Traffic Trace Info
DumpFile: 200903121400.dump
FileSize: 1380.03MB
Id: 200903121400
StartTime: Thu Mar 12 14:00:00 2009
EndTime: Thu Mar 12 14:15:01 2009
TotalTime: 900.71 seconds
TotalCapSize: 1082.76MB CapLen: 96 bytes
# of packets: 19481357 (11734.11MB)
AvgRate: 109.29Mbps stddev:18.33M
IP flow (unique src/dst pair) Information
# of flows: 665529 (avg. 29.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 3.0% 2.1% 2.0% 1.4% 1.2% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 384142
Top 10 bandwidth usage (bytes/total in %):
9.7% 7.9% 7.9% 6.3% 5.3% 5.3% 4.9% 4.3% 3.1% 3.0%
# of IPv6 addresses: 1142
Top 10 bandwidth usage (bytes/total in %):
24.8% 14.3% 10.9% 8.7% 7.8% 7.8% 7.2% 7.2% 5.8% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903121400.pktlen.png)
detailed numbers
[ 32- 63]: 3603597
[ 64- 127]: 6127721
[ 128- 255]: 902752
[ 256- 511]: 657666
[ 512- 1023]: 708371
[ 1024- 2047]: 7481250
Protocol Breakdown
![[protocol breakdown chart]](200903121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19481357 (100.00%) 12304111332 (100.00%) 631.58
ip 19444455 ( 99.81%) 12293282551 ( 99.91%) 632.23
tcp 15643156 ( 80.30%) 10392352448 ( 84.46%) 664.34
http(s) 5342246 ( 27.42%) 7171683487 ( 58.29%) 1342.45
http(c) 3783757 ( 19.42%) 506952357 ( 4.12%) 133.98
squid 536521 ( 2.75%) 249722103 ( 2.03%) 465.45
smtp 295151 ( 1.52%) 80864924 ( 0.66%) 273.98
nntp 5281 ( 0.03%) 320332 ( 0.00%) 60.66
ftp 148277 ( 0.76%) 12362160 ( 0.10%) 83.37
pop3 8295 ( 0.04%) 3749413 ( 0.03%) 452.01
imap 6700 ( 0.03%) 1609490 ( 0.01%) 240.22
telnet 489 ( 0.00%) 37115 ( 0.00%) 75.90
ssh 2894971 ( 14.86%) 774379488 ( 6.29%) 267.49
dns 6738 ( 0.03%) 753729 ( 0.01%) 111.86
bgp 165 ( 0.00%) 74464 ( 0.00%) 451.30
napster 731 ( 0.00%) 314363 ( 0.00%) 430.05
realaud 71 ( 0.00%) 7125 ( 0.00%) 100.35
rtsp 43769 ( 0.22%) 5314605 ( 0.04%) 121.42
icecast 18163 ( 0.09%) 15442086 ( 0.13%) 850.19
hotline 64 ( 0.00%) 5910 ( 0.00%) 92.34
other 2551766 ( 13.10%) 1568759237 ( 12.75%) 614.77
udp 3080512 ( 15.81%) 1580592402 ( 12.85%) 513.09
dns 1187857 ( 6.10%) 258840833 ( 2.10%) 217.91
realaud 183 ( 0.00%) 15646 ( 0.00%) 85.50
halflif 16 ( 0.00%) 1784 ( 0.00%) 111.50
starcra 38 ( 0.00%) 7762 ( 0.00%) 204.26
everque 99 ( 0.00%) 14838 ( 0.00%) 149.88
unreal 36 ( 0.00%) 15501 ( 0.00%) 430.58
quake 10 ( 0.00%) 911 ( 0.00%) 91.10
other 1892099 ( 9.71%) 1321608628 ( 10.74%) 698.49
icmp 384075 ( 1.97%) 34343967 ( 0.28%) 89.42
ipip 293 ( 0.00%) 34773 ( 0.00%) 118.68
ipsec 80 ( 0.00%) 12640 ( 0.00%) 158.00
ip6 224538 ( 1.15%) 236485644 ( 1.92%) 1053.21
other 111801 ( 0.57%) 49460677 ( 0.40%) 442.40
frag 45127 ( 0.23%) 39020088 ( 0.32%) 864.67
ip6 36902 ( 0.19%) 10828781 ( 0.09%) 293.45
tcp6 10000 ( 0.05%) 6617888 ( 0.05%) 661.79
http(s) 2956 ( 0.02%) 2987609 ( 0.02%) 1010.69
http(c) 2686 ( 0.01%) 470599 ( 0.00%) 175.20
smtp 691 ( 0.00%) 316548 ( 0.00%) 458.10
ssh 22 ( 0.00%) 2528 ( 0.00%) 114.91
bgp 388 ( 0.00%) 34363 ( 0.00%) 88.56
other 3257 ( 0.02%) 2806241 ( 0.02%) 861.60
udp6 18858 ( 0.10%) 3152602 ( 0.03%) 167.18
dns 18812 ( 0.10%) 3148298 ( 0.03%) 167.36
other 46 ( 0.00%) 4304 ( 0.00%) 93.57
icmp6 8010 ( 0.04%) 1050106 ( 0.01%) 131.10
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 4105 ( 0.00%) 1026.25
tcpdump file: 200903121400.dump.gz (468.86 MB)