Traffic Trace Info
DumpFile: 200903300045.dump
FileSize: 1004.21MB
Id: 200903300045
StartTime: Mon Mar 30 00:45:00 2009
EndTime: Mon Mar 30 01:00:00 2009
TotalTime: 900.53 seconds
TotalCapSize: 781.54MB CapLen: 96 bytes
# of packets: 14590532 (10388.29MB)
AvgRate: 96.74Mbps stddev:11.76M
IP flow (unique src/dst pair) Information
# of flows: 827208 (avg. 17.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.8% 1.5% 1.1% 1.1% 1.1% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 505062
Top 10 bandwidth usage (bytes/total in %):
17.8% 12.8% 10.5% 7.6% 4.4% 2.6% 2.5% 2.2% 2.0% 2.0%
# of IPv6 addresses: 1704
Top 10 bandwidth usage (bytes/total in %):
45.9% 34.3% 20.1% 13.8% 11.7% 6.6% 5.9% 5.1% 4.3% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300045.pktlen.png)
detailed numbers
[ 32- 63]: 3462117
[ 64- 127]: 2795947
[ 128- 255]: 790262
[ 256- 511]: 412094
[ 512- 1023]: 303021
[ 1024- 2047]: 6827091
Protocol Breakdown
![[protocol breakdown chart]](200903300045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14590532 (100.00%) 10892909090 (100.00%) 746.57
ip 14558503 ( 99.78%) 10881894787 ( 99.90%) 747.46
tcp 11742121 ( 80.48%) 10085510504 ( 92.59%) 858.92
http(s) 5933994 ( 40.67%) 8193788772 ( 75.22%) 1380.82
http(c) 2789582 ( 19.12%) 215713163 ( 1.98%) 77.33
squid 508612 ( 3.49%) 238267676 ( 2.19%) 468.47
smtp 279092 ( 1.91%) 55375040 ( 0.51%) 198.41
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 80687 ( 0.55%) 82692225 ( 0.76%) 1024.85
pop3 4677 ( 0.03%) 2451915 ( 0.02%) 524.25
imap 3971 ( 0.03%) 2409755 ( 0.02%) 606.84
telnet 26700 ( 0.18%) 7496690 ( 0.07%) 280.77
ssh 164953 ( 1.13%) 21777174 ( 0.20%) 132.02
dns 14103 ( 0.10%) 1406381 ( 0.01%) 99.72
bgp 127 ( 0.00%) 32076 ( 0.00%) 252.57
napster 1156 ( 0.01%) 937326 ( 0.01%) 810.84
realaud 33 ( 0.00%) 3522 ( 0.00%) 106.73
rtsp 295 ( 0.00%) 56992 ( 0.00%) 193.19
icecast 369 ( 0.00%) 53411 ( 0.00%) 144.75
hotline 1084 ( 0.01%) 67102 ( 0.00%) 61.90
other 1932678 ( 13.25%) 1262980804 ( 11.59%) 653.49
udp 1960437 ( 13.44%) 683949496 ( 6.28%) 348.88
dns 974720 ( 6.68%) 214706638 ( 1.97%) 220.28
realaud 1018 ( 0.01%) 61425 ( 0.00%) 60.34
halflif 207 ( 0.00%) 33806 ( 0.00%) 163.31
starcra 20 ( 0.00%) 3381 ( 0.00%) 169.05
everque 21791 ( 0.15%) 17722685 ( 0.16%) 813.30
unreal 349 ( 0.00%) 138309 ( 0.00%) 396.30
quake 16 ( 0.00%) 1714 ( 0.00%) 107.12
cuseeme 4 ( 0.00%) 549 ( 0.00%) 137.25
other 962142 ( 6.59%) 451139513 ( 4.14%) 468.89
icmp 827971 ( 5.67%) 106752691 ( 0.98%) 128.93
ipip 325 ( 0.00%) 39562 ( 0.00%) 121.73
ipsec 53 ( 0.00%) 8374 ( 0.00%) 158.00
ip6 21230 ( 0.15%) 4772537 ( 0.04%) 224.80
other 6366 ( 0.04%) 861623 ( 0.01%) 135.35
frag 46463 ( 0.32%) 50718282 ( 0.47%) 1091.58
ip6 32029 ( 0.22%) 11014303 ( 0.10%) 343.89
tcp6 13069 ( 0.09%) 8057695 ( 0.07%) 616.55
http(s) 2673 ( 0.02%) 1838974 ( 0.02%) 687.98
http(c) 5477 ( 0.04%) 995376 ( 0.01%) 181.74
smtp 43 ( 0.00%) 11176 ( 0.00%) 259.91
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 373 ( 0.00%) 32509 ( 0.00%) 87.16
other 4501 ( 0.03%) 5179488 ( 0.05%) 1150.74
udp6 11417 ( 0.08%) 1740580 ( 0.02%) 152.46
dns 10179 ( 0.07%) 1528514 ( 0.01%) 150.16
halflif 1 ( 0.00%) 112 ( 0.00%) 112.00
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1236 ( 0.01%) 211838 ( 0.00%) 171.39
icmp6 7209 ( 0.05%) 934209 ( 0.01%) 129.59
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 303 ( 0.00%) 277603 ( 0.00%) 916.18
tcpdump file: 200903300045.dump.gz (365.22 MB)