Traffic Trace Info
DumpFile: 200903300815.dump
FileSize: 612.19MB
Id: 200903300815
StartTime: Mon Mar 30 08:15:00 2009
EndTime: Mon Mar 30 08:30:00 2009
TotalTime: 899.88 seconds
TotalCapSize: 475.48MB CapLen: 96 bytes
# of packets: 8958547 (5932.76MB)
AvgRate: 55.30Mbps stddev:7.46M
IP flow (unique src/dst pair) Information
# of flows: 717576 (avg. 12.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.5% 2.0% 1.9% 1.8% 1.7% 1.7% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 478249
Top 10 bandwidth usage (bytes/total in %):
16.1% 11.7% 6.8% 6.5% 6.1% 4.3% 4.1% 3.8% 3.4% 2.5%
# of IPv6 addresses: 1605
Top 10 bandwidth usage (bytes/total in %):
22.0% 19.5% 19.5% 14.9% 12.3% 9.4% 7.9% 7.2% 5.0% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300815.pktlen.png)
detailed numbers
[ 32- 63]: 1890846
[ 64- 127]: 2125021
[ 128- 255]: 461977
[ 256- 511]: 334865
[ 512- 1023]: 236757
[ 1024- 2047]: 3909081
Protocol Breakdown
![[protocol breakdown chart]](200903300815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8958547 (100.00%) 6220953696 (100.00%) 694.42
ip 8929578 ( 99.68%) 6214479616 ( 99.90%) 695.94
tcp 6418289 ( 71.64%) 5045586047 ( 81.11%) 786.13
http(s) 2723930 ( 30.41%) 3621942028 ( 58.22%) 1329.68
http(c) 1423279 ( 15.89%) 122026642 ( 1.96%) 85.74
squid 271272 ( 3.03%) 105557834 ( 1.70%) 389.12
smtp 204477 ( 2.28%) 44300252 ( 0.71%) 216.65
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 145852 ( 1.63%) 153885899 ( 2.47%) 1055.08
pop3 10519 ( 0.12%) 1934268 ( 0.03%) 183.88
imap 1922 ( 0.02%) 427273 ( 0.01%) 222.31
telnet 755 ( 0.01%) 55943 ( 0.00%) 74.10
ssh 104703 ( 1.17%) 15962557 ( 0.26%) 152.46
dns 11048 ( 0.12%) 1115325 ( 0.02%) 100.95
bgp 142 ( 0.00%) 51551 ( 0.00%) 363.04
napster 77 ( 0.00%) 4620 ( 0.00%) 60.00
realaud 28 ( 0.00%) 1968 ( 0.00%) 70.29
rtsp 175 ( 0.00%) 51945 ( 0.00%) 296.83
icecast 194 ( 0.00%) 12800 ( 0.00%) 65.98
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1519910 ( 16.97%) 978254782 ( 15.73%) 643.63
udp 1994281 ( 22.26%) 1079876075 ( 17.36%) 541.49
dns 703713 ( 7.86%) 160014126 ( 2.57%) 227.39
realaud 10 ( 0.00%) 1465 ( 0.00%) 146.50
halflif 149 ( 0.00%) 36914 ( 0.00%) 247.74
starcra 44 ( 0.00%) 7543 ( 0.00%) 171.43
everque 63 ( 0.00%) 15736 ( 0.00%) 249.78
unreal 729 ( 0.01%) 411402 ( 0.01%) 564.34
quake 7 ( 0.00%) 627 ( 0.00%) 89.57
cuseeme 3 ( 0.00%) 277 ( 0.00%) 92.33
other 1276090 ( 14.24%) 916593155 ( 14.73%) 718.28
icmp 479218 ( 5.35%) 73028694 ( 1.17%) 152.39
ipip 319 ( 0.00%) 38554 ( 0.00%) 120.86
ipsec 53 ( 0.00%) 8374 ( 0.00%) 158.00
ip6 31089 ( 0.35%) 15108185 ( 0.24%) 485.97
other 6329 ( 0.07%) 833687 ( 0.01%) 131.72
frag 62180 ( 0.69%) 59064857 ( 0.95%) 949.90
ip6 28969 ( 0.32%) 6474080 ( 0.10%) 223.48
tcp6 10283 ( 0.11%) 3311631 ( 0.05%) 322.05
http(s) 1538 ( 0.02%) 964859 ( 0.02%) 627.35
http(c) 6681 ( 0.07%) 902531 ( 0.01%) 135.09
smtp 147 ( 0.00%) 53417 ( 0.00%) 363.38
bgp 364 ( 0.00%) 30906 ( 0.00%) 84.91
other 1553 ( 0.02%) 1359918 ( 0.02%) 875.67
udp6 11018 ( 0.12%) 1738497 ( 0.03%) 157.79
dns 9774 ( 0.11%) 1441763 ( 0.02%) 147.51
starcra 1 ( 0.00%) 566 ( 0.00%) 566.00
other 1243 ( 0.01%) 296168 ( 0.00%) 238.27
icmp6 7114 ( 0.08%) 921222 ( 0.01%) 129.49
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 524 ( 0.01%) 498650 ( 0.01%) 951.62
tcpdump file: 200903300815.dump.gz (215.07 MB)