Traffic Trace Info
DumpFile: 200903231400.dump
FileSize: 1099.75MB
Id: 200903231400
StartTime: Mon Mar 23 14:00:00 2009
EndTime: Mon Mar 23 14:15:00 2009
TotalTime: 900.34 seconds
TotalCapSize: 857.92MB CapLen: 96 bytes
# of packets: 15848357 (9655.99MB)
AvgRate: 89.96Mbps stddev:11.01M
IP flow (unique src/dst pair) Information
# of flows: 614260 (avg. 25.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.9% 7.1% 1.8% 1.6% 1.4% 1.3% 1.2% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 405595
Top 10 bandwidth usage (bytes/total in %):
9.3% 8.2% 8.2% 7.3% 7.3% 6.6% 5.1% 4.1% 2.5% 2.5%
# of IPv6 addresses: 2979
Top 10 bandwidth usage (bytes/total in %):
32.3% 32.3% 18.0% 12.3% 6.5% 6.3% 5.7% 4.6% 4.3% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903231400.pktlen.png)
detailed numbers
[ 32- 63]: 3779611
[ 64- 127]: 3947906
[ 128- 255]: 919943
[ 256- 511]: 438729
[ 512- 1023]: 646287
[ 1024- 2047]: 6115881
Protocol Breakdown
![[protocol breakdown chart]](200903231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15848357 (100.00%) 10125043487 (100.00%) 638.87
ip 15804773 ( 99.72%) 10113913232 ( 99.89%) 639.93
tcp 12784149 ( 80.67%) 9211133941 ( 90.97%) 720.51
http(s) 4327416 ( 27.31%) 5521733671 ( 54.54%) 1275.99
http(c) 2991266 ( 18.87%) 459310557 ( 4.54%) 153.55
squid 386781 ( 2.44%) 138978696 ( 1.37%) 359.32
smtp 306515 ( 1.93%) 127444370 ( 1.26%) 415.79
nntp 57 ( 0.00%) 3911 ( 0.00%) 68.61
ftp 135965 ( 0.86%) 97546621 ( 0.96%) 717.44
pop3 8883 ( 0.06%) 4685422 ( 0.05%) 527.46
imap 4870 ( 0.03%) 1830012 ( 0.02%) 375.77
telnet 2376 ( 0.01%) 421593 ( 0.00%) 177.44
ssh 894500 ( 5.64%) 144035986 ( 1.42%) 161.02
dns 10510 ( 0.07%) 11960165 ( 0.12%) 1137.98
bgp 153 ( 0.00%) 51021 ( 0.00%) 333.47
napster 18 ( 0.00%) 2226 ( 0.00%) 123.67
realaud 23 ( 0.00%) 1618 ( 0.00%) 70.35
rtsp 199313 ( 1.26%) 178242290 ( 1.76%) 894.28
icecast 35454 ( 0.22%) 30874868 ( 0.30%) 870.84
other 3480044 ( 21.96%) 2494010614 ( 24.63%) 716.66
udp 2470661 ( 15.59%) 847242336 ( 8.37%) 342.92
dns 1041576 ( 6.57%) 221582927 ( 2.19%) 212.74
realaud 17016 ( 0.11%) 6015088 ( 0.06%) 353.50
halflif 13 ( 0.00%) 1156 ( 0.00%) 88.92
starcra 38 ( 0.00%) 5898 ( 0.00%) 155.21
everque 75 ( 0.00%) 13955 ( 0.00%) 186.07
unreal 1637 ( 0.01%) 1125809 ( 0.01%) 687.73
quake 49 ( 0.00%) 4014 ( 0.00%) 81.92
cuseeme 12 ( 0.00%) 1247 ( 0.00%) 103.92
other 1410177 ( 8.90%) 618441316 ( 6.11%) 438.56
icmp 529338 ( 3.34%) 47970028 ( 0.47%) 90.62
ipip 309 ( 0.00%) 38018 ( 0.00%) 123.04
ip6 16732 ( 0.11%) 7080901 ( 0.07%) 423.20
other 3584 ( 0.02%) 448008 ( 0.00%) 125.00
frag 1169 ( 0.01%) 1040040 ( 0.01%) 889.68
ip6 43584 ( 0.28%) 11130255 ( 0.11%) 255.37
tcp6 17624 ( 0.11%) 6618293 ( 0.07%) 375.53
http(s) 2313 ( 0.01%) 1725278 ( 0.02%) 745.90
http(c) 3922 ( 0.02%) 783269 ( 0.01%) 199.71
smtp 57 ( 0.00%) 14401 ( 0.00%) 252.65
ftp 1975 ( 0.01%) 190758 ( 0.00%) 96.59
ssh 6315 ( 0.04%) 3612102 ( 0.04%) 571.99
bgp 379 ( 0.00%) 32424 ( 0.00%) 85.55
other 2663 ( 0.02%) 260061 ( 0.00%) 97.66
udp6 19879 ( 0.13%) 3255461 ( 0.03%) 163.76
dns 15759 ( 0.10%) 2485002 ( 0.02%) 157.69
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
other 4119 ( 0.03%) 770352 ( 0.01%) 187.02
icmp6 5448 ( 0.03%) 704046 ( 0.01%) 129.23
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 602 ( 0.00%) 548239 ( 0.01%) 910.70
tcpdump file: 200903231400.dump.gz (396.02 MB)