Traffic Trace Info
DumpFile: 200903300345.dump
FileSize: 902.76MB
Id: 200903300345
StartTime: Mon Mar 30 03:45:01 2009
EndTime: Mon Mar 30 04:00:01 2009
TotalTime: 899.90 seconds
TotalCapSize: 702.53MB CapLen: 96 bytes
# of packets: 13121600 (9195.72MB)
AvgRate: 85.72Mbps stddev:11.34M
IP flow (unique src/dst pair) Information
# of flows: 847409 (avg. 15.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.1% 1.3% 1.2% 1.1% 0.9% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 505727
Top 10 bandwidth usage (bytes/total in %):
19.9% 13.8% 9.6% 7.5% 3.8% 2.6% 2.5% 2.1% 2.1% 1.7%
# of IPv6 addresses: 2029
Top 10 bandwidth usage (bytes/total in %):
26.9% 26.4% 15.6% 14.3% 10.0% 9.9% 6.3% 5.6% 2.7% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300345.pktlen.png)
detailed numbers
[ 32- 63]: 3129840
[ 64- 127]: 2612774
[ 128- 255]: 668722
[ 256- 511]: 399325
[ 512- 1023]: 248350
[ 1024- 2047]: 6062589
Protocol Breakdown
![[protocol breakdown chart]](200903300345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13121600 (100.00%) 9642415298 (100.00%) 734.85
ip 13093999 ( 99.79%) 9635729888 ( 99.93%) 735.89
tcp 10346528 ( 78.85%) 8805825685 ( 91.32%) 851.09
http(s) 5112417 ( 38.96%) 7050517221 ( 73.12%) 1379.10
http(c) 2203865 ( 16.80%) 169590118 ( 1.76%) 76.95
squid 405245 ( 3.09%) 138253502 ( 1.43%) 341.16
smtp 306284 ( 2.33%) 58247795 ( 0.60%) 190.18
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 127433 ( 0.97%) 119715207 ( 1.24%) 939.44
pop3 4981 ( 0.04%) 2452186 ( 0.03%) 492.31
imap 1582 ( 0.01%) 202542 ( 0.00%) 128.03
telnet 1585 ( 0.01%) 103947 ( 0.00%) 65.58
ssh 9028 ( 0.07%) 1959801 ( 0.02%) 217.08
dns 95072 ( 0.72%) 123963682 ( 1.29%) 1303.89
bgp 137 ( 0.00%) 38335 ( 0.00%) 279.82
napster 121 ( 0.00%) 9028 ( 0.00%) 74.61
realaud 43 ( 0.00%) 7520 ( 0.00%) 174.88
rtsp 746 ( 0.01%) 268776 ( 0.00%) 360.29
icecast 66517 ( 0.51%) 3996607 ( 0.04%) 60.08
hotline 970 ( 0.01%) 60746 ( 0.00%) 62.62
other 2010499 ( 15.32%) 1136438492 ( 11.79%) 565.25
udp 2038069 ( 15.53%) 722098479 ( 7.49%) 354.31
dns 1077293 ( 8.21%) 224897818 ( 2.33%) 208.76
realaud 688 ( 0.01%) 44692 ( 0.00%) 64.96
halflif 135 ( 0.00%) 21165 ( 0.00%) 156.78
starcra 37 ( 0.00%) 6563 ( 0.00%) 177.38
everque 66 ( 0.00%) 12988 ( 0.00%) 196.79
unreal 7 ( 0.00%) 969 ( 0.00%) 138.43
quake 277 ( 0.00%) 19436 ( 0.00%) 70.17
cuseeme 4 ( 0.00%) 634 ( 0.00%) 158.50
other 959323 ( 7.31%) 496878769 ( 5.15%) 517.95
icmp 676290 ( 5.15%) 98631759 ( 1.02%) 145.84
ipip 309 ( 0.00%) 39098 ( 0.00%) 126.53
ipsec 53 ( 0.00%) 8374 ( 0.00%) 158.00
ip6 26446 ( 0.20%) 8260093 ( 0.09%) 312.34
other 6304 ( 0.05%) 866400 ( 0.01%) 137.44
frag 68475 ( 0.52%) 68001258 ( 0.71%) 993.08
ip6 27601 ( 0.21%) 6685410 ( 0.07%) 242.22
tcp6 8477 ( 0.06%) 3344067 ( 0.03%) 394.49
http(s) 1093 ( 0.01%) 668541 ( 0.01%) 611.66
http(c) 5045 ( 0.04%) 717732 ( 0.01%) 142.27
smtp 155 ( 0.00%) 73356 ( 0.00%) 473.26
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 353 ( 0.00%) 29099 ( 0.00%) 82.43
other 1829 ( 0.01%) 1855167 ( 0.02%) 1014.31
udp6 11350 ( 0.09%) 2028374 ( 0.02%) 178.71
dns 8959 ( 0.07%) 1415348 ( 0.01%) 157.98
other 2391 ( 0.02%) 613026 ( 0.01%) 256.39
icmp6 7378 ( 0.06%) 969754 ( 0.01%) 131.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 366 ( 0.00%) 339135 ( 0.00%) 926.60
tcpdump file: 200903300345.dump.gz (320.76 MB)