Traffic Trace Info
DumpFile: 200903300500.dump
FileSize: 823.10MB
Id: 200903300500
StartTime: Mon Mar 30 05:00:00 2009
EndTime: Mon Mar 30 05:15:00 2009
TotalTime: 900.45 seconds
TotalCapSize: 640.70MB CapLen: 96 bytes
# of packets: 11952953 (8368.44MB)
AvgRate: 77.96Mbps stddev:10.50M
IP flow (unique src/dst pair) Information
# of flows: 798648 (avg. 14.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.1% 1.7% 1.4% 1.3% 1.3% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 453901
Top 10 bandwidth usage (bytes/total in %):
20.3% 16.6% 9.9% 7.4% 4.2% 3.9% 2.5% 2.4% 2.1% 1.7%
# of IPv6 addresses: 1819
Top 10 bandwidth usage (bytes/total in %):
36.2% 19.1% 17.8% 10.0% 9.0% 8.6% 6.5% 5.8% 5.4% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300500.pktlen.png)
detailed numbers
[ 32- 63]: 2718707
[ 64- 127]: 2506030
[ 128- 255]: 625924
[ 256- 511]: 338551
[ 512- 1023]: 237449
[ 1024- 2047]: 5526292
Protocol Breakdown
![[protocol breakdown chart]](200903300500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11952953 (100.00%) 8774947640 (100.00%) 734.12
ip 11923966 ( 99.76%) 8767704309 ( 99.92%) 735.30
tcp 9370734 ( 78.40%) 7972858337 ( 90.86%) 850.83
http(s) 4684994 ( 39.20%) 6477767775 ( 73.82%) 1382.66
http(c) 2187411 ( 18.30%) 165571634 ( 1.89%) 75.69
squid 447856 ( 3.75%) 195796976 ( 2.23%) 437.19
smtp 312543 ( 2.61%) 34973294 ( 0.40%) 111.90
ftp 100461 ( 0.84%) 102880265 ( 1.17%) 1024.08
pop3 4119 ( 0.03%) 1774836 ( 0.02%) 430.89
imap 1570 ( 0.01%) 298811 ( 0.00%) 190.33
telnet 3243 ( 0.03%) 213607 ( 0.00%) 65.87
ssh 72016 ( 0.60%) 8404676 ( 0.10%) 116.71
dns 12499 ( 0.10%) 1260926 ( 0.01%) 100.88
bgp 139 ( 0.00%) 47244 ( 0.00%) 339.88
napster 85 ( 0.00%) 5177 ( 0.00%) 60.91
realaud 11 ( 0.00%) 798 ( 0.00%) 72.55
rtsp 45 ( 0.00%) 11655 ( 0.00%) 259.00
icecast 239 ( 0.00%) 15872 ( 0.00%) 66.41
hotline 1090 ( 0.01%) 67793 ( 0.00%) 62.20
other 1542404 ( 12.90%) 983766458 ( 11.21%) 637.81
udp 1835188 ( 15.35%) 682319616 ( 7.78%) 371.80
dns 941448 ( 7.88%) 205806238 ( 2.35%) 218.61
realaud 13 ( 0.00%) 2196 ( 0.00%) 168.92
halflif 93 ( 0.00%) 14137 ( 0.00%) 152.01
starcra 28 ( 0.00%) 5378 ( 0.00%) 192.07
everque 51 ( 0.00%) 10364 ( 0.00%) 203.22
unreal 462 ( 0.00%) 264027 ( 0.00%) 571.49
quake 21 ( 0.00%) 2489 ( 0.00%) 118.52
cuseeme 4 ( 0.00%) 654 ( 0.00%) 163.50
other 892845 ( 7.47%) 476025284 ( 5.42%) 533.16
icmp 683200 ( 5.72%) 101244177 ( 1.15%) 148.19
ipip 327 ( 0.00%) 39906 ( 0.00%) 122.04
ipsec 53 ( 0.00%) 8374 ( 0.00%) 158.00
ip6 28029 ( 0.23%) 10334086 ( 0.12%) 368.69
other 6435 ( 0.05%) 899813 ( 0.01%) 139.83
frag 50133 ( 0.42%) 53217138 ( 0.61%) 1061.52
ip6 28987 ( 0.24%) 7243331 ( 0.08%) 249.88
tcp6 9332 ( 0.08%) 3962195 ( 0.05%) 424.58
http(s) 754 ( 0.01%) 467758 ( 0.01%) 620.37
http(c) 5178 ( 0.04%) 641813 ( 0.01%) 123.95
smtp 65 ( 0.00%) 20856 ( 0.00%) 320.86
ftp 15 ( 0.00%) 1505 ( 0.00%) 100.33
ssh 3 ( 0.00%) 246 ( 0.00%) 82.00
bgp 357 ( 0.00%) 29614 ( 0.00%) 82.95
other 2960 ( 0.02%) 2800403 ( 0.03%) 946.08
udp6 12175 ( 0.10%) 2127498 ( 0.02%) 174.74
dns 10064 ( 0.08%) 1686558 ( 0.02%) 167.58
halflif 1 ( 0.00%) 96 ( 0.00%) 96.00
other 2110 ( 0.02%) 440844 ( 0.01%) 208.93
icmp6 7220 ( 0.06%) 935177 ( 0.01%) 129.53
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 229 ( 0.00%) 214245 ( 0.00%) 935.57
tcpdump file: 200903300500.dump.gz (292.86 MB)