Traffic Trace Info
DumpFile: 200903300145.dump
FileSize: 952.97MB
Id: 200903300145
StartTime: Mon Mar 30 01:45:00 2009
EndTime: Mon Mar 30 02:00:01 2009
TotalTime: 900.15 seconds
TotalCapSize: 741.64MB CapLen: 96 bytes
# of packets: 13849123 (9919.54MB)
AvgRate: 92.44Mbps stddev:10.60M
IP flow (unique src/dst pair) Information
# of flows: 824274 (avg. 16.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.1% 1.9% 1.6% 1.4% 1.2% 1.0% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 548429
Top 10 bandwidth usage (bytes/total in %):
18.5% 11.7% 11.3% 8.4% 3.3% 2.2% 2.1% 2.1% 2.1% 2.1%
# of IPv6 addresses: 1957
Top 10 bandwidth usage (bytes/total in %):
29.0% 19.4% 18.6% 18.3% 11.8% 9.7% 9.3% 6.8% 2.8% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300145.pktlen.png)
detailed numbers
[ 32- 63]: 3199616
[ 64- 127]: 2713670
[ 128- 255]: 699843
[ 256- 511]: 390730
[ 512- 1023]: 253218
[ 1024- 2047]: 6592046
Protocol Breakdown
![[protocol breakdown chart]](200903300145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13849123 (100.00%) 10401396701 (100.00%) 751.05
ip 13819508 ( 99.79%) 10394462416 ( 99.93%) 752.16
tcp 10912593 ( 78.80%) 9451679697 ( 90.87%) 866.13
http(s) 5430941 ( 39.22%) 7517758936 ( 72.28%) 1384.25
http(c) 2431675 ( 17.56%) 191064617 ( 1.84%) 78.57
squid 481775 ( 3.48%) 157011985 ( 1.51%) 325.90
smtp 400067 ( 2.89%) 171390316 ( 1.65%) 428.40
ftp 86037 ( 0.62%) 92828565 ( 0.89%) 1078.94
pop3 5227 ( 0.04%) 2758948 ( 0.03%) 527.83
imap 2552 ( 0.02%) 782795 ( 0.01%) 306.74
telnet 8746 ( 0.06%) 2416968 ( 0.02%) 276.35
ssh 81311 ( 0.59%) 9288738 ( 0.09%) 114.24
dns 12690 ( 0.09%) 1284397 ( 0.01%) 101.21
bgp 159 ( 0.00%) 60767 ( 0.00%) 382.18
napster 78 ( 0.00%) 4680 ( 0.00%) 60.00
realaud 24 ( 0.00%) 2906 ( 0.00%) 121.08
rtsp 75 ( 0.00%) 18630 ( 0.00%) 248.40
icecast 252 ( 0.00%) 16552 ( 0.00%) 65.68
hotline 1056 ( 0.01%) 65416 ( 0.00%) 61.95
other 1969927 ( 14.22%) 1304924421 ( 12.55%) 662.42
udp 2005719 ( 14.48%) 821515837 ( 7.90%) 409.59
dns 977353 ( 7.06%) 212349544 ( 2.04%) 217.27
realaud 16 ( 0.00%) 1609 ( 0.00%) 100.56
halflif 1830 ( 0.01%) 131734 ( 0.00%) 71.99
starcra 29 ( 0.00%) 5147 ( 0.00%) 177.48
everque 68 ( 0.00%) 13313 ( 0.00%) 195.78
unreal 326 ( 0.00%) 141573 ( 0.00%) 434.27
quake 16 ( 0.00%) 1314 ( 0.00%) 82.12
cuseeme 2 ( 0.00%) 143 ( 0.00%) 71.50
other 1025867 ( 7.41%) 608701538 ( 5.85%) 593.35
icmp 866241 ( 6.25%) 113066890 ( 1.09%) 130.53
ipip 322 ( 0.00%) 38148 ( 0.00%) 118.47
ipsec 53 ( 0.00%) 8374 ( 0.00%) 158.00
ip6 25772 ( 0.19%) 6988627 ( 0.07%) 271.17
other 8808 ( 0.06%) 1164843 ( 0.01%) 132.25
frag 59354 ( 0.43%) 60715547 ( 0.58%) 1022.94
ip6 29615 ( 0.21%) 6934285 ( 0.07%) 234.15
tcp6 10622 ( 0.08%) 3797011 ( 0.04%) 357.47
http(s) 2160 ( 0.02%) 1341983 ( 0.01%) 621.29
http(c) 6170 ( 0.04%) 1003366 ( 0.01%) 162.62
smtp 65 ( 0.00%) 23879 ( 0.00%) 367.37
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 363 ( 0.00%) 30557 ( 0.00%) 84.18
other 1862 ( 0.01%) 1397054 ( 0.01%) 750.30
udp6 11849 ( 0.09%) 1996579 ( 0.02%) 168.50
dns 9483 ( 0.07%) 1447455 ( 0.01%) 152.64
other 2366 ( 0.02%) 549124 ( 0.01%) 232.09
icmp6 6827 ( 0.05%) 874122 ( 0.01%) 128.04
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 286 ( 0.00%) 262357 ( 0.00%) 917.33
tcpdump file: 200903300145.dump.gz (341.70 MB)