Traffic Trace Info
DumpFile: 200903300900.dump
FileSize: 726.36MB
Id: 200903300900
StartTime: Mon Mar 30 09:00:00 2009
EndTime: Mon Mar 30 09:15:00 2009
TotalTime: 899.77 seconds
TotalCapSize: 563.74MB CapLen: 96 bytes
# of packets: 10657016 (6978.49MB)
AvgRate: 65.06Mbps stddev:10.45M
IP flow (unique src/dst pair) Information
# of flows: 879852 (avg. 12.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.9% 2.1% 1.6% 1.6% 1.5% 1.3% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 604274
Top 10 bandwidth usage (bytes/total in %):
11.1% 10.6% 5.5% 4.9% 4.7% 4.3% 3.8% 3.7% 3.0% 3.0%
# of IPv6 addresses: 1556
Top 10 bandwidth usage (bytes/total in %):
26.1% 15.6% 15.6% 13.4% 13.0% 12.9% 8.9% 6.4% 6.3% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300900.pktlen.png)
detailed numbers
[ 32- 63]: 2575607
[ 64- 127]: 2283897
[ 128- 255]: 508995
[ 256- 511]: 362638
[ 512- 1023]: 384636
[ 1024- 2047]: 4541243
Protocol Breakdown
![[protocol breakdown chart]](200903300900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10657016 (100.00%) 7317475957 (100.00%) 686.63
ip 10626092 ( 99.71%) 7307794796 ( 99.87%) 687.72
tcp 7770636 ( 72.92%) 5995769189 ( 81.94%) 771.59
http(s) 3338234 ( 31.32%) 4420339988 ( 60.41%) 1324.16
http(c) 1738411 ( 16.31%) 187005957 ( 2.56%) 107.57
squid 306285 ( 2.87%) 127190316 ( 1.74%) 415.27
smtp 214287 ( 2.01%) 53555113 ( 0.73%) 249.92
ftp 41299 ( 0.39%) 19825773 ( 0.27%) 480.05
pop3 16094 ( 0.15%) 3386428 ( 0.05%) 210.42
imap 7471 ( 0.07%) 3487769 ( 0.05%) 466.84
telnet 558 ( 0.01%) 36079 ( 0.00%) 64.66
ssh 117509 ( 1.10%) 12833659 ( 0.18%) 109.21
dns 10455 ( 0.10%) 1038450 ( 0.01%) 99.33
bgp 148 ( 0.00%) 43291 ( 0.00%) 292.51
napster 91 ( 0.00%) 5849 ( 0.00%) 64.27
realaud 12 ( 0.00%) 866 ( 0.00%) 72.17
rtsp 2269 ( 0.02%) 2488441 ( 0.03%) 1096.71
icecast 144 ( 0.00%) 9464 ( 0.00%) 65.72
hotline 4 ( 0.00%) 240 ( 0.00%) 60.00
other 1977365 ( 18.55%) 1164521506 ( 15.91%) 588.93
udp 2387566 ( 22.40%) 1231928389 ( 16.84%) 515.98
dns 859782 ( 8.07%) 217854121 ( 2.98%) 253.38
realaud 8 ( 0.00%) 786 ( 0.00%) 98.25
halflif 112 ( 0.00%) 20021 ( 0.00%) 178.76
starcra 16 ( 0.00%) 3321 ( 0.00%) 207.56
everque 61 ( 0.00%) 11041 ( 0.00%) 181.00
unreal 507 ( 0.00%) 202546 ( 0.00%) 399.50
quake 13 ( 0.00%) 1473 ( 0.00%) 113.31
cuseeme 1 ( 0.00%) 89 ( 0.00%) 89.00
other 1518116 ( 14.25%) 1011901272 ( 13.83%) 666.55
icmp 434809 ( 4.08%) 71985764 ( 0.98%) 165.56
ipip 317 ( 0.00%) 39502 ( 0.00%) 124.61
ipsec 114 ( 0.00%) 18012 ( 0.00%) 158.00
ip6 26432 ( 0.25%) 7049894 ( 0.10%) 266.72
other 6218 ( 0.06%) 1004046 ( 0.01%) 161.47
frag 55240 ( 0.52%) 54476038 ( 0.74%) 986.17
ip6 30924 ( 0.29%) 9681161 ( 0.13%) 313.06
tcp6 10700 ( 0.10%) 6490742 ( 0.09%) 606.61
http(s) 4115 ( 0.04%) 3021130 ( 0.04%) 734.17
http(c) 3283 ( 0.03%) 562006 ( 0.01%) 171.19
smtp 516 ( 0.00%) 263289 ( 0.00%) 510.25
ssh 3 ( 0.00%) 246 ( 0.00%) 82.00
bgp 373 ( 0.00%) 32032 ( 0.00%) 85.88
other 2410 ( 0.02%) 2612039 ( 0.04%) 1083.83
udp6 12917 ( 0.12%) 1994004 ( 0.03%) 154.37
dns 11847 ( 0.11%) 1802715 ( 0.02%) 152.17
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1069 ( 0.01%) 191181 ( 0.00%) 178.84
icmp6 6966 ( 0.07%) 901959 ( 0.01%) 129.48
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 310 ( 0.00%) 290240 ( 0.00%) 936.26
tcpdump file: 200903300900.dump.gz (252.55 MB)