Traffic Trace Info
DumpFile: 200903300845.dump
FileSize: 688.89MB
Id: 200903300845
StartTime: Mon Mar 30 08:45:00 2009
EndTime: Mon Mar 30 09:00:00 2009
TotalTime: 900.04 seconds
TotalCapSize: 535.94MB CapLen: 96 bytes
# of packets: 10023108 (6284.71MB)
AvgRate: 58.58Mbps stddev:11.52M
IP flow (unique src/dst pair) Information
# of flows: 624709 (avg. 16.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.1% 2.5% 1.8% 1.8% 1.4% 1.3% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 403574
Top 10 bandwidth usage (bytes/total in %):
11.9% 11.4% 9.3% 5.3% 5.0% 4.8% 3.9% 3.9% 3.4% 3.4%
# of IPv6 addresses: 1643
Top 10 bandwidth usage (bytes/total in %):
37.9% 24.5% 15.5% 13.5% 10.5% 8.8% 7.0% 7.0% 6.5% 6.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300845.pktlen.png)
detailed numbers
[ 32- 63]: 2187952
[ 64- 127]: 2580121
[ 128- 255]: 507666
[ 256- 511]: 353370
[ 512- 1023]: 285297
[ 1024- 2047]: 4108702
Protocol Breakdown
![[protocol breakdown chart]](200903300845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10023108 (100.00%) 6589996265 (100.00%) 657.48
ip 9993727 ( 99.71%) 6580638144 ( 99.86%) 658.48
tcp 7114315 ( 70.98%) 5414089686 ( 82.16%) 761.01
http(s) 2925956 ( 29.19%) 3852634596 ( 58.46%) 1316.71
http(c) 1537801 ( 15.34%) 144890972 ( 2.20%) 94.22
squid 319425 ( 3.19%) 132113299 ( 2.00%) 413.60
smtp 219858 ( 2.19%) 69501607 ( 1.05%) 316.12
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 64821 ( 0.65%) 35617186 ( 0.54%) 549.47
pop3 12928 ( 0.13%) 4273950 ( 0.06%) 330.60
imap 1985 ( 0.02%) 423897 ( 0.01%) 213.55
telnet 913 ( 0.01%) 67004 ( 0.00%) 73.39
ssh 333912 ( 3.33%) 51102737 ( 0.78%) 153.04
dns 10332 ( 0.10%) 1045066 ( 0.02%) 101.15
bgp 141 ( 0.00%) 46424 ( 0.00%) 329.25
napster 97 ( 0.00%) 8619 ( 0.00%) 88.86
realaud 22 ( 0.00%) 1578 ( 0.00%) 71.73
rtsp 1417 ( 0.01%) 1518507 ( 0.02%) 1071.64
icecast 144 ( 0.00%) 11128 ( 0.00%) 77.28
hotline 9 ( 0.00%) 1767 ( 0.00%) 196.33
other 1684550 ( 16.81%) 1120831109 ( 17.01%) 665.36
udp 2129913 ( 21.25%) 1066551588 ( 16.18%) 500.75
dns 769945 ( 7.68%) 183414577 ( 2.78%) 238.22
realaud 12 ( 0.00%) 1925 ( 0.00%) 160.42
halflif 147 ( 0.00%) 26319 ( 0.00%) 179.04
starcra 40 ( 0.00%) 7570 ( 0.00%) 189.25
everque 68 ( 0.00%) 15004 ( 0.00%) 220.65
unreal 727 ( 0.01%) 359021 ( 0.01%) 493.84
quake 11 ( 0.00%) 1471 ( 0.00%) 133.73
cuseeme 5 ( 0.00%) 483 ( 0.00%) 96.60
other 1341924 ( 13.39%) 879235076 ( 13.34%) 655.20
icmp 715533 ( 7.14%) 89895209 ( 1.36%) 125.63
ipip 314 ( 0.00%) 38444 ( 0.00%) 122.43
ipsec 95 ( 0.00%) 15090 ( 0.00%) 158.84
ip6 27621 ( 0.28%) 9272202 ( 0.14%) 335.69
other 5936 ( 0.06%) 775925 ( 0.01%) 130.72
frag 68194 ( 0.68%) 63233514 ( 0.96%) 927.26
ip6 29381 ( 0.29%) 9358121 ( 0.14%) 318.51
tcp6 9336 ( 0.09%) 6030694 ( 0.09%) 645.96
http(s) 1960 ( 0.02%) 1637140 ( 0.02%) 835.28
http(c) 3448 ( 0.03%) 661833 ( 0.01%) 191.95
smtp 83 ( 0.00%) 34846 ( 0.00%) 419.83
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 365 ( 0.00%) 30348 ( 0.00%) 83.15
other 3478 ( 0.03%) 3666355 ( 0.06%) 1054.16
udp6 12515 ( 0.12%) 2011158 ( 0.03%) 160.70
dns 10485 ( 0.10%) 1589241 ( 0.02%) 151.57
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
quake 1 ( 0.00%) 120 ( 0.00%) 120.00
other 2028 ( 0.02%) 421681 ( 0.01%) 207.93
icmp6 7075 ( 0.07%) 907137 ( 0.01%) 128.22
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 425 ( 0.00%) 405052 ( 0.01%) 953.06
tcpdump file: 200903300845.dump.gz (241.25 MB)