Traffic Trace Info
DumpFile: 200903300030.dump
FileSize: 1105.14MB
Id: 200903300030
StartTime: Mon Mar 30 00:30:00 2009
EndTime: Mon Mar 30 00:45:00 2009
TotalTime: 899.37 seconds
TotalCapSize: 860.38MB CapLen: 96 bytes
# of packets: 16034881 (11709.92MB)
AvgRate: 109.23Mbps stddev:14.45M
IP flow (unique src/dst pair) Information
# of flows: 781936 (avg. 20.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.8% 1.7% 1.5% 1.3% 1.3% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 506924
Top 10 bandwidth usage (bytes/total in %):
14.7% 11.7% 7.8% 6.6% 4.8% 2.5% 2.3% 2.2% 2.1% 2.0%
# of IPv6 addresses: 1848
Top 10 bandwidth usage (bytes/total in %):
29.6% 19.4% 16.3% 15.8% 10.3% 8.2% 7.9% 7.6% 4.0% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300030.pktlen.png)
detailed numbers
[ 32- 63]: 3295232
[ 64- 127]: 3389697
[ 128- 255]: 816524
[ 256- 511]: 430350
[ 512- 1023]: 351205
[ 1024- 2047]: 7751873
Protocol Breakdown
![[protocol breakdown chart]](200903300030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16034881 (100.00%) 12278744536 (100.00%) 765.75
ip 16001835 ( 99.79%) 12270634029 ( 99.93%) 766.83
tcp 12393410 ( 77.29%) 11213825212 ( 91.33%) 904.82
http(s) 6336162 ( 39.51%) 8787129923 ( 71.56%) 1386.82
http(c) 2762549 ( 17.23%) 214851744 ( 1.75%) 77.77
squid 677027 ( 4.22%) 412045060 ( 3.36%) 608.61
smtp 327921 ( 2.05%) 106482916 ( 0.87%) 324.72
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 81618 ( 0.51%) 81180974 ( 0.66%) 994.65
pop3 8297 ( 0.05%) 6033915 ( 0.05%) 727.24
imap 3735 ( 0.02%) 1949384 ( 0.02%) 521.92
telnet 28022 ( 0.17%) 8740637 ( 0.07%) 311.92
ssh 48330 ( 0.30%) 5670270 ( 0.05%) 117.32
dns 16248 ( 0.10%) 3587407 ( 0.03%) 220.79
bgp 132 ( 0.00%) 44790 ( 0.00%) 339.32
napster 1630 ( 0.01%) 521539 ( 0.00%) 319.96
realaud 28 ( 0.00%) 3200 ( 0.00%) 114.29
rtsp 204 ( 0.00%) 39393 ( 0.00%) 193.10
icecast 297 ( 0.00%) 37776 ( 0.00%) 127.19
hotline 1073 ( 0.01%) 66454 ( 0.00%) 61.93
other 2100128 ( 13.10%) 1585439290 ( 12.91%) 754.93
udp 2479136 ( 15.46%) 922543420 ( 7.51%) 372.12
dns 1019318 ( 6.36%) 220010313 ( 1.79%) 215.84
realaud 915 ( 0.01%) 55197 ( 0.00%) 60.32
halflif 161 ( 0.00%) 26374 ( 0.00%) 163.81
starcra 26 ( 0.00%) 3845 ( 0.00%) 147.88
everque 170 ( 0.00%) 49039 ( 0.00%) 288.46
unreal 407 ( 0.00%) 163406 ( 0.00%) 401.49
quake 22 ( 0.00%) 1846 ( 0.00%) 83.91
cuseeme 4 ( 0.00%) 639 ( 0.00%) 159.75
other 1457911 ( 9.09%) 702061602 ( 5.72%) 481.55
icmp 1099186 ( 6.85%) 127519385 ( 1.04%) 116.01
ipip 298 ( 0.00%) 37104 ( 0.00%) 124.51
ipsec 53 ( 0.00%) 8374 ( 0.00%) 158.00
ip6 23827 ( 0.15%) 5905509 ( 0.05%) 247.85
other 5925 ( 0.04%) 795025 ( 0.01%) 134.18
frag 46327 ( 0.29%) 50508826 ( 0.41%) 1090.27
ip6 33046 ( 0.21%) 8110507 ( 0.07%) 245.43
tcp6 12486 ( 0.08%) 4826287 ( 0.04%) 386.54
http(s) 2669 ( 0.02%) 1890710 ( 0.02%) 708.40
http(c) 7081 ( 0.04%) 1320255 ( 0.01%) 186.45
smtp 204 ( 0.00%) 103332 ( 0.00%) 506.53
bgp 364 ( 0.00%) 30268 ( 0.00%) 83.15
other 2168 ( 0.01%) 1481722 ( 0.01%) 683.45
udp6 12736 ( 0.08%) 2054166 ( 0.02%) 161.29
dns 10917 ( 0.07%) 1659370 ( 0.01%) 152.00
cuseeme 1 ( 0.00%) 99 ( 0.00%) 99.00
other 1818 ( 0.01%) 394697 ( 0.00%) 217.11
icmp6 7518 ( 0.05%) 976818 ( 0.01%) 129.93
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 276 ( 0.00%) 249156 ( 0.00%) 902.74
tcpdump file: 200903300030.dump.gz (389.83 MB)