Traffic Trace Info
DumpFile: 200903300130.dump
FileSize: 1032.16MB
Id: 200903300130
StartTime: Mon Mar 30 01:30:00 2009
EndTime: Mon Mar 30 01:45:00 2009
TotalTime: 900.41 seconds
TotalCapSize: 803.42MB CapLen: 96 bytes
# of packets: 14990129 (9940.78MB)
AvgRate: 92.59Mbps stddev:9.85M
IP flow (unique src/dst pair) Information
# of flows: 843339 (avg. 17.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.8% 1.6% 1.5% 1.2% 1.2% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 573876
Top 10 bandwidth usage (bytes/total in %):
18.3% 11.7% 10.9% 7.4% 3.3% 3.1% 2.3% 2.3% 2.1% 2.1%
# of IPv6 addresses: 1681
Top 10 bandwidth usage (bytes/total in %):
28.1% 19.5% 19.3% 17.8% 10.3% 10.1% 8.7% 7.3% 2.9% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300130.pktlen.png)
detailed numbers
[ 32- 63]: 3802124
[ 64- 127]: 3265831
[ 128- 255]: 711374
[ 256- 511]: 402626
[ 512- 1023]: 252783
[ 1024- 2047]: 6555391
Protocol Breakdown
![[protocol breakdown chart]](200903300130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14990129 (100.00%) 10423658127 (100.00%) 695.37
ip 14960915 ( 99.81%) 10416887624 ( 99.94%) 696.27
tcp 11517035 ( 76.83%) 9397949683 ( 90.16%) 816.00
http(s) 5449328 ( 36.35%) 7547916840 ( 72.41%) 1385.11
http(c) 2968641 ( 19.80%) 224223927 ( 2.15%) 75.53
squid 512248 ( 3.42%) 212072482 ( 2.03%) 414.00
smtp 290610 ( 1.94%) 39803863 ( 0.38%) 136.97
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 57582 ( 0.38%) 51294764 ( 0.49%) 890.81
pop3 5380 ( 0.04%) 3180024 ( 0.03%) 591.08
imap 4427 ( 0.03%) 1595988 ( 0.02%) 360.51
telnet 17043 ( 0.11%) 5251487 ( 0.05%) 308.13
ssh 159596 ( 1.06%) 14859864 ( 0.14%) 93.11
dns 16151 ( 0.11%) 3611135 ( 0.03%) 223.59
bgp 123 ( 0.00%) 34968 ( 0.00%) 284.29
napster 227 ( 0.00%) 20102 ( 0.00%) 88.56
realaud 12 ( 0.00%) 2078 ( 0.00%) 173.17
rtsp 724 ( 0.00%) 511212 ( 0.00%) 706.09
icecast 346 ( 0.00%) 23198 ( 0.00%) 67.05
hotline 1055 ( 0.01%) 65343 ( 0.00%) 61.94
other 2033541 ( 13.57%) 1293482348 ( 12.41%) 636.07
udp 2193497 ( 14.63%) 876133649 ( 8.41%) 399.42
dns 967687 ( 6.46%) 208072299 ( 2.00%) 215.02
realaud 13 ( 0.00%) 1325 ( 0.00%) 101.92
halflif 154 ( 0.00%) 25636 ( 0.00%) 166.47
starcra 29 ( 0.00%) 5544 ( 0.00%) 191.17
everque 17362 ( 0.12%) 8941116 ( 0.09%) 514.98
unreal 327 ( 0.00%) 143960 ( 0.00%) 440.24
quake 20 ( 0.00%) 6615 ( 0.00%) 330.75
cuseeme 4 ( 0.00%) 404 ( 0.00%) 101.00
other 1207662 ( 8.06%) 658742328 ( 6.32%) 545.47
icmp 1220861 ( 8.14%) 137700489 ( 1.32%) 112.79
ipip 310 ( 0.00%) 39346 ( 0.00%) 126.92
ipsec 53 ( 0.00%) 8374 ( 0.00%) 158.00
ip6 20538 ( 0.14%) 3925840 ( 0.04%) 191.15
other 8621 ( 0.06%) 1130243 ( 0.01%) 131.10
frag 61908 ( 0.41%) 62367781 ( 0.60%) 1007.43
ip6 29214 ( 0.19%) 6770503 ( 0.06%) 231.76
tcp6 10355 ( 0.07%) 3705275 ( 0.04%) 357.82
http(s) 2002 ( 0.01%) 1205470 ( 0.01%) 602.13
http(c) 5921 ( 0.04%) 998624 ( 0.01%) 168.66
smtp 115 ( 0.00%) 31611 ( 0.00%) 274.88
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 365 ( 0.00%) 30795 ( 0.00%) 84.37
other 1950 ( 0.01%) 1438603 ( 0.01%) 737.75
udp6 10814 ( 0.07%) 1720262 ( 0.02%) 159.08
dns 9599 ( 0.06%) 1496602 ( 0.01%) 155.91
other 1215 ( 0.01%) 223660 ( 0.00%) 184.08
icmp6 7616 ( 0.05%) 976112 ( 0.01%) 128.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 399 ( 0.00%) 364774 ( 0.00%) 914.22
tcpdump file: 200903300130.dump.gz (361.53 MB)