Traffic Trace Info
DumpFile: 200903261400.dump
FileSize: 1256.79MB
Id: 200903261400
StartTime: Thu Mar 26 14:00:01 2009
EndTime: Thu Mar 26 14:15:01 2009
TotalTime: 899.93 seconds
TotalCapSize: 980.18MB CapLen: 96 bytes
# of packets: 18125931 (12040.46MB)
AvgRate: 112.26Mbps stddev:18.23M
IP flow (unique src/dst pair) Information
# of flows: 643666 (avg. 28.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 2.0% 1.9% 1.8% 1.8% 1.5% 1.5% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 402330
Top 10 bandwidth usage (bytes/total in %):
20.2% 11.8% 8.1% 5.5% 4.4% 3.0% 2.8% 2.8% 2.3% 2.2%
# of IPv6 addresses: 1631
Top 10 bandwidth usage (bytes/total in %):
22.8% 17.2% 17.2% 15.3% 8.0% 7.5% 7.4% 6.5% 6.1% 6.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903261400.pktlen.png)
detailed numbers
[ 32- 63]: 4910695
[ 64- 127]: 3803944
[ 128- 255]: 658818
[ 256- 511]: 515950
[ 512- 1023]: 412483
[ 1024- 2047]: 7824041
Protocol Breakdown
![[protocol breakdown chart]](200903261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18125931 (100.00%) 12625334870 (100.00%) 696.53
ip 18091435 ( 99.81%) 12616920446 ( 99.93%) 697.40
tcp 15170418 ( 83.69%) 12064910531 ( 95.56%) 795.29
http(s) 6578866 ( 36.30%) 8954283736 ( 70.92%) 1361.07
http(c) 4099875 ( 22.62%) 403643851 ( 3.20%) 98.45
squid 1188918 ( 6.56%) 863647462 ( 6.84%) 726.41
smtp 261084 ( 1.44%) 112363800 ( 0.89%) 430.37
nntp 24 ( 0.00%) 1996 ( 0.00%) 83.17
ftp 151462 ( 0.84%) 81421454 ( 0.64%) 537.57
pop3 6194 ( 0.03%) 2765860 ( 0.02%) 446.54
imap 3089 ( 0.02%) 291729 ( 0.00%) 94.44
telnet 1554 ( 0.01%) 304136 ( 0.00%) 195.71
ssh 20364 ( 0.11%) 15894601 ( 0.13%) 780.52
dns 1726 ( 0.01%) 150694 ( 0.00%) 87.31
bgp 155 ( 0.00%) 56407 ( 0.00%) 363.92
napster 17 ( 0.00%) 1356 ( 0.00%) 79.76
realaud 45 ( 0.00%) 11450 ( 0.00%) 254.44
rtsp 194019 ( 1.07%) 84986786 ( 0.67%) 438.03
icecast 409 ( 0.00%) 31606 ( 0.00%) 77.28
other 2662615 ( 14.69%) 1545053487 ( 12.24%) 580.28
udp 2153296 ( 11.88%) 485944538 ( 3.85%) 225.67
dns 1319838 ( 7.28%) 251856389 ( 1.99%) 190.82
realaud 979 ( 0.01%) 59395 ( 0.00%) 60.67
halflif 17 ( 0.00%) 1972 ( 0.00%) 116.00
starcra 65 ( 0.00%) 8360 ( 0.00%) 128.62
everque 84 ( 0.00%) 13947 ( 0.00%) 166.04
unreal 2706 ( 0.01%) 1887673 ( 0.01%) 697.59
quake 13 ( 0.00%) 1486 ( 0.00%) 114.31
cuseeme 7 ( 0.00%) 1194 ( 0.00%) 170.57
other 829490 ( 4.58%) 232058861 ( 1.84%) 279.76
icmp 732744 ( 4.04%) 60314056 ( 0.48%) 82.31
ipip 303 ( 0.00%) 35602 ( 0.00%) 117.50
ipsec 120 ( 0.00%) 18960 ( 0.00%) 158.00
ip6 26369 ( 0.15%) 4391461 ( 0.03%) 166.54
other 8185 ( 0.05%) 1305298 ( 0.01%) 159.47
frag 2340 ( 0.01%) 2142530 ( 0.02%) 915.61
ip6 34496 ( 0.19%) 8414424 ( 0.07%) 243.92
tcp6 14736 ( 0.08%) 4988916 ( 0.04%) 338.55
http(s) 2308 ( 0.01%) 1626694 ( 0.01%) 704.81
http(c) 4213 ( 0.02%) 813363 ( 0.01%) 193.06
smtp 124 ( 0.00%) 50494 ( 0.00%) 407.21
imap 409 ( 0.00%) 376547 ( 0.00%) 920.65
telnet 1 ( 0.00%) 94 ( 0.00%) 94.00
ssh 5963 ( 0.03%) 1447958 ( 0.01%) 242.82
bgp 362 ( 0.00%) 30423 ( 0.00%) 84.04
other 1356 ( 0.01%) 643343 ( 0.01%) 474.44
udp6 15847 ( 0.09%) 2574495 ( 0.02%) 162.46
dns 14946 ( 0.08%) 2415481 ( 0.02%) 161.61
starcra 2 ( 0.00%) 208 ( 0.00%) 104.00
unreal 1 ( 0.00%) 112 ( 0.00%) 112.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 897 ( 0.00%) 158589 ( 0.00%) 176.80
icmp6 3494 ( 0.02%) 468094 ( 0.00%) 133.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 389 ( 0.00%) 378839 ( 0.00%) 973.88
tcpdump file: 200903261400.dump.gz (430.88 MB)