Traffic Trace Info
DumpFile: 200903300800.dump
FileSize: 642.41MB
Id: 200903300800
StartTime: Mon Mar 30 08:00:00 2009
EndTime: Mon Mar 30 08:15:00 2009
TotalTime: 899.89 seconds
TotalCapSize: 498.74MB CapLen: 96 bytes
# of packets: 9414981 (6353.24MB)
AvgRate: 59.22Mbps stddev:8.43M
IP flow (unique src/dst pair) Information
# of flows: 734557 (avg. 12.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.7% 1.9% 1.8% 1.6% 1.6% 1.5% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 518510
Top 10 bandwidth usage (bytes/total in %):
15.4% 8.2% 6.5% 6.0% 5.5% 5.3% 4.7% 3.5% 3.4% 3.2%
# of IPv6 addresses: 1742
Top 10 bandwidth usage (bytes/total in %):
29.5% 19.0% 18.2% 14.8% 12.3% 9.2% 7.3% 6.0% 5.8% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300800.pktlen.png)
detailed numbers
[ 32- 63]: 1922117
[ 64- 127]: 2208817
[ 128- 255]: 505382
[ 256- 511]: 337305
[ 512- 1023]: 285218
[ 1024- 2047]: 4156142
Protocol Breakdown
![[protocol breakdown chart]](200903300800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9414981 (100.00%) 6661855218 (100.00%) 707.58
ip 9377579 ( 99.60%) 6653310383 ( 99.87%) 709.49
tcp 6694165 ( 71.10%) 5380872257 ( 80.77%) 803.82
http(s) 2896992 ( 30.77%) 3886879913 ( 58.35%) 1341.70
http(c) 1389441 ( 14.76%) 116267754 ( 1.75%) 83.68
squid 240255 ( 2.55%) 78950453 ( 1.19%) 328.61
smtp 248701 ( 2.64%) 39575609 ( 0.59%) 159.13
ftp 139630 ( 1.48%) 148092246 ( 2.22%) 1060.60
pop3 10110 ( 0.11%) 2561613 ( 0.04%) 253.37
imap 1830 ( 0.02%) 325364 ( 0.00%) 177.79
telnet 590 ( 0.01%) 40582 ( 0.00%) 68.78
ssh 81125 ( 0.86%) 26880848 ( 0.40%) 331.35
dns 11362 ( 0.12%) 1144380 ( 0.02%) 100.72
bgp 137 ( 0.00%) 44752 ( 0.00%) 326.66
napster 87 ( 0.00%) 5240 ( 0.00%) 60.23
realaud 20 ( 0.00%) 1430 ( 0.00%) 71.50
rtsp 15289 ( 0.16%) 20906859 ( 0.31%) 1367.44
icecast 224 ( 0.00%) 15394 ( 0.00%) 68.72
hotline 14 ( 0.00%) 2415 ( 0.00%) 172.50
other 1658357 ( 17.61%) 1059177345 ( 15.90%) 638.69
udp 2211083 ( 23.48%) 1185192102 ( 17.79%) 536.02
dns 801658 ( 8.51%) 180254310 ( 2.71%) 224.85
rip 1 ( 0.00%) 143 ( 0.00%) 143.00
realaud 18 ( 0.00%) 1431 ( 0.00%) 79.50
halflif 146 ( 0.00%) 24094 ( 0.00%) 165.03
starcra 38 ( 0.00%) 6738 ( 0.00%) 177.32
everque 59 ( 0.00%) 12522 ( 0.00%) 212.24
unreal 759 ( 0.01%) 445597 ( 0.01%) 587.08
quake 14 ( 0.00%) 1531 ( 0.00%) 109.36
cuseeme 8 ( 0.00%) 707 ( 0.00%) 88.38
other 1390290 ( 14.77%) 1000744722 ( 15.02%) 719.81
icmp 433679 ( 4.61%) 69186585 ( 1.04%) 159.53
ipip 313 ( 0.00%) 38242 ( 0.00%) 122.18
ipsec 52 ( 0.00%) 8216 ( 0.00%) 158.00
ip6 31325 ( 0.33%) 17045090 ( 0.26%) 544.14
other 6962 ( 0.07%) 967891 ( 0.01%) 139.02
frag 73811 ( 0.78%) 68679446 ( 1.03%) 930.48
ip6 37402 ( 0.40%) 8544835 ( 0.13%) 228.46
tcp6 17330 ( 0.18%) 5211802 ( 0.08%) 300.74
http(s) 1614 ( 0.02%) 1076256 ( 0.02%) 666.83
http(c) 12693 ( 0.13%) 1414062 ( 0.02%) 111.40
smtp 209 ( 0.00%) 75800 ( 0.00%) 362.68
bgp 356 ( 0.00%) 29470 ( 0.00%) 82.78
other 2458 ( 0.03%) 2616214 ( 0.04%) 1064.37
udp6 12620 ( 0.13%) 2082459 ( 0.03%) 165.01
dns 10607 ( 0.11%) 1637286 ( 0.02%) 154.36
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
other 2012 ( 0.02%) 445069 ( 0.01%) 221.21
icmp6 7061 ( 0.07%) 906599 ( 0.01%) 128.40
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 360 ( 0.00%) 339759 ( 0.01%) 943.77
tcpdump file: 200903300800.dump.gz (223.75 MB)