Traffic Trace Info
DumpFile: 200903300430.dump
FileSize: 852.83MB
Id: 200903300430
StartTime: Mon Mar 30 04:30:00 2009
EndTime: Mon Mar 30 04:45:00 2009
TotalTime: 900.12 seconds
TotalCapSize: 664.71MB CapLen: 96 bytes
# of packets: 12328271 (8703.04MB)
AvgRate: 82.25Mbps stddev:11.87M
IP flow (unique src/dst pair) Information
# of flows: 789843 (avg. 15.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 2.3% 2.1% 1.6% 1.3% 1.3% 1.2% 1.2% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 519662
Top 10 bandwidth usage (bytes/total in %):
21.5% 14.8% 9.2% 7.4% 4.1% 2.9% 2.5% 2.3% 2.1% 2.1%
# of IPv6 addresses: 1691
Top 10 bandwidth usage (bytes/total in %):
21.3% 20.8% 14.6% 13.5% 10.8% 8.8% 6.0% 5.7% 4.9% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300430.pktlen.png)
detailed numbers
[ 32- 63]: 2707822
[ 64- 127]: 2702525
[ 128- 255]: 597618
[ 256- 511]: 350359
[ 512- 1023]: 209492
[ 1024- 2047]: 5760455
Protocol Breakdown
![[protocol breakdown chart]](200903300430.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12328271 (100.00%) 9125798168 (100.00%) 740.23
ip 12302688 ( 99.79%) 9119940488 ( 99.94%) 741.30
tcp 9389299 ( 76.16%) 8346101821 ( 91.46%) 888.90
http(s) 4741013 ( 38.46%) 6584814215 ( 72.16%) 1388.90
http(c) 1960974 ( 15.91%) 148921765 ( 1.63%) 75.94
squid 443310 ( 3.60%) 204955786 ( 2.25%) 462.33
smtp 432230 ( 3.51%) 261780890 ( 2.87%) 605.65
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 63426 ( 0.51%) 50053645 ( 0.55%) 789.17
pop3 3752 ( 0.03%) 1480154 ( 0.02%) 394.50
imap 1415 ( 0.01%) 187260 ( 0.00%) 132.34
telnet 4560 ( 0.04%) 295539 ( 0.00%) 64.81
ssh 40291 ( 0.33%) 3843629 ( 0.04%) 95.40
dns 15151 ( 0.12%) 3645041 ( 0.04%) 240.58
bgp 131 ( 0.00%) 39381 ( 0.00%) 300.62
napster 78 ( 0.00%) 4686 ( 0.00%) 60.08
realaud 26 ( 0.00%) 4258 ( 0.00%) 163.77
rtsp 46 ( 0.00%) 11268 ( 0.00%) 244.96
icecast 65804 ( 0.53%) 3950712 ( 0.04%) 60.04
hotline 1042 ( 0.01%) 64724 ( 0.00%) 62.12
other 1616024 ( 13.11%) 1082047308 ( 11.86%) 669.57
udp 1818972 ( 14.75%) 639686028 ( 7.01%) 351.67
dns 905901 ( 7.35%) 192679580 ( 2.11%) 212.69
realaud 6 ( 0.00%) 1008 ( 0.00%) 168.00
halflif 127 ( 0.00%) 21288 ( 0.00%) 167.62
starcra 41 ( 0.00%) 8708 ( 0.00%) 212.39
everque 57 ( 0.00%) 10812 ( 0.00%) 189.68
unreal 8 ( 0.00%) 1108 ( 0.00%) 138.50
quake 14 ( 0.00%) 1158 ( 0.00%) 82.71
cuseeme 6 ( 0.00%) 959 ( 0.00%) 159.83
other 912636 ( 7.40%) 446815988 ( 4.90%) 489.59
icmp 1061810 ( 8.61%) 125646698 ( 1.38%) 118.33
ipip 331 ( 0.00%) 39902 ( 0.00%) 120.55
ipsec 51 ( 0.00%) 8058 ( 0.00%) 158.00
ip6 26040 ( 0.21%) 7631040 ( 0.08%) 293.05
other 6185 ( 0.05%) 826941 ( 0.01%) 133.70
frag 86039 ( 0.70%) 80440735 ( 0.88%) 934.93
ip6 25583 ( 0.21%) 5857680 ( 0.06%) 228.97
tcp6 6856 ( 0.06%) 2745077 ( 0.03%) 400.39
http(s) 1102 ( 0.01%) 794634 ( 0.01%) 721.08
http(c) 3553 ( 0.03%) 515603 ( 0.01%) 145.12
smtp 168 ( 0.00%) 97438 ( 0.00%) 579.99
bgp 359 ( 0.00%) 30842 ( 0.00%) 85.91
other 1674 ( 0.01%) 1306560 ( 0.01%) 780.50
udp6 11003 ( 0.09%) 1896037 ( 0.02%) 172.32
dns 9740 ( 0.08%) 1661714 ( 0.02%) 170.61
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1262 ( 0.01%) 234207 ( 0.00%) 185.58
icmp6 7395 ( 0.06%) 933138 ( 0.01%) 126.18
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 300 ( 0.00%) 279484 ( 0.00%) 931.61
tcpdump file: 200903300430.dump.gz (296.60 MB)