Traffic Trace Info
DumpFile: 200903171400.dump
FileSize: 1224.59MB
Id: 200903171400
StartTime: Tue Mar 17 14:00:01 2009
EndTime: Tue Mar 17 14:15:00 2009
TotalTime: 899.44 seconds
TotalCapSize: 957.17MB CapLen: 96 bytes
# of packets: 17524964 (11616.14MB)
AvgRate: 108.34Mbps stddev:12.89M
IP flow (unique src/dst pair) Information
# of flows: 623195 (avg. 28.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.6% 3.6% 2.2% 1.6% 1.6% 1.5% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 412429
Top 10 bandwidth usage (bytes/total in %):
10.0% 7.2% 4.4% 4.4% 4.4% 3.6% 3.6% 3.6% 3.6% 3.4%
# of IPv6 addresses: 1096
Top 10 bandwidth usage (bytes/total in %):
29.8% 27.4% 26.2% 20.4% 17.6% 13.0% 7.5% 6.8% 4.5% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903171400.pktlen.png)
detailed numbers
[ 32- 63]: 3569513
[ 64- 127]: 4752286
[ 128- 255]: 583522
[ 256- 511]: 492812
[ 512- 1023]: 561947
[ 1024- 2047]: 7564884
Protocol Breakdown
![[protocol breakdown chart]](200903171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17524964 (100.00%) 12180405843 (100.00%) 695.03
ip 17453906 ( 99.59%) 12163989256 ( 99.87%) 696.92
tcp 13280419 ( 75.78%) 10827633632 ( 88.89%) 815.31
http(s) 5757284 ( 32.85%) 7780921485 ( 63.88%) 1351.49
http(c) 3464237 ( 19.77%) 671026709 ( 5.51%) 193.70
squid 455235 ( 2.60%) 223839230 ( 1.84%) 491.70
smtp 229970 ( 1.31%) 82611792 ( 0.68%) 359.23
nntp 10808 ( 0.06%) 652984 ( 0.01%) 60.42
ftp 168086 ( 0.96%) 63765519 ( 0.52%) 379.36
pop3 8267 ( 0.05%) 2493357 ( 0.02%) 301.60
imap 5440 ( 0.03%) 949739 ( 0.01%) 174.58
telnet 2370 ( 0.01%) 342696 ( 0.00%) 144.60
ssh 30538 ( 0.17%) 4707742 ( 0.04%) 154.16
dns 2144 ( 0.01%) 150700 ( 0.00%) 70.29
bgp 557 ( 0.00%) 356350 ( 0.00%) 639.77
napster 15 ( 0.00%) 2518 ( 0.00%) 167.87
realaud 8 ( 0.00%) 488 ( 0.00%) 61.00
rtsp 142951 ( 0.82%) 138353653 ( 1.14%) 967.84
icecast 383 ( 0.00%) 36152 ( 0.00%) 94.39
hotline 5 ( 0.00%) 588 ( 0.00%) 117.60
other 3002119 ( 17.13%) 1857421810 ( 15.25%) 618.70
udp 3269742 ( 18.66%) 1112203557 ( 9.13%) 340.15
dns 882183 ( 5.03%) 209428184 ( 1.72%) 237.40
realaud 13837 ( 0.08%) 9149671 ( 0.08%) 661.25
halflif 27 ( 0.00%) 3899 ( 0.00%) 144.41
starcra 49 ( 0.00%) 8532 ( 0.00%) 174.12
everque 363 ( 0.00%) 271679 ( 0.00%) 748.43
unreal 547 ( 0.00%) 331580 ( 0.00%) 606.18
quake 9 ( 0.00%) 778 ( 0.00%) 86.44
cuseeme 9 ( 0.00%) 980 ( 0.00%) 108.89
other 2372276 ( 13.54%) 892925062 ( 7.33%) 376.40
icmp 644006 ( 3.67%) 57623617 ( 0.47%) 89.48
ipip 303 ( 0.00%) 37961 ( 0.00%) 125.28
ip6 214647 ( 1.22%) 154769349 ( 1.27%) 721.04
other 44789 ( 0.26%) 11721140 ( 0.10%) 261.70
frag 25347 ( 0.14%) 20165566 ( 0.17%) 795.58
ip6 71058 ( 0.41%) 16416587 ( 0.13%) 231.03
tcp6 46799 ( 0.27%) 12794651 ( 0.11%) 273.40
http(s) 5429 ( 0.03%) 3327136 ( 0.03%) 612.85
http(c) 36732 ( 0.21%) 5836407 ( 0.05%) 158.89
smtp 320 ( 0.00%) 82602 ( 0.00%) 258.13
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 6 ( 0.00%) 868 ( 0.00%) 144.67
bgp 395 ( 0.00%) 35857 ( 0.00%) 90.78
other 3915 ( 0.02%) 3511556 ( 0.03%) 896.95
udp6 16840 ( 0.10%) 2667048 ( 0.02%) 158.38
dns 16822 ( 0.10%) 2665068 ( 0.02%) 158.43
other 18 ( 0.00%) 1980 ( 0.00%) 110.00
icmp6 7387 ( 0.04%) 949266 ( 0.01%) 128.50
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1542 ( 0.00%) 771.00
tcpdump file: 200903171400.dump.gz (421.97 MB)