Traffic Trace Info
DumpFile: 200903300000.dump
FileSize: 1109.43MB
Id: 200903300000
StartTime: Mon Mar 30 00:00:00 2009
EndTime: Mon Mar 30 00:15:00 2009
TotalTime: 900.01 seconds
TotalCapSize: 863.88MB CapLen: 96 bytes
# of packets: 16080824 (11682.93MB)
AvgRate: 108.90Mbps stddev:13.00M
IP flow (unique src/dst pair) Information
# of flows: 764207 (avg. 21.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.8% 1.6% 1.6% 1.6% 1.3% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 488926
Top 10 bandwidth usage (bytes/total in %):
14.7% 12.9% 8.6% 6.6% 5.5% 2.4% 2.0% 1.9% 1.9% 1.8%
# of IPv6 addresses: 2009
Top 10 bandwidth usage (bytes/total in %):
47.7% 36.5% 19.1% 14.8% 10.5% 8.9% 4.9% 4.7% 4.6% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300000.pktlen.png)
detailed numbers
[ 32- 63]: 3524844
[ 64- 127]: 3008053
[ 128- 255]: 841618
[ 256- 511]: 462227
[ 512- 1023]: 648900
[ 1024- 2047]: 7595182
Protocol Breakdown
![[protocol breakdown chart]](200903300000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16080824 (100.00%) 12250442976 (100.00%) 761.80
ip 16037901 ( 99.73%) 12234994946 ( 99.87%) 762.88
tcp 12924997 ( 80.38%) 11254452258 ( 91.87%) 870.75
http(s) 6789438 ( 42.22%) 9170953233 ( 74.86%) 1350.77
http(c) 2998885 ( 18.65%) 228135827 ( 1.86%) 76.07
squid 616880 ( 3.84%) 336396893 ( 2.75%) 545.32
smtp 315004 ( 1.96%) 55087746 ( 0.45%) 174.88
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 106039 ( 0.66%) 102093381 ( 0.83%) 962.79
pop3 6589 ( 0.04%) 4767085 ( 0.04%) 723.49
imap 2877 ( 0.02%) 1329232 ( 0.01%) 462.02
telnet 26467 ( 0.16%) 7768408 ( 0.06%) 293.51
ssh 53093 ( 0.33%) 15439794 ( 0.13%) 290.81
dns 15763 ( 0.10%) 1588712 ( 0.01%) 100.79
bgp 126 ( 0.00%) 38359 ( 0.00%) 304.44
napster 178 ( 0.00%) 34651 ( 0.00%) 194.67
realaud 37 ( 0.00%) 2502 ( 0.00%) 67.62
rtsp 275 ( 0.00%) 68196 ( 0.00%) 247.99
icecast 313 ( 0.00%) 37393 ( 0.00%) 119.47
hotline 1015 ( 0.01%) 62868 ( 0.00%) 61.94
other 1992003 ( 12.39%) 1330647078 ( 10.86%) 667.99
udp 2373158 ( 14.76%) 872357007 ( 7.12%) 367.59
dns 1077215 ( 6.70%) 229298048 ( 1.87%) 212.86
realaud 1811 ( 0.01%) 110031 ( 0.00%) 60.76
halflif 148 ( 0.00%) 24393 ( 0.00%) 164.82
starcra 308 ( 0.00%) 20536 ( 0.00%) 66.68
everque 121 ( 0.00%) 25591 ( 0.00%) 211.50
unreal 379 ( 0.00%) 143869 ( 0.00%) 379.60
quake 16 ( 0.00%) 1660 ( 0.00%) 103.75
cuseeme 7 ( 0.00%) 1137 ( 0.00%) 162.43
other 1292978 ( 8.04%) 642585950 ( 5.25%) 496.98
icmp 708619 ( 4.41%) 100447233 ( 0.82%) 141.75
ipip 306 ( 0.00%) 38088 ( 0.00%) 124.47
ipsec 52 ( 0.00%) 8216 ( 0.00%) 158.00
ip6 25164 ( 0.16%) 6950327 ( 0.06%) 276.20
other 5605 ( 0.03%) 741817 ( 0.01%) 132.35
frag 48409 ( 0.30%) 53147495 ( 0.43%) 1097.88
ip6 42923 ( 0.27%) 15448030 ( 0.13%) 359.90
tcp6 19530 ( 0.12%) 11651691 ( 0.10%) 596.60
http(s) 2438 ( 0.02%) 1628690 ( 0.01%) 668.04
http(c) 6846 ( 0.04%) 1137528 ( 0.01%) 166.16
smtp 126 ( 0.00%) 56379 ( 0.00%) 447.45
bgp 362 ( 0.00%) 30090 ( 0.00%) 83.12
other 9758 ( 0.06%) 8799004 ( 0.07%) 901.72
udp6 15853 ( 0.10%) 2558158 ( 0.02%) 161.37
dns 13707 ( 0.09%) 2086456 ( 0.02%) 152.22
starcra 3 ( 0.00%) 394 ( 0.00%) 131.33
quake 1 ( 0.00%) 115 ( 0.00%) 115.00
other 2142 ( 0.01%) 471193 ( 0.00%) 219.98
icmp6 7205 ( 0.04%) 949009 ( 0.01%) 131.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 305 ( 0.00%) 285092 ( 0.00%) 934.73
tcpdump file: 200903300000.dump.gz (398.56 MB)