Traffic Trace Info
DumpFile: 200903211400.dump
FileSize: 1078.22MB
Id: 200903211400
StartTime: Sat Mar 21 14:00:00 2009
EndTime: Sat Mar 21 14:15:00 2009
TotalTime: 900.04 seconds
TotalCapSize: 835.68MB CapLen: 96 bytes
# of packets: 15894324 (10583.01MB)
AvgRate: 98.65Mbps stddev:13.19M
IP flow (unique src/dst pair) Information
# of flows: 742412 (avg. 21.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.6% 2.0% 1.8% 1.5% 1.3% 1.3% 1.3% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 485944
Top 10 bandwidth usage (bytes/total in %):
11.3% 7.7% 7.7% 6.0% 4.1% 3.7% 3.5% 3.0% 2.8% 2.7%
# of IPv6 addresses: 923
Top 10 bandwidth usage (bytes/total in %):
31.8% 20.2% 11.6% 10.6% 7.3% 7.3% 5.5% 5.1% 4.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903211400.pktlen.png)
detailed numbers
[ 32- 63]: 3599253
[ 64- 127]: 3342223
[ 128- 255]: 858790
[ 256- 511]: 489141
[ 512- 1023]: 340004
[ 1024- 2047]: 7264913
Protocol Breakdown
![[protocol breakdown chart]](200903211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15894324 (100.00%) 11097087856 (100.00%) 698.18
ip 15865981 ( 99.82%) 11092024854 ( 99.95%) 699.11
tcp 11269501 ( 70.90%) 8656610135 ( 78.01%) 768.14
http(s) 4835828 ( 30.42%) 6559658232 ( 59.11%) 1356.47
http(c) 2879956 ( 18.12%) 241110527 ( 2.17%) 83.72
squid 477110 ( 3.00%) 178481167 ( 1.61%) 374.09
smtp 156986 ( 0.99%) 36374618 ( 0.33%) 231.71
nntp 9086 ( 0.06%) 550972 ( 0.00%) 60.64
ftp 250075 ( 1.57%) 326087814 ( 2.94%) 1303.96
pop3 4778 ( 0.03%) 2986972 ( 0.03%) 625.15
imap 2726 ( 0.02%) 600755 ( 0.01%) 220.38
telnet 1001 ( 0.01%) 84194 ( 0.00%) 84.11
ssh 50403 ( 0.32%) 12707099 ( 0.11%) 252.11
dns 1496 ( 0.01%) 112559 ( 0.00%) 75.24
bgp 135 ( 0.00%) 40065 ( 0.00%) 296.78
napster 47 ( 0.00%) 5060 ( 0.00%) 107.66
realaud 53 ( 0.00%) 6270 ( 0.00%) 118.30
rtsp 192440 ( 1.21%) 61506828 ( 0.55%) 319.62
icecast 332 ( 0.00%) 29662 ( 0.00%) 89.34
hotline 14 ( 0.00%) 5000 ( 0.00%) 357.14
other 2407034 ( 15.14%) 1236262281 ( 11.14%) 513.60
udp 3892215 ( 24.49%) 2372355687 ( 21.38%) 609.51
dns 1058075 ( 6.66%) 188154045 ( 1.70%) 177.83
realaud 18 ( 0.00%) 1766 ( 0.00%) 98.11
halflif 25 ( 0.00%) 3141 ( 0.00%) 125.64
starcra 58 ( 0.00%) 9457 ( 0.00%) 163.05
everque 55 ( 0.00%) 11339 ( 0.00%) 206.16
unreal 1706 ( 0.01%) 1408566 ( 0.01%) 825.65
quake 13 ( 0.00%) 1782 ( 0.00%) 137.08
cuseeme 7 ( 0.00%) 940 ( 0.00%) 134.29
other 2832227 ( 17.82%) 2182743941 ( 19.67%) 770.68
icmp 665226 ( 4.19%) 54625844 ( 0.49%) 82.12
ipip 317 ( 0.00%) 41100 ( 0.00%) 129.65
ipsec 36 ( 0.00%) 5688 ( 0.00%) 158.00
ip6 24539 ( 0.15%) 3876982 ( 0.03%) 157.99
other 14147 ( 0.09%) 4509418 ( 0.04%) 318.75
frag 1049 ( 0.01%) 959814 ( 0.01%) 914.98
ip6 28343 ( 0.18%) 5063002 ( 0.05%) 178.63
tcp6 10601 ( 0.07%) 2423625 ( 0.02%) 228.62
http(s) 1779 ( 0.01%) 1103061 ( 0.01%) 620.05
http(c) 3643 ( 0.02%) 766279 ( 0.01%) 210.34
smtp 159 ( 0.00%) 59402 ( 0.00%) 373.60
ftp 2020 ( 0.01%) 196034 ( 0.00%) 97.05
ssh 5 ( 0.00%) 766 ( 0.00%) 153.20
dns 5 ( 0.00%) 2213 ( 0.00%) 442.60
bgp 394 ( 0.00%) 35054 ( 0.00%) 88.97
napster 4 ( 0.00%) 356 ( 0.00%) 89.00
other 2592 ( 0.02%) 260460 ( 0.00%) 100.49
udp6 13104 ( 0.08%) 2040868 ( 0.02%) 155.74
dns 13052 ( 0.08%) 2035148 ( 0.02%) 155.93
other 52 ( 0.00%) 5720 ( 0.00%) 110.00
icmp6 4604 ( 0.03%) 591978 ( 0.01%) 128.58
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3 ( 0.00%) 2315 ( 0.00%) 771.67
tcpdump file: 200903211400.dump.gz (364.06 MB)