Traffic Trace Info
DumpFile: 200903300330.dump
FileSize: 941.09MB
Id: 200903300330
StartTime: Mon Mar 30 03:30:00 2009
EndTime: Mon Mar 30 03:45:01 2009
TotalTime: 900.29 seconds
TotalCapSize: 730.97MB CapLen: 96 bytes
# of packets: 13769898 (9241.88MB)
AvgRate: 86.11Mbps stddev:9.05M
IP flow (unique src/dst pair) Information
# of flows: 808741 (avg. 17.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 2.5% 2.3% 1.5% 1.2% 0.9% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 522129
Top 10 bandwidth usage (bytes/total in %):
19.8% 13.6% 12.0% 8.0% 6.7% 6.7% 3.7% 2.5% 2.3% 2.3%
# of IPv6 addresses: 1685
Top 10 bandwidth usage (bytes/total in %):
19.8% 18.3% 17.8% 13.9% 10.2% 9.2% 7.8% 6.4% 6.0% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300330.pktlen.png)
detailed numbers
[ 32- 63]: 3142445
[ 64- 127]: 3188226
[ 128- 255]: 710742
[ 256- 511]: 409085
[ 512- 1023]: 291558
[ 1024- 2047]: 6027842
Protocol Breakdown
![[protocol breakdown chart]](200903300330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13769898 (100.00%) 9690814616 (100.00%) 703.77
ip 13741899 ( 99.80%) 9683644575 ( 99.93%) 704.68
tcp 9986389 ( 72.52%) 8276659134 ( 85.41%) 828.79
http(s) 4878812 ( 35.43%) 6665492375 ( 68.78%) 1366.21
http(c) 2179785 ( 15.83%) 202179184 ( 2.09%) 92.75
squid 428008 ( 3.11%) 153532589 ( 1.58%) 358.71
smtp 386733 ( 2.81%) 47535642 ( 0.49%) 122.92
ftp 113221 ( 0.82%) 118398059 ( 1.22%) 1045.73
pop3 4921 ( 0.04%) 2676405 ( 0.03%) 543.87
imap 1530 ( 0.01%) 276053 ( 0.00%) 180.43
telnet 2303 ( 0.02%) 151850 ( 0.00%) 65.94
ssh 8384 ( 0.06%) 1887968 ( 0.02%) 225.19
dns 16639 ( 0.12%) 4201407 ( 0.04%) 252.50
bgp 132 ( 0.00%) 35140 ( 0.00%) 266.21
napster 97 ( 0.00%) 5820 ( 0.00%) 60.00
realaud 19 ( 0.00%) 2508 ( 0.00%) 132.00
rtsp 182 ( 0.00%) 34799 ( 0.00%) 191.20
icecast 253 ( 0.00%) 17952 ( 0.00%) 70.96
hotline 1040 ( 0.01%) 64434 ( 0.00%) 61.96
other 1964289 ( 14.27%) 1080164489 ( 11.15%) 549.90
udp 2631514 ( 19.11%) 1272419826 ( 13.13%) 483.53
dns 1158913 ( 8.42%) 228950184 ( 2.36%) 197.56
realaud 11 ( 0.00%) 860 ( 0.00%) 78.18
halflif 230 ( 0.00%) 31305 ( 0.00%) 136.11
starcra 24 ( 0.00%) 5095 ( 0.00%) 212.29
everque 80 ( 0.00%) 14624 ( 0.00%) 182.80
unreal 9 ( 0.00%) 1762 ( 0.00%) 195.78
quake 14 ( 0.00%) 1093 ( 0.00%) 78.07
cuseeme 9 ( 0.00%) 1067 ( 0.00%) 118.56
other 1471999 ( 10.69%) 1043214133 ( 10.76%) 708.71
icmp 1095110 ( 7.95%) 129021716 ( 1.33%) 117.82
ipip 316 ( 0.00%) 37618 ( 0.00%) 119.04
ipsec 53 ( 0.00%) 8374 ( 0.00%) 158.00
ip6 22646 ( 0.16%) 4697593 ( 0.05%) 207.44
other 5871 ( 0.04%) 800314 ( 0.01%) 136.32
frag 55813 ( 0.41%) 57693659 ( 0.60%) 1033.70
ip6 27997 ( 0.20%) 7169921 ( 0.07%) 256.10
tcp6 9439 ( 0.07%) 4037008 ( 0.04%) 427.69
http(s) 2302 ( 0.02%) 1727543 ( 0.02%) 750.45
http(c) 4635 ( 0.03%) 721727 ( 0.01%) 155.71
smtp 357 ( 0.00%) 177349 ( 0.00%) 496.78
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 359 ( 0.00%) 30208 ( 0.00%) 84.14
other 1784 ( 0.01%) 1380009 ( 0.01%) 773.55
udp6 11128 ( 0.08%) 1852342 ( 0.02%) 166.46
dns 9829 ( 0.07%) 1628109 ( 0.02%) 165.64
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1297 ( 0.01%) 224025 ( 0.00%) 172.73
icmp6 7031 ( 0.05%) 938059 ( 0.01%) 133.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 369 ( 0.00%) 338432 ( 0.00%) 917.16
tcpdump file: 200903300330.dump.gz (331.69 MB)