Traffic Trace Info
DumpFile: 200903300745.dump
FileSize: 735.00MB
Id: 200903300745
StartTime: Mon Mar 30 07:45:00 2009
EndTime: Mon Mar 30 08:00:00 2009
TotalTime: 900.07 seconds
TotalCapSize: 565.97MB CapLen: 96 bytes
# of packets: 11077126 (7472.01MB)
AvgRate: 69.65Mbps stddev:8.50M
IP flow (unique src/dst pair) Information
# of flows: 603884 (avg. 18.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.5% 2.8% 1.6% 1.5% 1.5% 1.4% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 350835
Top 10 bandwidth usage (bytes/total in %):
13.1% 13.1% 12.3% 9.7% 8.5% 5.5% 5.3% 3.0% 2.8% 2.8%
# of IPv6 addresses: 1579
Top 10 bandwidth usage (bytes/total in %):
22.7% 22.7% 17.2% 17.0% 16.9% 11.5% 9.8% 8.2% 5.7% 5.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300745.pktlen.png)
detailed numbers
[ 32- 63]: 2036482
[ 64- 127]: 2723981
[ 128- 255]: 504050
[ 256- 511]: 436340
[ 512- 1023]: 741863
[ 1024- 2047]: 4634410
Protocol Breakdown
![[protocol breakdown chart]](200903300745.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11077126 (100.00%) 7834973241 (100.00%) 707.31
ip 11030383 ( 99.58%) 7827380540 ( 99.90%) 709.62
tcp 6751547 ( 60.95%) 5332364215 ( 68.06%) 789.80
http(s) 2886116 ( 26.05%) 3837013871 ( 48.97%) 1329.47
http(c) 1449040 ( 13.08%) 162649154 ( 2.08%) 112.25
squid 309886 ( 2.80%) 93101037 ( 1.19%) 300.44
smtp 216604 ( 1.96%) 36921899 ( 0.47%) 170.46
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 127317 ( 1.15%) 136514294 ( 1.74%) 1072.24
pop3 9064 ( 0.08%) 4441502 ( 0.06%) 490.02
imap 1668 ( 0.02%) 323358 ( 0.00%) 193.86
telnet 465 ( 0.00%) 32317 ( 0.00%) 69.50
ssh 73579 ( 0.66%) 20270085 ( 0.26%) 275.49
dns 9944 ( 0.09%) 1002007 ( 0.01%) 100.76
bgp 136 ( 0.00%) 40768 ( 0.00%) 299.76
napster 201 ( 0.00%) 12567 ( 0.00%) 62.52
realaud 20 ( 0.00%) 2758 ( 0.00%) 137.90
rtsp 16510 ( 0.15%) 22641720 ( 0.29%) 1371.39
icecast 250 ( 0.00%) 17955 ( 0.00%) 71.82
other 1650745 ( 14.90%) 1017378803 ( 12.99%) 616.31
udp 3745210 ( 33.81%) 2414696265 ( 30.82%) 644.74
dns 760974 ( 6.87%) 173508702 ( 2.21%) 228.01
realaud 20 ( 0.00%) 6719 ( 0.00%) 335.95
halflif 178 ( 0.00%) 30692 ( 0.00%) 172.43
starcra 50 ( 0.00%) 9507 ( 0.00%) 190.14
everque 63 ( 0.00%) 12839 ( 0.00%) 203.79
unreal 906 ( 0.01%) 535727 ( 0.01%) 591.31
quake 7 ( 0.00%) 822 ( 0.00%) 117.43
cuseeme 4 ( 0.00%) 684 ( 0.00%) 171.00
other 2969521 ( 26.81%) 2237805177 ( 28.56%) 753.59
icmp 503410 ( 4.54%) 73003436 ( 0.93%) 145.02
ipip 320 ( 0.00%) 38956 ( 0.00%) 121.74
ipsec 53 ( 0.00%) 8374 ( 0.00%) 158.00
ip6 23616 ( 0.21%) 6458891 ( 0.08%) 273.50
other 6227 ( 0.06%) 810403 ( 0.01%) 130.14
frag 63805 ( 0.58%) 60843408 ( 0.78%) 953.58
ip6 46743 ( 0.42%) 7592701 ( 0.10%) 162.44
tcp6 29978 ( 0.27%) 4754626 ( 0.06%) 158.60
http(s) 1332 ( 0.01%) 877763 ( 0.01%) 658.98
http(c) 26142 ( 0.24%) 2370273 ( 0.03%) 90.67
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 257 ( 0.00%) 89829 ( 0.00%) 349.53
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 366 ( 0.00%) 31110 ( 0.00%) 85.00
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 1876 ( 0.02%) 1385257 ( 0.02%) 738.41
udp6 9597 ( 0.09%) 1523513 ( 0.02%) 158.75
dns 8316 ( 0.08%) 1234464 ( 0.02%) 148.44
starcra 1 ( 0.00%) 100 ( 0.00%) 100.00
other 1280 ( 0.01%) 288949 ( 0.00%) 225.74
icmp6 6656 ( 0.06%) 854568 ( 0.01%) 128.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 482 ( 0.00%) 455914 ( 0.01%) 945.88
tcpdump file: 200903300745.dump.gz (250.41 MB)