Traffic Trace Info
DumpFile: 200903181400.dump
FileSize: 1087.97MB
Id: 200903181400
StartTime: Wed Mar 18 14:00:00 2009
EndTime: Wed Mar 18 14:15:00 2009
TotalTime: 899.69 seconds
TotalCapSize: 851.41MB CapLen: 96 bytes
# of packets: 15502228 (9667.22MB)
AvgRate: 90.14Mbps stddev:13.21M
IP flow (unique src/dst pair) Information
# of flows: 590958 (avg. 26.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 2.8% 1.9% 1.4% 1.3% 1.2% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 377707
Top 10 bandwidth usage (bytes/total in %):
7.7% 6.9% 5.2% 4.8% 4.6% 4.6% 2.8% 2.8% 2.8% 2.5%
# of IPv6 addresses: 985
Top 10 bandwidth usage (bytes/total in %):
38.2% 36.1% 17.2% 12.2% 9.1% 9.1% 8.7% 8.5% 6.5% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903181400.pktlen.png)
detailed numbers
[ 32- 63]: 3525910
[ 64- 127]: 4204755
[ 128- 255]: 693896
[ 256- 511]: 433602
[ 512- 1023]: 426379
[ 1024- 2047]: 6217686
Protocol Breakdown
![[protocol breakdown chart]](200903181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15502228 (100.00%) 10136810127 (100.00%) 653.89
ip 15425744 ( 99.51%) 10124341732 ( 99.88%) 656.33
tcp 12475033 ( 80.47%) 8921896906 ( 88.01%) 715.18
http(s) 5095698 ( 32.87%) 6704355858 ( 66.14%) 1315.69
http(c) 3341791 ( 21.56%) 385498447 ( 3.80%) 115.36
squid 656813 ( 4.24%) 281075068 ( 2.77%) 427.94
smtp 181651 ( 1.17%) 54720349 ( 0.54%) 301.24
nntp 10462 ( 0.07%) 627724 ( 0.01%) 60.00
ftp 81753 ( 0.53%) 47768477 ( 0.47%) 584.30
pop3 6649 ( 0.04%) 2327050 ( 0.02%) 349.98
imap 3038 ( 0.02%) 586573 ( 0.01%) 193.08
telnet 2533 ( 0.02%) 326991 ( 0.00%) 129.09
ssh 545563 ( 3.52%) 86353221 ( 0.85%) 158.28
dns 1244 ( 0.01%) 106828 ( 0.00%) 85.87
bgp 384 ( 0.00%) 234768 ( 0.00%) 611.38
napster 28 ( 0.00%) 4697 ( 0.00%) 167.75
realaud 25 ( 0.00%) 2748 ( 0.00%) 109.92
rtsp 94830 ( 0.61%) 129586348 ( 1.28%) 1366.51
icecast 12772 ( 0.08%) 7943149 ( 0.08%) 621.92
other 2439799 ( 15.74%) 1220378610 ( 12.04%) 500.20
udp 2358768 ( 15.22%) 1137971545 ( 11.23%) 482.44
dns 842946 ( 5.44%) 190574167 ( 1.88%) 226.08
realaud 254 ( 0.00%) 19640 ( 0.00%) 77.32
halflif 14 ( 0.00%) 1547 ( 0.00%) 110.50
starcra 27 ( 0.00%) 4353 ( 0.00%) 161.22
everque 53 ( 0.00%) 10087 ( 0.00%) 190.32
unreal 116 ( 0.00%) 71813 ( 0.00%) 619.08
quake 9 ( 0.00%) 769 ( 0.00%) 85.44
cuseeme 4 ( 0.00%) 382 ( 0.00%) 95.50
other 1515319 ( 9.77%) 947272500 ( 9.34%) 625.13
icmp 478803 ( 3.09%) 43729533 ( 0.43%) 91.33
ipip 305 ( 0.00%) 38702 ( 0.00%) 126.89
ipsec 5180 ( 0.03%) 1395472 ( 0.01%) 269.40
ip6 23692 ( 0.15%) 4427377 ( 0.04%) 186.87
other 83963 ( 0.54%) 14882197 ( 0.15%) 177.25
frag 879 ( 0.01%) 747305 ( 0.01%) 850.18
ip6 76484 ( 0.49%) 12468395 ( 0.12%) 163.02
tcp6 55643 ( 0.36%) 9244437 ( 0.09%) 166.14
http(s) 2344 ( 0.02%) 1517871 ( 0.01%) 647.56
http(c) 47309 ( 0.31%) 6338589 ( 0.06%) 133.98
smtp 303 ( 0.00%) 82093 ( 0.00%) 270.93
ssh 4231 ( 0.03%) 1130886 ( 0.01%) 267.29
dns 12 ( 0.00%) 1368 ( 0.00%) 114.00
bgp 422 ( 0.00%) 53383 ( 0.00%) 126.50
other 1022 ( 0.01%) 120247 ( 0.00%) 117.66
udp6 15731 ( 0.10%) 2500648 ( 0.02%) 158.96
dns 15708 ( 0.10%) 2498126 ( 0.02%) 159.04
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 21 ( 0.00%) 2310 ( 0.00%) 110.00
icmp6 5071 ( 0.03%) 713100 ( 0.01%) 140.62
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 9 ( 0.00%) 6130 ( 0.00%) 681.11
tcpdump file: 200903181400.dump.gz (380.33 MB)