Traffic Trace Info
DumpFile: 200903300300.dump
FileSize: 883.95MB
Id: 200903300300
StartTime: Mon Mar 30 03:00:00 2009
EndTime: Mon Mar 30 03:15:01 2009
TotalTime: 900.85 seconds
TotalCapSize: 685.69MB CapLen: 96 bytes
# of packets: 12992612 (8820.23MB)
AvgRate: 86.85Mbps stddev:15.26M
IP flow (unique src/dst pair) Information
# of flows: 717426 (avg. 18.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 2.2% 2.2% 1.6% 1.3% 1.2% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 466920
Top 10 bandwidth usage (bytes/total in %):
18.0% 12.8% 12.1% 7.7% 5.3% 5.3% 2.9% 2.3% 2.2% 2.2%
# of IPv6 addresses: 1619
Top 10 bandwidth usage (bytes/total in %):
33.1% 18.2% 16.9% 16.3% 10.8% 8.2% 8.0% 5.9% 5.5% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300300.pktlen.png)
detailed numbers
[ 32- 63]: 3157781
[ 64- 127]: 2780556
[ 128- 255]: 658024
[ 256- 511]: 344627
[ 512- 1023]: 243905
[ 1024- 2047]: 5807719
Protocol Breakdown
![[protocol breakdown chart]](200903300300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12992612 (100.00%) 9248680180 (100.00%) 711.84
ip 12965145 ( 99.79%) 9241059990 ( 99.92%) 712.76
tcp 9819072 ( 75.57%) 7985201537 ( 86.34%) 813.23
http(s) 4512796 ( 34.73%) 6193850503 ( 66.97%) 1372.51
http(c) 2425596 ( 18.67%) 178719171 ( 1.93%) 73.68
squid 478379 ( 3.68%) 231130018 ( 2.50%) 483.15
smtp 366278 ( 2.82%) 47707557 ( 0.52%) 130.25
ftp 91208 ( 0.70%) 93982208 ( 1.02%) 1030.42
pop3 4690 ( 0.04%) 2712141 ( 0.03%) 578.28
imap 1486 ( 0.01%) 330895 ( 0.00%) 222.67
telnet 3563 ( 0.03%) 233454 ( 0.00%) 65.52
ssh 23189 ( 0.18%) 6321132 ( 0.07%) 272.59
dns 14383 ( 0.11%) 2907584 ( 0.03%) 202.15
bgp 134 ( 0.00%) 41833 ( 0.00%) 312.19
napster 61 ( 0.00%) 3660 ( 0.00%) 60.00
realaud 17 ( 0.00%) 1248 ( 0.00%) 73.41
rtsp 79 ( 0.00%) 15590 ( 0.00%) 197.34
icecast 227 ( 0.00%) 14882 ( 0.00%) 65.56
hotline 933 ( 0.01%) 57866 ( 0.00%) 62.02
other 1896047 ( 14.59%) 1227171435 ( 13.27%) 647.23
udp 2446148 ( 18.83%) 1154951695 ( 12.49%) 472.15
dns 1068285 ( 8.22%) 212022128 ( 2.29%) 198.47
realaud 23 ( 0.00%) 6612 ( 0.00%) 287.48
halflif 202 ( 0.00%) 30752 ( 0.00%) 152.24
starcra 25 ( 0.00%) 3451 ( 0.00%) 138.04
everque 63 ( 0.00%) 12245 ( 0.00%) 194.37
unreal 309 ( 0.00%) 116787 ( 0.00%) 377.95
quake 24 ( 0.00%) 1982 ( 0.00%) 82.58
cuseeme 8 ( 0.00%) 1324 ( 0.00%) 165.50
other 1376998 ( 10.60%) 942592012 ( 10.19%) 684.53
icmp 672428 ( 5.18%) 95898427 ( 1.04%) 142.62
ipip 306 ( 0.00%) 38100 ( 0.00%) 124.51
ipsec 49 ( 0.00%) 7742 ( 0.00%) 158.00
ip6 20998 ( 0.16%) 4112207 ( 0.04%) 195.84
other 6144 ( 0.05%) 850282 ( 0.01%) 138.39
frag 44486 ( 0.34%) 48171417 ( 0.52%) 1082.84
ip6 27467 ( 0.21%) 7620190 ( 0.08%) 277.43
tcp6 9556 ( 0.07%) 4560390 ( 0.05%) 477.23
http(s) 1505 ( 0.01%) 1008421 ( 0.01%) 670.05
http(c) 4912 ( 0.04%) 724345 ( 0.01%) 147.46
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 336 ( 0.00%) 178443 ( 0.00%) 531.08
ftp 10 ( 0.00%) 922 ( 0.00%) 92.20
ssh 3 ( 0.00%) 246 ( 0.00%) 82.00
bgp 330 ( 0.00%) 27812 ( 0.00%) 84.28
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 2457 ( 0.02%) 2619979 ( 0.03%) 1066.33
udp6 10546 ( 0.08%) 1718607 ( 0.02%) 162.96
dns 9497 ( 0.07%) 1536174 ( 0.02%) 161.75
other 1049 ( 0.01%) 182433 ( 0.00%) 173.91
icmp6 6870 ( 0.05%) 908804 ( 0.01%) 132.29
pim6 28 ( 0.00%) 3808 ( 0.00%) 136.00
other6 467 ( 0.00%) 428581 ( 0.00%) 917.73
tcpdump file: 200903300300.dump.gz (315.45 MB)