Traffic Trace Info
DumpFile: 200903241400.dump
FileSize: 1222.16MB
Id: 200903241400
StartTime: Tue Mar 24 14:00:01 2009
EndTime: Tue Mar 24 14:15:00 2009
TotalTime: 899.56 seconds
TotalCapSize: 950.27MB CapLen: 96 bytes
# of packets: 17818073 (11906.60MB)
AvgRate: 111.05Mbps stddev:15.75M
IP flow (unique src/dst pair) Information
# of flows: 636531 (avg. 27.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.6% 2.9% 2.7% 2.3% 1.8% 1.6% 1.4% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 424890
Top 10 bandwidth usage (bytes/total in %):
12.1% 11.4% 9.6% 9.6% 4.7% 4.1% 3.7% 3.0% 3.0% 2.8%
# of IPv6 addresses: 2576
Top 10 bandwidth usage (bytes/total in %):
32.5% 24.5% 19.3% 15.8% 13.8% 7.9% 6.2% 6.0% 4.7% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903241400.pktlen.png)
detailed numbers
[ 32- 63]: 4129037
[ 64- 127]: 3871019
[ 128- 255]: 790285
[ 256- 511]: 691263
[ 512- 1023]: 548393
[ 1024- 2047]: 7788076
Protocol Breakdown
![[protocol breakdown chart]](200903241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17818073 (100.00%) 12484971434 (100.00%) 700.69
ip 17733969 ( 99.53%) 12469190279 ( 99.87%) 703.12
tcp 13770992 ( 77.29%) 11127453501 ( 89.13%) 808.04
http(s) 5641485 ( 31.66%) 7500728781 ( 60.08%) 1329.57
http(c) 3598852 ( 20.20%) 620503819 ( 4.97%) 172.42
squid 564240 ( 3.17%) 275640095 ( 2.21%) 488.52
smtp 300127 ( 1.68%) 81569569 ( 0.65%) 271.78
ftp 168375 ( 0.94%) 163353826 ( 1.31%) 970.18
pop3 8549 ( 0.05%) 4814391 ( 0.04%) 563.15
imap 7484 ( 0.04%) 1498806 ( 0.01%) 200.27
telnet 2057 ( 0.01%) 319120 ( 0.00%) 155.14
ssh 1136789 ( 6.38%) 1361005439 ( 10.90%) 1197.24
dns 2025 ( 0.01%) 152434 ( 0.00%) 75.28
bgp 162 ( 0.00%) 61831 ( 0.00%) 381.67
napster 48 ( 0.00%) 3496 ( 0.00%) 72.83
realaud 105 ( 0.00%) 13577 ( 0.00%) 129.30
rtsp 43243 ( 0.24%) 17338351 ( 0.14%) 400.95
icecast 16675 ( 0.09%) 15339339 ( 0.12%) 919.90
hotline 5 ( 0.00%) 610 ( 0.00%) 122.00
other 2280766 ( 12.80%) 1085109717 ( 8.69%) 475.77
udp 3494412 ( 19.61%) 1294290349 ( 10.37%) 370.39
dns 1080122 ( 6.06%) 220190457 ( 1.76%) 203.86
realaud 6433 ( 0.04%) 2895048 ( 0.02%) 450.03
halflif 10261 ( 0.06%) 1444988 ( 0.01%) 140.82
starcra 71 ( 0.00%) 8630 ( 0.00%) 121.55
everque 138 ( 0.00%) 31178 ( 0.00%) 225.93
unreal 365 ( 0.00%) 257561 ( 0.00%) 705.65
quake 15 ( 0.00%) 1403 ( 0.00%) 93.53
cuseeme 7 ( 0.00%) 627 ( 0.00%) 89.57
other 2396953 ( 13.45%) 1069432214 ( 8.57%) 446.16
icmp 433706 ( 2.43%) 41168610 ( 0.33%) 94.92
ipip 310 ( 0.00%) 38378 ( 0.00%) 123.80
ipsec 36 ( 0.00%) 5688 ( 0.00%) 158.00
ip6 28274 ( 0.16%) 5394553 ( 0.04%) 190.80
other 6239 ( 0.04%) 839200 ( 0.01%) 134.51
frag 1103 ( 0.01%) 959593 ( 0.01%) 869.98
ip6 84104 ( 0.47%) 15781155 ( 0.13%) 187.64
tcp6 58055 ( 0.33%) 10679049 ( 0.09%) 183.95
http(s) 3533 ( 0.02%) 2463058 ( 0.02%) 697.16
http(c) 50718 ( 0.28%) 5047023 ( 0.04%) 99.51
smtp 612 ( 0.00%) 504714 ( 0.00%) 824.70
ssh 7 ( 0.00%) 938 ( 0.00%) 134.00
bgp 378 ( 0.00%) 32917 ( 0.00%) 87.08
other 2807 ( 0.02%) 2630399 ( 0.02%) 937.09
udp6 19990 ( 0.11%) 3458468 ( 0.03%) 173.01
dns 17026 ( 0.10%) 2859654 ( 0.02%) 167.96
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2963 ( 0.02%) 598708 ( 0.00%) 202.06
icmp6 4950 ( 0.03%) 619553 ( 0.00%) 125.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1079 ( 0.01%) 1020005 ( 0.01%) 945.32
tcpdump file: 200903241400.dump.gz (423.60 MB)