Traffic Trace Info
DumpFile: 200903300230.dump
FileSize: 944.65MB
Id: 200903300230
StartTime: Mon Mar 30 02:30:00 2009
EndTime: Mon Mar 30 02:45:00 2009
TotalTime: 900.13 seconds
TotalCapSize: 734.97MB CapLen: 96 bytes
# of packets: 13740729 (9664.25MB)
AvgRate: 90.06Mbps stddev:10.14M
IP flow (unique src/dst pair) Information
# of flows: 788555 (avg. 17.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.1% 1.9% 1.5% 1.3% 1.2% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 493884
Top 10 bandwidth usage (bytes/total in %):
18.6% 13.4% 12.7% 8.2% 3.2% 2.2% 2.2% 2.1% 2.1% 1.9%
# of IPv6 addresses: 1627
Top 10 bandwidth usage (bytes/total in %):
27.0% 19.9% 18.5% 18.4% 9.6% 8.9% 7.1% 6.5% 3.0% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300230.pktlen.png)
detailed numbers
[ 32- 63]: 3201153
[ 64- 127]: 2829897
[ 128- 255]: 663912
[ 256- 511]: 359209
[ 512- 1023]: 242098
[ 1024- 2047]: 6444460
Protocol Breakdown
![[protocol breakdown chart]](200903300230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13740729 (100.00%) 10133697638 (100.00%) 737.49
ip 13713168 ( 99.80%) 10126813041 ( 99.93%) 738.47
tcp 10585289 ( 77.04%) 9190240332 ( 90.69%) 868.21
http(s) 5327742 ( 38.77%) 7377601164 ( 72.80%) 1384.75
http(c) 2332706 ( 16.98%) 179801319 ( 1.77%) 77.08
squid 414235 ( 3.01%) 167563032 ( 1.65%) 404.51
smtp 331353 ( 2.41%) 48965979 ( 0.48%) 147.78
ftp 80492 ( 0.59%) 82899826 ( 0.82%) 1029.91
pop3 5096 ( 0.04%) 2982253 ( 0.03%) 585.21
imap 1707 ( 0.01%) 253425 ( 0.00%) 148.46
telnet 16511 ( 0.12%) 4134047 ( 0.04%) 250.38
ssh 10576 ( 0.08%) 2175413 ( 0.02%) 205.69
dns 15458 ( 0.11%) 3530487 ( 0.03%) 228.39
bgp 146 ( 0.00%) 52129 ( 0.00%) 357.05
napster 113 ( 0.00%) 6952 ( 0.00%) 61.52
realaud 19 ( 0.00%) 2532 ( 0.00%) 133.26
rtsp 75 ( 0.00%) 17942 ( 0.00%) 239.23
icecast 417 ( 0.00%) 27016 ( 0.00%) 64.79
hotline 1028 ( 0.01%) 63687 ( 0.00%) 61.95
other 2047614 ( 14.90%) 1320163069 ( 13.03%) 644.73
udp 2049979 ( 14.92%) 808763584 ( 7.98%) 394.52
dns 988664 ( 7.20%) 206337788 ( 2.04%) 208.70
realaud 11 ( 0.00%) 965 ( 0.00%) 87.73
halflif 116 ( 0.00%) 19304 ( 0.00%) 166.41
starcra 36 ( 0.00%) 12090 ( 0.00%) 335.83
everque 56 ( 0.00%) 11305 ( 0.00%) 201.88
unreal 322 ( 0.00%) 134317 ( 0.00%) 417.13
quake 15 ( 0.00%) 1968 ( 0.00%) 131.20
cuseeme 10 ( 0.00%) 1184 ( 0.00%) 118.40
other 1060573 ( 7.72%) 602095197 ( 5.94%) 567.71
icmp 1051159 ( 7.65%) 123454251 ( 1.22%) 117.45
ipip 344 ( 0.00%) 41665 ( 0.00%) 121.12
ipsec 53 ( 0.00%) 8374 ( 0.00%) 158.00
ip6 20288 ( 0.15%) 3473383 ( 0.03%) 171.20
other 6056 ( 0.04%) 831452 ( 0.01%) 137.29
frag 44901 ( 0.33%) 49088979 ( 0.48%) 1093.27
ip6 27561 ( 0.20%) 6884597 ( 0.07%) 249.79
tcp6 9339 ( 0.07%) 3917207 ( 0.04%) 419.45
http(s) 2136 ( 0.02%) 1522580 ( 0.02%) 712.82
http(c) 4864 ( 0.04%) 850799 ( 0.01%) 174.92
smtp 320 ( 0.00%) 143700 ( 0.00%) 449.06
bgp 364 ( 0.00%) 30338 ( 0.00%) 83.35
other 1655 ( 0.01%) 1369790 ( 0.01%) 827.67
udp6 11014 ( 0.08%) 1782032 ( 0.02%) 161.80
dns 9900 ( 0.07%) 1579474 ( 0.02%) 159.54
other 1114 ( 0.01%) 202558 ( 0.00%) 181.83
icmp6 6849 ( 0.05%) 884587 ( 0.01%) 129.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 329 ( 0.00%) 296691 ( 0.00%) 901.80
tcpdump file: 200903300230.dump.gz (332.34 MB)