Traffic Trace Info
DumpFile: 200903151400.dump
FileSize: 964.11MB
Id: 200903151400
StartTime: Sun Mar 15 14:00:00 2009
EndTime: Sun Mar 15 14:15:01 2009
TotalTime: 900.86 seconds
TotalCapSize: 752.55MB CapLen: 96 bytes
# of packets: 13864260 (8581.84MB)
AvgRate: 79.91Mbps stddev:10.18M
IP flow (unique src/dst pair) Information
# of flows: 696507 (avg. 19.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.4% 4.1% 3.7% 2.3% 1.6% 1.1% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 447002
Top 10 bandwidth usage (bytes/total in %):
32.0% 18.8% 5.9% 5.2% 4.5% 4.2% 3.8% 3.7% 2.9% 2.3%
# of IPv6 addresses: 1003
Top 10 bandwidth usage (bytes/total in %):
35.6% 32.9% 22.1% 20.5% 14.8% 14.8% 13.0% 7.5% 4.9% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903151400.pktlen.png)
detailed numbers
[ 32- 63]: 3545468
[ 64- 127]: 3591102
[ 128- 255]: 538501
[ 256- 511]: 359096
[ 512- 1023]: 221149
[ 1024- 2047]: 5608944
Protocol Breakdown
![[protocol breakdown chart]](200903151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13864260 (100.00%) 8998716024 (100.00%) 649.06
ip 13770316 ( 99.32%) 8982242186 ( 99.82%) 652.29
tcp 11229456 ( 81.00%) 8186624405 ( 90.98%) 729.03
http(s) 3366914 ( 24.28%) 4572854437 ( 50.82%) 1358.17
http(c) 2352646 ( 16.97%) 188302119 ( 2.09%) 80.04
squid 474039 ( 3.42%) 188449109 ( 2.09%) 397.54
smtp 144003 ( 1.04%) 17254162 ( 0.19%) 119.82
nntp 8597 ( 0.06%) 515820 ( 0.01%) 60.00
ftp 65606 ( 0.47%) 5270414 ( 0.06%) 80.33
pop3 6449 ( 0.05%) 3541720 ( 0.04%) 549.19
imap 2053 ( 0.01%) 1033666 ( 0.01%) 503.49
telnet 3215 ( 0.02%) 197528 ( 0.00%) 61.44
ssh 617971 ( 4.46%) 69885026 ( 0.78%) 113.09
dns 863 ( 0.01%) 73633 ( 0.00%) 85.32
bgp 130 ( 0.00%) 40288 ( 0.00%) 309.91
napster 13 ( 0.00%) 1716 ( 0.00%) 132.00
realaud 6 ( 0.00%) 372 ( 0.00%) 62.00
rtsp 51 ( 0.00%) 5305 ( 0.00%) 104.02
icecast 17620 ( 0.13%) 22752032 ( 0.25%) 1291.26
other 4169279 ( 30.07%) 3116446998 ( 34.63%) 747.48
udp 1865041 ( 13.45%) 738981996 ( 8.21%) 396.23
dns 593085 ( 4.28%) 136463885 ( 1.52%) 230.09
realaud 125 ( 0.00%) 8740 ( 0.00%) 69.92
halflif 25 ( 0.00%) 3136 ( 0.00%) 125.44
starcra 23 ( 0.00%) 4125 ( 0.00%) 179.35
everque 9210 ( 0.07%) 8157116 ( 0.09%) 885.68
unreal 84 ( 0.00%) 48849 ( 0.00%) 581.54
quake 14 ( 0.00%) 1995 ( 0.00%) 142.50
cuseeme 2 ( 0.00%) 559 ( 0.00%) 279.50
other 1262419 ( 9.11%) 594255819 ( 6.60%) 470.73
icmp 658385 ( 4.75%) 53238484 ( 0.59%) 80.86
ipip 310 ( 0.00%) 37950 ( 0.00%) 122.42
ip6 7599 ( 0.05%) 1924524 ( 0.02%) 253.26
other 9525 ( 0.07%) 1434827 ( 0.02%) 150.64
frag 1092 ( 0.01%) 985172 ( 0.01%) 902.17
ip6 93944 ( 0.68%) 16473838 ( 0.18%) 175.36
tcp6 76113 ( 0.55%) 13967052 ( 0.16%) 183.50
http(s) 4363 ( 0.03%) 2517604 ( 0.03%) 577.04
http(c) 68362 ( 0.49%) 8845171 ( 0.10%) 129.39
smtp 187 ( 0.00%) 22851 ( 0.00%) 122.20
ssh 21 ( 0.00%) 2446 ( 0.00%) 116.48
bgp 379 ( 0.00%) 33060 ( 0.00%) 87.23
other 2801 ( 0.02%) 2545920 ( 0.03%) 908.93
udp6 11608 ( 0.08%) 1707174 ( 0.02%) 147.07
dns 11591 ( 0.08%) 1705304 ( 0.02%) 147.12
other 17 ( 0.00%) 1870 ( 0.00%) 110.00
icmp6 6192 ( 0.04%) 795396 ( 0.01%) 128.46
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200903151400.dump.gz (328.39 MB)