Traffic Trace Info
DumpFile: 200903300315.dump
FileSize: 904.94MB
Id: 200903300315
StartTime: Mon Mar 30 03:15:01 2009
EndTime: Mon Mar 30 03:30:00 2009
TotalTime: 899.67 seconds
TotalCapSize: 702.53MB CapLen: 96 bytes
# of packets: 13264486 (9487.88MB)
AvgRate: 88.46Mbps stddev:10.37M
IP flow (unique src/dst pair) Information
# of flows: 685649 (avg. 19.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 2.2% 2.0% 1.4% 1.2% 1.2% 1.1% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 438685
Top 10 bandwidth usage (bytes/total in %):
18.3% 12.7% 11.9% 8.3% 5.9% 5.9% 3.7% 2.2% 2.2% 2.0%
# of IPv6 addresses: 2044
Top 10 bandwidth usage (bytes/total in %):
18.5% 18.1% 16.9% 12.2% 11.7% 9.2% 6.1% 5.7% 5.2% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300315.pktlen.png)
detailed numbers
[ 32- 63]: 3064665
[ 64- 127]: 2669772
[ 128- 255]: 650211
[ 256- 511]: 386732
[ 512- 1023]: 265821
[ 1024- 2047]: 6227285
Protocol Breakdown
![[protocol breakdown chart]](200903300315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13264486 (100.00%) 9948766296 (100.00%) 750.03
ip 13234735 ( 99.78%) 9941730744 ( 99.93%) 751.18
tcp 10198500 ( 76.89%) 8728242723 ( 87.73%) 855.84
http(s) 5001965 ( 37.71%) 6917273427 ( 69.53%) 1382.91
http(c) 2348575 ( 17.71%) 181416345 ( 1.82%) 77.25
squid 528777 ( 3.99%) 265341697 ( 2.67%) 501.80
smtp 292963 ( 2.21%) 38747511 ( 0.39%) 132.26
ftp 109620 ( 0.83%) 116769325 ( 1.17%) 1065.22
pop3 4448 ( 0.03%) 2271521 ( 0.02%) 510.68
imap 1570 ( 0.01%) 302289 ( 0.00%) 192.54
telnet 2401 ( 0.02%) 156957 ( 0.00%) 65.37
ssh 20162 ( 0.15%) 4476548 ( 0.04%) 222.03
dns 15545 ( 0.12%) 2858859 ( 0.03%) 183.91
bgp 135 ( 0.00%) 36142 ( 0.00%) 267.72
napster 75 ( 0.00%) 4502 ( 0.00%) 60.03
realaud 22 ( 0.00%) 1560 ( 0.00%) 70.91
rtsp 46 ( 0.00%) 11715 ( 0.00%) 254.67
icecast 214 ( 0.00%) 13914 ( 0.00%) 65.02
hotline 1070 ( 0.01%) 66346 ( 0.00%) 62.01
other 1870859 ( 14.10%) 1198490327 ( 12.05%) 640.61
udp 2335014 ( 17.60%) 1108361073 ( 11.14%) 474.67
dns 1103031 ( 8.32%) 218700804 ( 2.20%) 198.27
realaud 14 ( 0.00%) 1158 ( 0.00%) 82.71
halflif 240 ( 0.00%) 39571 ( 0.00%) 164.88
starcra 22 ( 0.00%) 3910 ( 0.00%) 177.73
everque 63 ( 0.00%) 12852 ( 0.00%) 204.00
unreal 72 ( 0.00%) 26195 ( 0.00%) 363.82
quake 10 ( 0.00%) 789 ( 0.00%) 78.90
cuseeme 5 ( 0.00%) 394 ( 0.00%) 78.80
other 1231351 ( 9.28%) 889406074 ( 8.94%) 722.30
icmp 670003 ( 5.05%) 98187824 ( 0.99%) 146.55
ipip 299 ( 0.00%) 37268 ( 0.00%) 124.64
ipsec 53 ( 0.00%) 8374 ( 0.00%) 158.00
ip6 24923 ( 0.19%) 6092219 ( 0.06%) 244.44
other 5943 ( 0.04%) 801263 ( 0.01%) 134.82
frag 50792 ( 0.38%) 54277646 ( 0.55%) 1068.63
ip6 29751 ( 0.22%) 7035552 ( 0.07%) 236.48
tcp6 10135 ( 0.08%) 3607133 ( 0.04%) 355.91
http(s) 1645 ( 0.01%) 1223378 ( 0.01%) 743.69
http(c) 6089 ( 0.05%) 854538 ( 0.01%) 140.34
smtp 219 ( 0.00%) 113216 ( 0.00%) 516.97
ftp 24 ( 0.00%) 2322 ( 0.00%) 96.75
ssh 26 ( 0.00%) 4624 ( 0.00%) 177.85
bgp 383 ( 0.00%) 33851 ( 0.00%) 88.38
other 1749 ( 0.01%) 1375204 ( 0.01%) 786.28
udp6 11698 ( 0.09%) 2183391 ( 0.02%) 186.65
dns 9395 ( 0.07%) 1571868 ( 0.02%) 167.31
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
other 2301 ( 0.02%) 611301 ( 0.01%) 265.67
icmp6 7625 ( 0.06%) 1000067 ( 0.01%) 131.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 263 ( 0.00%) 240881 ( 0.00%) 915.90
tcpdump file: 200903300315.dump.gz (324.14 MB)