Traffic Trace Info
DumpFile: 200903300645.dump
FileSize: 734.58MB
Id: 200903300645
StartTime: Mon Mar 30 06:45:00 2009
EndTime: Mon Mar 30 07:00:01 2009
TotalTime: 900.43 seconds
TotalCapSize: 570.32MB CapLen: 96 bytes
# of packets: 10764580 (7818.37MB)
AvgRate: 72.84Mbps stddev:10.96M
IP flow (unique src/dst pair) Information
# of flows: 602603 (avg. 17.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.7% 2.9% 2.9% 2.7% 2.6% 1.6% 1.5% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 369350
Top 10 bandwidth usage (bytes/total in %):
15.8% 11.6% 11.0% 10.9% 9.7% 6.1% 5.9% 5.8% 2.7% 2.7%
# of IPv6 addresses: 1523
Top 10 bandwidth usage (bytes/total in %):
23.0% 22.8% 18.1% 16.1% 11.1% 11.0% 6.5% 6.0% 4.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300645.pktlen.png)
detailed numbers
[ 32- 63]: 2439920
[ 64- 127]: 2012253
[ 128- 255]: 490570
[ 256- 511]: 327845
[ 512- 1023]: 208574
[ 1024- 2047]: 5285418
Protocol Breakdown
![[protocol breakdown chart]](200903300645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10764580 (100.00%) 8198153878 (100.00%) 761.59
ip 10741390 ( 99.78%) 8192626273 ( 99.93%) 762.72
tcp 8321894 ( 77.31%) 7165721433 ( 87.41%) 861.07
http(s) 4032247 ( 37.46%) 5488821671 ( 66.95%) 1361.23
http(c) 1830626 ( 17.01%) 141052297 ( 1.72%) 77.05
squid 250723 ( 2.33%) 89520728 ( 1.09%) 357.05
smtp 218393 ( 2.03%) 38049127 ( 0.46%) 174.22
ftp 126914 ( 1.18%) 134029076 ( 1.63%) 1056.06
pop3 3892 ( 0.04%) 1555302 ( 0.02%) 399.62
imap 1364 ( 0.01%) 215439 ( 0.00%) 157.95
telnet 2081 ( 0.02%) 165953 ( 0.00%) 79.75
ssh 138409 ( 1.29%) 14996008 ( 0.18%) 108.35
dns 11891 ( 0.11%) 1218518 ( 0.01%) 102.47
bgp 132 ( 0.00%) 40952 ( 0.00%) 310.24
napster 129 ( 0.00%) 7818 ( 0.00%) 60.60
realaud 15 ( 0.00%) 1046 ( 0.00%) 69.73
rtsp 45 ( 0.00%) 11655 ( 0.00%) 259.00
icecast 335 ( 0.00%) 73940 ( 0.00%) 220.72
hotline 6 ( 0.00%) 630 ( 0.00%) 105.00
other 1704666 ( 15.84%) 1255959713 ( 15.32%) 736.78
udp 1961159 ( 18.22%) 946892917 ( 11.55%) 482.82
dns 874116 ( 8.12%) 198559759 ( 2.42%) 227.15
realaud 15 ( 0.00%) 2112 ( 0.00%) 140.80
halflif 114 ( 0.00%) 22275 ( 0.00%) 195.39
starcra 60 ( 0.00%) 12175 ( 0.00%) 202.92
everque 57 ( 0.00%) 12242 ( 0.00%) 214.77
unreal 1359 ( 0.01%) 828294 ( 0.01%) 609.49
quake 15 ( 0.00%) 1520 ( 0.00%) 101.33
cuseeme 5 ( 0.00%) 606 ( 0.00%) 121.20
other 1085255 ( 10.08%) 747305098 ( 9.12%) 688.60
icmp 428601 ( 3.98%) 72220672 ( 0.88%) 168.50
ipip 330 ( 0.00%) 40870 ( 0.00%) 123.85
ipsec 53 ( 0.00%) 8374 ( 0.00%) 158.00
ip6 23347 ( 0.22%) 6951065 ( 0.08%) 297.73
other 6006 ( 0.06%) 790942 ( 0.01%) 131.69
frag 52361 ( 0.49%) 53729024 ( 0.66%) 1026.13
ip6 23190 ( 0.22%) 5527605 ( 0.07%) 238.36
tcp6 7206 ( 0.07%) 2902469 ( 0.04%) 402.79
http(s) 1242 ( 0.01%) 891063 ( 0.01%) 717.44
http(c) 3739 ( 0.03%) 557949 ( 0.01%) 149.22
smtp 79 ( 0.00%) 38289 ( 0.00%) 484.67
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 353 ( 0.00%) 29099 ( 0.00%) 82.43
other 1791 ( 0.02%) 1385897 ( 0.02%) 773.81
udp6 8574 ( 0.08%) 1360980 ( 0.02%) 158.73
dns 7336 ( 0.07%) 1110150 ( 0.01%) 151.33
other 1238 ( 0.01%) 250830 ( 0.00%) 202.61
icmp6 7001 ( 0.07%) 900313 ( 0.01%) 128.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 379 ( 0.00%) 359763 ( 0.00%) 949.24
tcpdump file: 200903300645.dump.gz (255.07 MB)