Traffic Trace Info
DumpFile: 200903271400.dump
FileSize: 1101.45MB
Id: 200903271400
StartTime: Fri Mar 27 14:00:00 2009
EndTime: Fri Mar 27 14:15:01 2009
TotalTime: 900.40 seconds
TotalCapSize: 854.59MB CapLen: 96 bytes
# of packets: 16178134 (10926.67MB)
AvgRate: 101.80Mbps stddev:14.93M
IP flow (unique src/dst pair) Information
# of flows: 718201 (avg. 22.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.5% 2.1% 1.7% 1.6% 1.4% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 445009
Top 10 bandwidth usage (bytes/total in %):
25.1% 19.2% 4.6% 2.8% 2.8% 2.7% 2.5% 2.1% 2.1% 2.1%
# of IPv6 addresses: 2683
Top 10 bandwidth usage (bytes/total in %):
25.2% 21.1% 15.2% 14.3% 12.8% 12.5% 6.8% 6.6% 5.6% 5.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903271400.pktlen.png)
detailed numbers
[ 32- 63]: 4423576
[ 64- 127]: 3018377
[ 128- 255]: 741775
[ 256- 511]: 396399
[ 512- 1023]: 480891
[ 1024- 2047]: 7117116
Protocol Breakdown
![[protocol breakdown chart]](200903271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16178134 (100.00%) 11457441425 (100.00%) 708.21
ip 16138458 ( 99.75%) 11447339862 ( 99.91%) 709.32
tcp 13002011 ( 80.37%) 10333237169 ( 90.19%) 794.74
http(s) 6034923 ( 37.30%) 8129799319 ( 70.96%) 1347.13
http(c) 3890441 ( 24.05%) 390581369 ( 3.41%) 100.40
squid 350328 ( 2.17%) 88367607 ( 0.77%) 252.24
smtp 221119 ( 1.37%) 83176659 ( 0.73%) 376.16
nntp 108 ( 0.00%) 8830 ( 0.00%) 81.76
ftp 32836 ( 0.20%) 3453022 ( 0.03%) 105.16
pop3 9844 ( 0.06%) 6203688 ( 0.05%) 630.20
imap 4522 ( 0.03%) 497705 ( 0.00%) 110.06
telnet 8552 ( 0.05%) 3383449 ( 0.03%) 395.63
ssh 134240 ( 0.83%) 101940030 ( 0.89%) 759.39
dns 15231 ( 0.09%) 1625335 ( 0.01%) 106.71
bgp 150 ( 0.00%) 48233 ( 0.00%) 321.55
napster 25 ( 0.00%) 1889 ( 0.00%) 75.56
realaud 40 ( 0.00%) 3172 ( 0.00%) 79.30
rtsp 106069 ( 0.66%) 120600806 ( 1.05%) 1137.00
icecast 505 ( 0.00%) 39388 ( 0.00%) 78.00
hotline 8 ( 0.00%) 484 ( 0.00%) 60.50
other 2193068 ( 13.56%) 1403506064 ( 12.25%) 639.97
udp 2636479 ( 16.30%) 1048595646 ( 9.15%) 397.73
dns 1075254 ( 6.65%) 240188058 ( 2.10%) 223.38
realaud 916 ( 0.01%) 57885 ( 0.00%) 63.19
halflif 26 ( 0.00%) 3261 ( 0.00%) 125.42
starcra 49 ( 0.00%) 7746 ( 0.00%) 158.08
everque 132 ( 0.00%) 32345 ( 0.00%) 245.04
unreal 1638 ( 0.01%) 1158717 ( 0.01%) 707.40
quake 24 ( 0.00%) 2071 ( 0.00%) 86.29
cuseeme 3 ( 0.00%) 231 ( 0.00%) 77.00
other 1557395 ( 9.63%) 806952942 ( 7.04%) 518.14
icmp 419517 ( 2.59%) 38061495 ( 0.33%) 90.73
ipip 308 ( 0.00%) 37940 ( 0.00%) 123.18
ipsec 55 ( 0.00%) 8690 ( 0.00%) 158.00
ip6 39789 ( 0.25%) 21085049 ( 0.18%) 529.92
other 40299 ( 0.25%) 6313873 ( 0.06%) 156.68
frag 45052 ( 0.28%) 48204920 ( 0.42%) 1069.98
ip6 39676 ( 0.25%) 10101563 ( 0.09%) 254.60
tcp6 15622 ( 0.10%) 5571154 ( 0.05%) 356.62
http(s) 2215 ( 0.01%) 1440102 ( 0.01%) 650.16
http(c) 10293 ( 0.06%) 1395810 ( 0.01%) 135.61
smtp 188 ( 0.00%) 72574 ( 0.00%) 386.03
bgp 368 ( 0.00%) 31147 ( 0.00%) 84.64
other 2558 ( 0.02%) 2631521 ( 0.02%) 1028.74
udp6 20445 ( 0.13%) 3661638 ( 0.03%) 179.10
dns 15661 ( 0.10%) 2504367 ( 0.02%) 159.91
starcra 2 ( 0.00%) 631 ( 0.00%) 315.50
quake 1 ( 0.00%) 100 ( 0.00%) 100.00
other 4781 ( 0.03%) 1156540 ( 0.01%) 241.90
icmp6 3111 ( 0.02%) 428547 ( 0.00%) 137.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 468 ( 0.00%) 436144 ( 0.00%) 931.93
tcpdump file: 200903271400.dump.gz (389.20 MB)