Traffic Trace Info
DumpFile: 200903311400.dump
FileSize: 1112.19MB
Id: 200903311400
StartTime: Tue Mar 31 14:00:01 2009
EndTime: Tue Mar 31 14:15:00 2009
TotalTime: 899.12 seconds
TotalCapSize: 867.08MB CapLen: 96 bytes
# of packets: 16062745 (11184.08MB)
AvgRate: 104.33Mbps stddev:18.95M
IP flow (unique src/dst pair) Information
# of flows: 641120 (avg. 25.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.5% 2.3% 2.2% 1.6% 1.5% 1.5% 1.4% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 411572
Top 10 bandwidth usage (bytes/total in %):
11.8% 10.3% 4.8% 4.5% 3.8% 3.6% 3.6% 2.8% 2.7% 2.5%
# of IPv6 addresses: 2054
Top 10 bandwidth usage (bytes/total in %):
33.8% 17.2% 16.7% 10.9% 8.9% 5.9% 4.6% 4.3% 4.0% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311400.pktlen.png)
detailed numbers
[ 32- 63]: 3786382
[ 64- 127]: 3344532
[ 128- 255]: 616912
[ 256- 511]: 443190
[ 512- 1023]: 514397
[ 1024- 2047]: 7357332
Protocol Breakdown
![[protocol breakdown chart]](200903311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16062745 (100.00%) 11727360910 (100.00%) 730.10
ip 16034259 ( 99.82%) 11719782417 ( 99.94%) 730.92
tcp 12980987 ( 80.81%) 10709357052 ( 91.32%) 825.00
http(s) 5689799 ( 35.42%) 7517349867 ( 64.10%) 1321.20
http(c) 3290871 ( 20.49%) 538827714 ( 4.59%) 163.73
squid 321225 ( 2.00%) 133471809 ( 1.14%) 415.51
smtp 247960 ( 1.54%) 100077231 ( 0.85%) 403.60
ftp 275121 ( 1.71%) 122259443 ( 1.04%) 444.38
pop3 9266 ( 0.06%) 3526795 ( 0.03%) 380.62
imap 7767 ( 0.05%) 4406239 ( 0.04%) 567.30
telnet 4421 ( 0.03%) 665586 ( 0.01%) 150.55
ssh 48120 ( 0.30%) 9722551 ( 0.08%) 202.05
dns 14218 ( 0.09%) 5084114 ( 0.04%) 357.58
bgp 135 ( 0.00%) 39990 ( 0.00%) 296.22
napster 68 ( 0.00%) 4756 ( 0.00%) 69.94
realaud 18 ( 0.00%) 3218 ( 0.00%) 178.78
rtsp 141274 ( 0.88%) 118651996 ( 1.01%) 839.87
icecast 9976 ( 0.06%) 7772284 ( 0.07%) 779.10
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 2920721 ( 18.18%) 2147491835 ( 18.31%) 735.26
udp 2441569 ( 15.20%) 924783180 ( 7.89%) 378.77
dns 977115 ( 6.08%) 246829467 ( 2.10%) 252.61
realaud 19911 ( 0.12%) 8377330 ( 0.07%) 420.74
halflif 117 ( 0.00%) 9254 ( 0.00%) 79.09
starcra 35 ( 0.00%) 6145 ( 0.00%) 175.57
everque 65 ( 0.00%) 13022 ( 0.00%) 200.34
unreal 16 ( 0.00%) 1979 ( 0.00%) 123.69
quake 22 ( 0.00%) 6499 ( 0.00%) 295.41
cuseeme 7 ( 0.00%) 701 ( 0.00%) 100.14
other 1444132 ( 8.99%) 669410647 ( 5.71%) 463.54
icmp 515889 ( 3.21%) 44244761 ( 0.38%) 85.76
ipip 310 ( 0.00%) 38850 ( 0.00%) 125.32
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 47262 ( 0.29%) 32642325 ( 0.28%) 690.67
other 48134 ( 0.30%) 8699185 ( 0.07%) 180.73
frag 44307 ( 0.28%) 48952235 ( 0.42%) 1104.84
ip6 28486 ( 0.18%) 7578493 ( 0.06%) 266.04
tcp6 6626 ( 0.04%) 3753293 ( 0.03%) 566.45
http(s) 299 ( 0.00%) 183184 ( 0.00%) 612.66
http(c) 1697 ( 0.01%) 156965 ( 0.00%) 92.50
smtp 1208 ( 0.01%) 439649 ( 0.00%) 363.95
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
bgp 365 ( 0.00%) 30693 ( 0.00%) 84.09
other 3055 ( 0.02%) 2942577 ( 0.03%) 963.20
udp6 17186 ( 0.11%) 2918559 ( 0.02%) 169.82
dns 15316 ( 0.10%) 2478794 ( 0.02%) 161.84
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 1 ( 0.00%) 117 ( 0.00%) 117.00
other 1868 ( 0.01%) 439539 ( 0.00%) 235.30
icmp6 4223 ( 0.03%) 515260 ( 0.00%) 122.01
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 421 ( 0.00%) 387301 ( 0.00%) 919.95
tcpdump file: 200903311400.dump.gz (387.25 MB)