Traffic Trace Info
DumpFile: 200903131400.dump
FileSize: 1069.81MB
Id: 200903131400
StartTime: Fri Mar 13 14:00:00 2009
EndTime: Fri Mar 13 14:15:00 2009
TotalTime: 899.93 seconds
TotalCapSize: 833.51MB CapLen: 96 bytes
# of packets: 15485413 (10635.77MB)
AvgRate: 99.14Mbps stddev:13.17M
IP flow (unique src/dst pair) Information
# of flows: 579374 (avg. 26.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 2.9% 2.8% 2.3% 1.8% 1.6% 1.5% 1.4% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 365486
Top 10 bandwidth usage (bytes/total in %):
13.5% 7.7% 7.1% 5.1% 4.9% 4.6% 3.9% 3.5% 2.9% 2.8%
# of IPv6 addresses: 1094
Top 10 bandwidth usage (bytes/total in %):
27.4% 16.6% 13.7% 13.7% 10.3% 10.3% 8.4% 7.2% 4.8% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903131400.pktlen.png)
detailed numbers
[ 32- 63]: 3919000
[ 64- 127]: 3101101
[ 128- 255]: 633808
[ 256- 511]: 418537
[ 512- 1023]: 424006
[ 1024- 2047]: 6988961
Protocol Breakdown
![[protocol breakdown chart]](200903131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15485413 (100.00%) 11152416200 (100.00%) 720.19
ip 15447866 ( 99.76%) 11143124930 ( 99.92%) 721.34
tcp 12872291 ( 83.13%) 10069731266 ( 90.29%) 782.28
http(s) 5140923 ( 33.20%) 7000580707 ( 62.77%) 1361.74
http(c) 3469882 ( 22.41%) 343668324 ( 3.08%) 99.04
squid 579674 ( 3.74%) 304068883 ( 2.73%) 524.55
smtp 201021 ( 1.30%) 62795933 ( 0.56%) 312.38
nntp 8907 ( 0.06%) 536372 ( 0.00%) 60.22
ftp 102260 ( 0.66%) 8394363 ( 0.08%) 82.09
pop3 7773 ( 0.05%) 3966637 ( 0.04%) 510.31
imap 8714 ( 0.06%) 7807687 ( 0.07%) 895.99
telnet 263 ( 0.00%) 21311 ( 0.00%) 81.03
ssh 13213 ( 0.09%) 1687143 ( 0.02%) 127.69
dns 5970 ( 0.04%) 560683 ( 0.01%) 93.92
bgp 136 ( 0.00%) 44896 ( 0.00%) 330.12
napster 774 ( 0.00%) 455284 ( 0.00%) 588.22
realaud 43 ( 0.00%) 4019 ( 0.00%) 93.47
rtsp 126184 ( 0.81%) 117277594 ( 1.05%) 929.42
icecast 24454 ( 0.16%) 9593782 ( 0.09%) 392.32
hotline 57 ( 0.00%) 47556 ( 0.00%) 834.32
other 3182042 ( 20.55%) 2208220032 ( 19.80%) 693.96
udp 2134225 ( 13.78%) 1029542054 ( 9.23%) 482.40
dns 795797 ( 5.14%) 180625134 ( 1.62%) 226.97
realaud 922 ( 0.01%) 55540 ( 0.00%) 60.24
halflif 22 ( 0.00%) 1866 ( 0.00%) 84.82
starcra 24 ( 0.00%) 3865 ( 0.00%) 161.04
everque 51 ( 0.00%) 10942 ( 0.00%) 214.55
unreal 33 ( 0.00%) 11806 ( 0.00%) 357.76
quake 16 ( 0.00%) 1424 ( 0.00%) 89.00
cuseeme 10 ( 0.00%) 1774 ( 0.00%) 177.40
other 1337260 ( 8.64%) 848805935 ( 7.61%) 634.74
icmp 372950 ( 2.41%) 34118254 ( 0.31%) 91.48
ipip 318 ( 0.00%) 37860 ( 0.00%) 119.06
ipsec 80 ( 0.00%) 12640 ( 0.00%) 158.00
ip6 20660 ( 0.13%) 2859619 ( 0.03%) 138.41
other 47342 ( 0.31%) 6823237 ( 0.06%) 144.13
frag 93632 ( 0.60%) 77352192 ( 0.69%) 826.13
ip6 37547 ( 0.24%) 9291270 ( 0.08%) 247.46
tcp6 11374 ( 0.07%) 5338292 ( 0.05%) 469.34
http(s) 3928 ( 0.03%) 3043196 ( 0.03%) 774.74
http(c) 4500 ( 0.03%) 941157 ( 0.01%) 209.15
smtp 725 ( 0.00%) 259919 ( 0.00%) 358.51
imap 844 ( 0.01%) 954746 ( 0.01%) 1131.22
ssh 27 ( 0.00%) 4562 ( 0.00%) 168.96
dns 9 ( 0.00%) 786 ( 0.00%) 87.33
bgp 387 ( 0.00%) 34328 ( 0.00%) 88.70
other 954 ( 0.01%) 99598 ( 0.00%) 104.40
udp6 19100 ( 0.12%) 2998823 ( 0.03%) 157.01
dns 19085 ( 0.12%) 2997173 ( 0.03%) 157.04
other 15 ( 0.00%) 1650 ( 0.00%) 110.00
icmp6 7037 ( 0.05%) 943912 ( 0.01%) 134.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 6163 ( 0.00%) 1027.17
tcpdump file: 200903131400.dump.gz (375.61 MB)