Traffic Trace Info
DumpFile: 200903300115.dump
FileSize: 1031.41MB
Id: 200903300115
StartTime: Mon Mar 30 01:15:00 2009
EndTime: Mon Mar 30 01:30:00 2009
TotalTime: 900.22 seconds
TotalCapSize: 802.43MB CapLen: 96 bytes
# of packets: 15006234 (10540.36MB)
AvgRate: 98.22Mbps stddev:16.79M
IP flow (unique src/dst pair) Information
# of flows: 778004 (avg. 19.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 2.0% 1.7% 1.6% 1.5% 1.3% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 521120
Top 10 bandwidth usage (bytes/total in %):
17.0% 16.9% 10.5% 6.8% 6.5% 4.8% 2.4% 2.0% 2.0% 2.0%
# of IPv6 addresses: 1833
Top 10 bandwidth usage (bytes/total in %):
23.0% 21.5% 17.7% 14.9% 8.4% 8.4% 7.9% 7.6% 6.7% 6.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300115.pktlen.png)
detailed numbers
[ 32- 63]: 3745577
[ 64- 127]: 2810295
[ 128- 255]: 739841
[ 256- 511]: 420764
[ 512- 1023]: 315782
[ 1024- 2047]: 6973975
Protocol Breakdown
![[protocol breakdown chart]](200903300115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15006234 (100.00%) 11052373555 (100.00%) 736.52
ip 14962907 ( 99.71%) 11043787432 ( 99.92%) 738.08
tcp 11892877 ( 79.25%) 9930842898 ( 89.85%) 835.02
http(s) 5890847 ( 39.26%) 8112237182 ( 73.40%) 1377.09
http(c) 2985403 ( 19.89%) 233770609 ( 2.12%) 78.30
squid 531438 ( 3.54%) 227810799 ( 2.06%) 428.67
smtp 260892 ( 1.74%) 38368932 ( 0.35%) 147.07
ftp 62021 ( 0.41%) 61977749 ( 0.56%) 999.30
pop3 5348 ( 0.04%) 2892067 ( 0.03%) 540.78
imap 2621 ( 0.02%) 878908 ( 0.01%) 335.33
telnet 22710 ( 0.15%) 8177985 ( 0.07%) 360.11
ssh 117562 ( 0.78%) 50145010 ( 0.45%) 426.54
dns 13845 ( 0.09%) 1374183 ( 0.01%) 99.25
bgp 186 ( 0.00%) 84951 ( 0.00%) 456.73
napster 88 ( 0.00%) 5280 ( 0.00%) 60.00
realaud 21 ( 0.00%) 1454 ( 0.00%) 69.24
rtsp 226 ( 0.00%) 61572 ( 0.00%) 272.44
icecast 19020 ( 0.13%) 17735891 ( 0.16%) 932.49
hotline 1107 ( 0.01%) 68564 ( 0.00%) 61.94
other 1979537 ( 13.19%) 1175251462 ( 10.63%) 593.70
udp 2155401 ( 14.36%) 826438755 ( 7.48%) 383.43
dns 910876 ( 6.07%) 199925388 ( 1.81%) 219.49
realaud 1139 ( 0.01%) 69407 ( 0.00%) 60.94
halflif 169 ( 0.00%) 28517 ( 0.00%) 168.74
starcra 22 ( 0.00%) 3135 ( 0.00%) 142.50
everque 31189 ( 0.21%) 22289492 ( 0.20%) 714.66
unreal 276 ( 0.00%) 105315 ( 0.00%) 381.58
quake 1041 ( 0.01%) 214777 ( 0.00%) 206.32
cuseeme 6 ( 0.00%) 816 ( 0.00%) 136.00
other 1210487 ( 8.07%) 603635535 ( 5.46%) 498.67
icmp 769311 ( 5.13%) 106205675 ( 0.96%) 138.05
ipip 329 ( 0.00%) 38824 ( 0.00%) 118.01
ipsec 52 ( 0.00%) 8216 ( 0.00%) 158.00
ip6 136712 ( 0.91%) 179163134 ( 1.62%) 1310.52
other 8225 ( 0.05%) 1089930 ( 0.01%) 132.51
frag 44066 ( 0.29%) 48233031 ( 0.44%) 1094.56
ip6 43327 ( 0.29%) 8586123 ( 0.08%) 198.17
tcp6 23189 ( 0.15%) 5342052 ( 0.05%) 230.37
http(s) 2557 ( 0.02%) 1853573 ( 0.02%) 724.90
http(c) 18082 ( 0.12%) 1951330 ( 0.02%) 107.92
smtp 231 ( 0.00%) 101355 ( 0.00%) 438.77
bgp 358 ( 0.00%) 29804 ( 0.00%) 83.25
other 1961 ( 0.01%) 1405990 ( 0.01%) 716.98
udp6 12464 ( 0.08%) 2047644 ( 0.02%) 164.28
dns 11056 ( 0.07%) 1716370 ( 0.02%) 155.24
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1407 ( 0.01%) 331166 ( 0.00%) 235.37
icmp6 7372 ( 0.05%) 947631 ( 0.01%) 128.54
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 272 ( 0.00%) 244716 ( 0.00%) 899.69
tcpdump file: 200903300115.dump.gz (365.38 MB)