Traffic Trace Info
DumpFile: 200903191400.dump
FileSize: 1093.20MB
Id: 200903191400
StartTime: Thu Mar 19 14:00:00 2009
EndTime: Thu Mar 19 14:15:00 2009
TotalTime: 899.54 seconds
TotalCapSize: 852.52MB CapLen: 96 bytes
# of packets: 15772512 (9722.35MB)
AvgRate: 90.66Mbps stddev:13.57M
IP flow (unique src/dst pair) Information
# of flows: 579018 (avg. 27.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.4% 1.4% 1.4% 1.3% 1.3% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 404818
Top 10 bandwidth usage (bytes/total in %):
8.0% 7.5% 7.4% 7.2% 4.0% 3.3% 2.4% 2.2% 2.0% 1.8%
# of IPv6 addresses: 1008
Top 10 bandwidth usage (bytes/total in %):
60.4% 60.3% 18.3% 17.2% 8.0% 5.4% 2.6% 2.4% 2.0% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903191400.pktlen.png)
detailed numbers
[ 32- 63]: 3989412
[ 64- 127]: 3520653
[ 128- 255]: 802031
[ 256- 511]: 668591
[ 512- 1023]: 626791
[ 1024- 2047]: 6165034
Protocol Breakdown
![[protocol breakdown chart]](200903191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15772512 (100.00%) 10194622842 (100.00%) 646.35
ip 15702224 ( 99.55%) 10168626699 ( 99.75%) 647.59
tcp 11997211 ( 76.06%) 8723219982 ( 85.57%) 727.10
http(s) 4815756 ( 30.53%) 6352237163 ( 62.31%) 1319.05
http(c) 3583814 ( 22.72%) 453754995 ( 4.45%) 126.61
squid 490402 ( 3.11%) 214895718 ( 2.11%) 438.20
smtp 251948 ( 1.60%) 120842189 ( 1.19%) 479.63
nntp 9803 ( 0.06%) 606955 ( 0.01%) 61.92
ftp 241533 ( 1.53%) 210407972 ( 2.06%) 871.14
pop3 9931 ( 0.06%) 8308417 ( 0.08%) 836.61
imap 5273 ( 0.03%) 1493108 ( 0.01%) 283.16
telnet 2709 ( 0.02%) 319461 ( 0.00%) 117.93
ssh 12663 ( 0.08%) 1800553 ( 0.02%) 142.19
dns 5785 ( 0.04%) 378429 ( 0.00%) 65.42
bgp 148 ( 0.00%) 56543 ( 0.00%) 382.05
napster 33 ( 0.00%) 2787 ( 0.00%) 84.45
realaud 18 ( 0.00%) 1698 ( 0.00%) 94.33
rtsp 177100 ( 1.12%) 100925384 ( 0.99%) 569.88
icecast 667 ( 0.00%) 49279 ( 0.00%) 73.88
hotline 4 ( 0.00%) 278 ( 0.00%) 69.50
other 2389620 ( 15.15%) 1257138813 ( 12.33%) 526.08
udp 2728777 ( 17.30%) 1222285192 ( 11.99%) 447.92
dns 982280 ( 6.23%) 211638045 ( 2.08%) 215.46
realaud 4648 ( 0.03%) 319802 ( 0.00%) 68.80
halflif 17 ( 0.00%) 1599 ( 0.00%) 94.06
starcra 20 ( 0.00%) 3739 ( 0.00%) 186.95
everque 44 ( 0.00%) 9535 ( 0.00%) 216.70
unreal 97 ( 0.00%) 55214 ( 0.00%) 569.22
quake 524 ( 0.00%) 78562 ( 0.00%) 149.93
cuseeme 8 ( 0.00%) 932 ( 0.00%) 116.50
other 1741086 ( 11.04%) 1010137050 ( 9.91%) 580.18
icmp 618773 ( 3.92%) 53464392 ( 0.52%) 86.40
ipip 327 ( 0.00%) 39722 ( 0.00%) 121.47
ipsec 12 ( 0.00%) 1896 ( 0.00%) 158.00
ip6 203328 ( 1.29%) 126991002 ( 1.25%) 624.56
other 153796 ( 0.98%) 42624513 ( 0.42%) 277.15
frag 998 ( 0.01%) 853517 ( 0.01%) 855.23
ip6 70288 ( 0.45%) 25996143 ( 0.25%) 369.85
tcp6 49850 ( 0.32%) 22766062 ( 0.22%) 456.69
http(s) 2343 ( 0.01%) 1423986 ( 0.01%) 607.76
http(c) 35270 ( 0.22%) 5304557 ( 0.05%) 150.40
smtp 489 ( 0.00%) 219854 ( 0.00%) 449.60
ssh 38 ( 0.00%) 11188 ( 0.00%) 294.42
bgp 389 ( 0.00%) 34331 ( 0.00%) 88.25
other 11321 ( 0.07%) 15772146 ( 0.15%) 1393.18
udp6 15954 ( 0.10%) 2624993 ( 0.03%) 164.54
dns 15936 ( 0.10%) 2623036 ( 0.03%) 164.60
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 97 ( 0.00%) 97.00
other 15 ( 0.00%) 1650 ( 0.00%) 110.00
icmp6 4448 ( 0.03%) 596092 ( 0.01%) 134.01
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 4916 ( 0.00%) 819.33
tcpdump file: 200903191400.dump.gz (385.11 MB)