Traffic Trace Info
DumpFile: 200903251400.dump
FileSize: 1097.09MB
Id: 200903251400
StartTime: Wed Mar 25 14:00:00 2009
EndTime: Wed Mar 25 14:15:01 2009
TotalTime: 900.13 seconds
TotalCapSize: 854.88MB CapLen: 96 bytes
# of packets: 15872659 (10099.85MB)
AvgRate: 94.12Mbps stddev:10.25M
IP flow (unique src/dst pair) Information
# of flows: 569695 (avg. 27.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.3% 2.1% 1.9% 1.6% 1.5% 1.3% 1.3% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 367321
Top 10 bandwidth usage (bytes/total in %):
16.0% 15.5% 5.9% 4.0% 3.5% 3.1% 2.6% 2.4% 2.4% 2.2%
# of IPv6 addresses: 1413
Top 10 bandwidth usage (bytes/total in %):
95.3% 95.3% 1.4% 1.0% 0.7% 0.7% 0.7% 0.4% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903251400.pktlen.png)
detailed numbers
[ 32- 63]: 4127306
[ 64- 127]: 3720474
[ 128- 255]: 623027
[ 256- 511]: 449891
[ 512- 1023]: 385700
[ 1024- 2047]: 6566261
Protocol Breakdown
![[protocol breakdown chart]](200903251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15872659 (100.00%) 10590462788 (100.00%) 667.21
ip 15725684 ( 99.07%) 10407946363 ( 98.28%) 661.84
tcp 12465866 ( 78.54%) 9543826892 ( 90.12%) 765.60
http(s) 5051686 ( 31.83%) 6795932053 ( 64.17%) 1345.28
http(c) 3632839 ( 22.89%) 346104605 ( 3.27%) 95.27
squid 588430 ( 3.71%) 298820875 ( 2.82%) 507.83
smtp 251849 ( 1.59%) 85042250 ( 0.80%) 337.67
nntp 70 ( 0.00%) 5657 ( 0.00%) 80.81
ftp 214677 ( 1.35%) 197645466 ( 1.87%) 920.66
pop3 6695 ( 0.04%) 2941465 ( 0.03%) 439.35
imap 9561 ( 0.06%) 8726094 ( 0.08%) 912.68
telnet 2529 ( 0.02%) 361527 ( 0.00%) 142.95
ssh 14450 ( 0.09%) 1830139 ( 0.02%) 126.65
dns 1425 ( 0.01%) 127822 ( 0.00%) 89.70
bgp 225 ( 0.00%) 117272 ( 0.00%) 521.21
napster 87 ( 0.00%) 5498 ( 0.00%) 63.20
realaud 76 ( 0.00%) 5062 ( 0.00%) 66.61
rtsp 85719 ( 0.54%) 53353789 ( 0.50%) 622.43
icecast 9512 ( 0.06%) 592145 ( 0.01%) 62.25
hotline 36 ( 0.00%) 2453 ( 0.00%) 68.14
other 2595999 ( 16.36%) 1752212660 ( 16.55%) 674.97
udp 2440876 ( 15.38%) 750564126 ( 7.09%) 307.50
dns 1166934 ( 7.35%) 234313040 ( 2.21%) 200.79
realaud 896 ( 0.01%) 75364 ( 0.00%) 84.11
halflif 3470 ( 0.02%) 395738 ( 0.00%) 114.05
starcra 40 ( 0.00%) 5593 ( 0.00%) 139.82
everque 49 ( 0.00%) 9840 ( 0.00%) 200.82
unreal 818 ( 0.01%) 553024 ( 0.01%) 676.07
quake 15 ( 0.00%) 1784 ( 0.00%) 118.93
cuseeme 7 ( 0.00%) 647 ( 0.00%) 92.43
other 1268538 ( 7.99%) 515180830 ( 4.86%) 406.12
icmp 723408 ( 4.56%) 61240842 ( 0.58%) 84.66
ipip 323 ( 0.00%) 40501 ( 0.00%) 125.39
ipsec 76 ( 0.00%) 12008 ( 0.00%) 158.00
ip6 25815 ( 0.16%) 3782689 ( 0.04%) 146.53
other 69320 ( 0.44%) 48479305 ( 0.46%) 699.36
frag 5504 ( 0.03%) 4521149 ( 0.04%) 821.43
ip6 146975 ( 0.93%) 182516425 ( 1.72%) 1241.82
tcp6 126021 ( 0.79%) 179041122 ( 1.69%) 1420.72
http(s) 118536 ( 0.75%) 175356465 ( 1.66%) 1479.35
http(c) 3689 ( 0.02%) 726762 ( 0.01%) 197.01
smtp 803 ( 0.01%) 291027 ( 0.00%) 362.42
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 428 ( 0.00%) 56142 ( 0.00%) 131.17
other 2563 ( 0.02%) 2610554 ( 0.02%) 1018.55
udp6 16752 ( 0.11%) 2776112 ( 0.03%) 165.72
dns 16129 ( 0.10%) 2635722 ( 0.02%) 163.42
quake 1 ( 0.00%) 103 ( 0.00%) 103.00
other 622 ( 0.00%) 140287 ( 0.00%) 225.54
icmp6 3995 ( 0.03%) 536501 ( 0.01%) 134.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 177 ( 0.00%) 158610 ( 0.00%) 896.10
tcpdump file: 200903251400.dump.gz (389.22 MB)