Traffic Trace Info
DumpFile: 200903300830.dump
FileSize: 630.20MB
Id: 200903300830
StartTime: Mon Mar 30 08:30:00 2009
EndTime: Mon Mar 30 08:45:00 2009
TotalTime: 899.85 seconds
TotalCapSize: 490.10MB CapLen: 96 bytes
# of packets: 9181112 (5946.49MB)
AvgRate: 55.44Mbps stddev:7.52M
IP flow (unique src/dst pair) Information
# of flows: 550212 (avg. 16.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 1.9% 1.9% 1.4% 1.4% 1.3% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 360704
Top 10 bandwidth usage (bytes/total in %):
13.8% 10.3% 6.3% 6.1% 4.7% 4.1% 3.9% 3.9% 3.6% 2.2%
# of IPv6 addresses: 1505
Top 10 bandwidth usage (bytes/total in %):
23.3% 17.8% 17.8% 15.4% 8.7% 8.5% 8.1% 6.8% 5.6% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300830.pktlen.png)
detailed numbers
[ 32- 63]: 1910741
[ 64- 127]: 2299267
[ 128- 255]: 506797
[ 256- 511]: 338491
[ 512- 1023]: 230069
[ 1024- 2047]: 3895747
Protocol Breakdown
![[protocol breakdown chart]](200903300830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9181112 (100.00%) 6235341488 (100.00%) 679.15
ip 9152911 ( 99.69%) 6228258988 ( 99.89%) 680.47
tcp 6631797 ( 72.23%) 5088001567 ( 81.60%) 767.21
http(s) 2848867 ( 31.03%) 3798847888 ( 60.92%) 1333.46
http(c) 1528970 ( 16.65%) 133555964 ( 2.14%) 87.35
squid 312006 ( 3.40%) 127939792 ( 2.05%) 410.06
smtp 198194 ( 2.16%) 42119137 ( 0.68%) 212.51
ftp 116447 ( 1.27%) 111884982 ( 1.79%) 960.82
pop3 11291 ( 0.12%) 3220799 ( 0.05%) 285.25
imap 2010 ( 0.02%) 395562 ( 0.01%) 196.80
telnet 512 ( 0.01%) 39971 ( 0.00%) 78.07
ssh 206172 ( 2.25%) 30195775 ( 0.48%) 146.46
dns 13432 ( 0.15%) 3342827 ( 0.05%) 248.87
bgp 151 ( 0.00%) 59000 ( 0.00%) 390.73
napster 97 ( 0.00%) 5820 ( 0.00%) 60.00
realaud 34 ( 0.00%) 3768 ( 0.00%) 110.82
rtsp 158 ( 0.00%) 48537 ( 0.00%) 307.20
icecast 154 ( 0.00%) 11666 ( 0.00%) 75.75
hotline 7 ( 0.00%) 432 ( 0.00%) 61.71
other 1393295 ( 15.18%) 836329647 ( 13.41%) 600.25
udp 2065645 ( 22.50%) 1062824929 ( 17.05%) 514.52
dns 751058 ( 8.18%) 170820433 ( 2.74%) 227.44
realaud 10 ( 0.00%) 1492 ( 0.00%) 149.20
halflif 139 ( 0.00%) 23570 ( 0.00%) 169.57
starcra 49 ( 0.00%) 8387 ( 0.00%) 171.16
everque 59 ( 0.00%) 12290 ( 0.00%) 208.31
unreal 669 ( 0.01%) 343300 ( 0.01%) 513.15
quake 11 ( 0.00%) 971 ( 0.00%) 88.27
cuseeme 3 ( 0.00%) 272 ( 0.00%) 90.67
other 1298660 ( 14.14%) 888530846 ( 14.25%) 684.19
icmp 426426 ( 4.64%) 70104732 ( 1.12%) 164.40
ipip 317 ( 0.00%) 39225 ( 0.00%) 123.74
ipsec 52 ( 0.00%) 8216 ( 0.00%) 158.00
ip6 22819 ( 0.25%) 6484522 ( 0.10%) 284.17
other 5855 ( 0.06%) 795797 ( 0.01%) 135.92
frag 64261 ( 0.70%) 60400954 ( 0.97%) 939.93
ip6 28201 ( 0.31%) 7082500 ( 0.11%) 251.14
tcp6 8489 ( 0.09%) 3991526 ( 0.06%) 470.20
http(s) 1873 ( 0.02%) 1417735 ( 0.02%) 756.93
http(c) 4106 ( 0.04%) 766937 ( 0.01%) 186.78
smtp 201 ( 0.00%) 53762 ( 0.00%) 267.47
bgp 371 ( 0.00%) 31872 ( 0.00%) 85.91
other 1938 ( 0.02%) 1721220 ( 0.03%) 888.14
udp6 11809 ( 0.13%) 1782249 ( 0.03%) 150.92
dns 10800 ( 0.12%) 1605903 ( 0.03%) 148.69
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
starcra 1 ( 0.00%) 139 ( 0.00%) 139.00
quake 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1006 ( 0.01%) 175984 ( 0.00%) 174.93
icmp6 7546 ( 0.08%) 1000389 ( 0.02%) 132.57
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 327 ( 0.00%) 304256 ( 0.00%) 930.45
tcpdump file: 200903300830.dump.gz (223.96 MB)