Traffic Trace Info
DumpFile: 200903141400.dump
FileSize: 1247.55MB
Id: 200903141400
StartTime: Sat Mar 14 14:00:01 2009
EndTime: Sat Mar 14 14:15:01 2009
TotalTime: 900.11 seconds
TotalCapSize: 974.88MB CapLen: 96 bytes
# of packets: 17868597 (11506.08MB)
AvgRate: 107.25Mbps stddev:15.16M
IP flow (unique src/dst pair) Information
# of flows: 573187 (avg. 31.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.9% 5.9% 4.3% 1.6% 1.3% 1.2% 1.2% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 381647
Top 10 bandwidth usage (bytes/total in %):
13.3% 9.9% 9.9% 9.3% 6.0% 6.0% 5.9% 4.7% 4.3% 2.8%
# of IPv6 addresses: 1014
Top 10 bandwidth usage (bytes/total in %):
42.4% 30.2% 10.0% 9.3% 6.5% 5.4% 5.4% 4.4% 4.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903141400.pktlen.png)
detailed numbers
[ 32- 63]: 3777359
[ 64- 127]: 4648558
[ 128- 255]: 714734
[ 256- 511]: 452056
[ 512- 1023]: 652312
[ 1024- 2047]: 7623578
Protocol Breakdown
![[protocol breakdown chart]](200903141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17868597 (100.00%) 12064999854 (100.00%) 675.21
ip 17834090 ( 99.81%) 12057995134 ( 99.94%) 676.12
tcp 12790871 ( 71.58%) 10101503529 ( 83.73%) 789.74
http(s) 4774198 ( 26.72%) 6364442999 ( 52.75%) 1333.09
http(c) 3254132 ( 18.21%) 265136327 ( 2.20%) 81.48
squid 583094 ( 3.26%) 268260424 ( 2.22%) 460.06
smtp 174592 ( 0.98%) 28204522 ( 0.23%) 161.55
nntp 8698 ( 0.05%) 521880 ( 0.00%) 60.00
ftp 98434 ( 0.55%) 8039865 ( 0.07%) 81.68
pop3 5007 ( 0.03%) 3310570 ( 0.03%) 661.19
imap 2879 ( 0.02%) 1358734 ( 0.01%) 471.95
telnet 555 ( 0.00%) 38134 ( 0.00%) 68.71
ssh 1136703 ( 6.36%) 1195195389 ( 9.91%) 1051.46
dns 5303 ( 0.03%) 502292 ( 0.00%) 94.72
bgp 138 ( 0.00%) 35902 ( 0.00%) 260.16
napster 226 ( 0.00%) 47359 ( 0.00%) 209.55
realaud 31 ( 0.00%) 4261 ( 0.00%) 137.45
rtsp 169689 ( 0.95%) 120965703 ( 1.00%) 712.87
icecast 575 ( 0.00%) 95897 ( 0.00%) 166.78
hotline 16 ( 0.00%) 2495 ( 0.00%) 155.94
other 2576600 ( 14.42%) 1845340716 ( 15.29%) 716.19
udp 3484754 ( 19.50%) 1803572823 ( 14.95%) 517.56
dns 1005047 ( 5.62%) 205316708 ( 1.70%) 204.29
realaud 615 ( 0.00%) 41296 ( 0.00%) 67.15
halflif 38 ( 0.00%) 3855 ( 0.00%) 101.45
starcra 24 ( 0.00%) 3752 ( 0.00%) 156.33
everque 62 ( 0.00%) 11950 ( 0.00%) 192.74
unreal 115 ( 0.00%) 65193 ( 0.00%) 566.90
quake 18 ( 0.00%) 1908 ( 0.00%) 106.00
cuseeme 6 ( 0.00%) 749 ( 0.00%) 124.83
other 2478662 ( 13.87%) 1598033420 ( 13.25%) 644.72
icmp 1514156 ( 8.47%) 113320387 ( 0.94%) 74.84
ipip 323 ( 0.00%) 39358 ( 0.00%) 121.85
ip6 37247 ( 0.21%) 38603763 ( 0.32%) 1036.43
other 6739 ( 0.04%) 955274 ( 0.01%) 141.75
frag 43857 ( 0.25%) 37925692 ( 0.31%) 864.76
ip6 34507 ( 0.19%) 7004720 ( 0.06%) 202.99
tcp6 14686 ( 0.08%) 4164219 ( 0.03%) 283.55
http(s) 3655 ( 0.02%) 2428980 ( 0.02%) 664.56
http(c) 4981 ( 0.03%) 1088197 ( 0.01%) 218.47
smtp 370 ( 0.00%) 115902 ( 0.00%) 313.25
ftp 2066 ( 0.01%) 199531 ( 0.00%) 96.58
pop3 11 ( 0.00%) 1018 ( 0.00%) 92.55
ssh 24 ( 0.00%) 2768 ( 0.00%) 115.33
dns 14 ( 0.00%) 1354 ( 0.00%) 96.71
bgp 387 ( 0.00%) 35902 ( 0.00%) 92.77
other 3178 ( 0.02%) 290567 ( 0.00%) 91.43
udp6 13701 ( 0.08%) 2072680 ( 0.02%) 151.28
dns 13665 ( 0.08%) 2068722 ( 0.02%) 151.39
halflif 1 ( 0.00%) 112 ( 0.00%) 112.00
everque 1 ( 0.00%) 103 ( 0.00%) 103.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 33 ( 0.00%) 3630 ( 0.00%) 110.00
icmp6 6087 ( 0.03%) 761704 ( 0.01%) 125.14
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2 ( 0.00%) 1901 ( 0.00%) 950.50
tcpdump file: 200903141400.dump.gz (408.43 MB)