Traffic Trace Info
DumpFile: 200903300445.dump
FileSize: 856.91MB
Id: 200903300445
StartTime: Mon Mar 30 04:45:00 2009
EndTime: Mon Mar 30 05:00:00 2009
TotalTime: 899.70 seconds
TotalCapSize: 667.31MB CapLen: 96 bytes
# of packets: 12424876 (8608.17MB)
AvgRate: 80.26Mbps stddev:11.61M
IP flow (unique src/dst pair) Information
# of flows: 685245 (avg. 18.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 2.3% 2.0% 1.4% 1.3% 1.2% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 446411
Top 10 bandwidth usage (bytes/total in %):
18.3% 16.2% 10.3% 8.1% 5.1% 3.4% 2.4% 2.3% 2.3% 2.0%
# of IPv6 addresses: 1647
Top 10 bandwidth usage (bytes/total in %):
41.3% 24.5% 17.2% 11.5% 8.4% 8.3% 7.8% 5.0% 4.6% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300445.pktlen.png)
detailed numbers
[ 32- 63]: 2640830
[ 64- 127]: 2858739
[ 128- 255]: 644312
[ 256- 511]: 347777
[ 512- 1023]: 233341
[ 1024- 2047]: 5699877
Protocol Breakdown
![[protocol breakdown chart]](200903300445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12424876 (100.00%) 9026324077 (100.00%) 726.47
ip 12398518 ( 99.79%) 9018795108 ( 99.92%) 727.41
tcp 9261074 ( 74.54%) 8170599021 ( 90.52%) 882.25
http(s) 4680365 ( 37.67%) 6472643844 ( 71.71%) 1382.94
http(c) 1953687 ( 15.72%) 147523981 ( 1.63%) 75.51
squid 424299 ( 3.41%) 197323290 ( 2.19%) 465.06
smtp 427085 ( 3.44%) 189862361 ( 2.10%) 444.55
ftp 80675 ( 0.65%) 76543512 ( 0.85%) 948.79
pop3 3692 ( 0.03%) 1568391 ( 0.02%) 424.81
imap 1556 ( 0.01%) 214289 ( 0.00%) 137.72
telnet 5471 ( 0.04%) 354467 ( 0.00%) 64.79
ssh 143815 ( 1.16%) 17639405 ( 0.20%) 122.65
dns 12771 ( 0.10%) 1297910 ( 0.01%) 101.63
bgp 138 ( 0.00%) 45217 ( 0.00%) 327.66
napster 77 ( 0.00%) 4620 ( 0.00%) 60.00
realaud 55 ( 0.00%) 3726 ( 0.00%) 67.75
rtsp 46 ( 0.00%) 11717 ( 0.00%) 254.72
icecast 219 ( 0.00%) 14156 ( 0.00%) 64.64
hotline 996 ( 0.01%) 65249 ( 0.00%) 65.51
other 1526127 ( 12.28%) 1065482886 ( 11.80%) 698.16
udp 1959582 ( 15.77%) 708349443 ( 7.85%) 361.48
dns 958475 ( 7.71%) 206562598 ( 2.29%) 215.51
realaud 16 ( 0.00%) 1606 ( 0.00%) 100.38
halflif 82 ( 0.00%) 12534 ( 0.00%) 152.85
starcra 37 ( 0.00%) 10582 ( 0.00%) 286.00
everque 66 ( 0.00%) 15740 ( 0.00%) 238.48
unreal 89 ( 0.00%) 46250 ( 0.00%) 519.66
quake 21 ( 0.00%) 5946 ( 0.00%) 283.14
cuseeme 8 ( 0.00%) 690 ( 0.00%) 86.25
other 1000595 ( 8.05%) 501518660 ( 5.56%) 501.22
icmp 1144450 ( 9.21%) 130015819 ( 1.44%) 113.61
ipip 302 ( 0.00%) 37382 ( 0.00%) 123.78
ipsec 53 ( 0.00%) 8374 ( 0.00%) 158.00
ip6 27262 ( 0.22%) 8996794 ( 0.10%) 330.01
other 5795 ( 0.05%) 788275 ( 0.01%) 136.03
frag 67557 ( 0.54%) 66462970 ( 0.74%) 983.81
ip6 26358 ( 0.21%) 7528969 ( 0.08%) 285.64
tcp6 7750 ( 0.06%) 4372062 ( 0.05%) 564.14
http(s) 890 ( 0.01%) 585194 ( 0.01%) 657.52
http(c) 3370 ( 0.03%) 492797 ( 0.01%) 146.23
smtp 108 ( 0.00%) 41553 ( 0.00%) 384.75
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 378 ( 0.00%) 32462 ( 0.00%) 85.88
other 3002 ( 0.02%) 3219884 ( 0.04%) 1072.58
udp6 10597 ( 0.09%) 1772302 ( 0.02%) 167.25
dns 9428 ( 0.08%) 1541316 ( 0.02%) 163.48
other 1169 ( 0.01%) 230986 ( 0.00%) 197.59
icmp6 7538 ( 0.06%) 970760 ( 0.01%) 128.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 443 ( 0.00%) 409765 ( 0.00%) 924.98
tcpdump file: 200903300445.dump.gz (297.36 MB)