 11669559834 ( 94.48%) 739.95
http(s) 5845908 ( 31.52%) 7718207441 ( 62.49%) 1320.28
http(c) 3985970 ( 21.49%) 500853086 ( 4.05%) 125.65
squid 440322 ( 2.37%) 219817957 ( 1.78%) 499.22
smtp 341026 ( 1.84%) 77808274 ( 0.63%) 228.16
nntp 10061 ( 0.05%) 612669 ( 0.00%) 60.90
ftp 158990 ( 0.86%) 46885310 ( 0.38%) 294.89
pop3 13127 ( 0.07%) 9067070 ( 0.07%) 690.72
imap 4630 ( 0.02%) 1692423 ( 0.01%) 365.53
telnet 170 ( 0.00%) 13242 ( 0.00%) 77.89
ssh 290881 ( 1.57%) 38136754 ( 0.31%) 131.11
dns 4633 ( 0.02%) 451470 ( 0.00%) 97.45
bgp 141 ( 0.00%) 49127 ( 0.00%) 348.42
napster 32 ( 0.00%) 5917 ( 0.00%) 184.91
realaud 50 ( 0.00%) 8329 ( 0.00%) 166.58
rtsp 167443 ( 0.90%) 198981716 ( 1.61%) 1188.35
icecast 531 ( 0.00%) 40540 ( 0.00%) 76.35
hotline 6 ( 0.00%) 1386 ( 0.00%) 231.00
other 4506855 ( 24.30%) 2856926967 ( 23.13%) 633.91
udp 2161465 ( 11.65%) 598272324 ( 4.84%) 276.79
dns 1238640 ( 6.68%) 255507910 ( 2.07%) 206.28
realaud 10632 ( 0.06%) 7795230 ( 0.06%) 733.19
halflif 285 ( 0.00%) 18668 ( 0.00%) 65.50
starcra 36 ( 0.00%) 6515 ( 0.00%) 180.97
everque 60 ( 0.00%) 11186 ( 0.00%) 186.43
unreal 77 ( 0.00%) 15413 ( 0.00%) 200.17
quake 11 ( 0.00%) 949 ( 0.00%) 86.27
cuseeme 5 ( 0.00%) 421 ( 0.00%) 84.20
other 911585 ( 4.91%) 334856264 ( 2.71%) 367.33
icmp 490115 ( 2.64%) 40956472 ( 0.33%) 83.57
ipip 307 ( 0.00%) 38090 ( 0.00%) 124.07
ipsec 80 ( 0.00%) 12640 ( 0.00%) 158.00
ip6 35255 ( 0.19%) 28838420 ( 0.23%) 818.00
other 54939 ( 0.30%) 7804724 ( 0.06%) 142.06
frag 46388 ( 0.25%) 39865966 ( 0.32%) 859.40
ip6 35981 ( 0.19%) 6390386 ( 0.05%) 177.60
tcp6 7528 ( 0.04%) 2047840 ( 0.02%) 272.03
http(s) 1587 ( 0.01%) 1154485 ( 0.01%) 727.46
http(c) 3985 ( 0.02%) 646538 ( 0.01%) 162.24
smtp 235 ( 0.00%) 72154 ( 0.00%) 307.04
ssh 20 ( 0.00%) 2356 ( 0.00%) 117.80
bgp 407 ( 0.00%) 47663 ( 0.00%) 117.11
other 1294 ( 0.01%) 124644 ( 0.00%) 96.32
udp6 20876 ( 0.11%) 3373213 ( 0.03%) 161.58
dns 20853 ( 0.11%) 3370687 ( 0.03%) 161.64
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
other 22 ( 0.00%) 2420 ( 0.00%) 110.00
icmp6 7532 ( 0.04%) 948444 ( 0.01%) 125.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 15 ( 0.00%) 16809 ( 0.00%) 1120.60
tcpdump file: 200903111400.dump.gz (456.30 MB)