Traffic Trace Info
DumpFile: 200903300915.dump
FileSize: 808.43MB
Id: 200903300915
StartTime: Mon Mar 30 09:15:00 2009
EndTime: Mon Mar 30 09:30:00 2009
TotalTime: 900.62 seconds
TotalCapSize: 628.58MB CapLen: 96 bytes
# of packets: 11785964 (7967.06MB)
AvgRate: 74.20Mbps stddev:9.61M
IP flow (unique src/dst pair) Information
# of flows: 652507 (avg. 18.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.7% 2.5% 1.4% 1.4% 1.4% 1.3% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 445135
Top 10 bandwidth usage (bytes/total in %):
12.2% 10.3% 9.7% 8.5% 4.4% 4.1% 4.0% 3.4% 2.8% 2.7%
# of IPv6 addresses: 1959
Top 10 bandwidth usage (bytes/total in %):
21.3% 21.2% 14.6% 13.8% 13.8% 10.2% 10.1% 6.9% 6.9% 6.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300915.pktlen.png)
detailed numbers
[ 32- 63]: 3107494
[ 64- 127]: 2258108
[ 128- 255]: 530332
[ 256- 511]: 356432
[ 512- 1023]: 331966
[ 1024- 2047]: 5201632
Protocol Breakdown
![[protocol breakdown chart]](200903300915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11785964 (100.00%) 8354071984 (100.00%) 708.82
ip 11731316 ( 99.54%) 8344841357 ( 99.89%) 711.33
tcp 9247651 ( 78.46%) 7431035106 ( 88.95%) 803.56
http(s) 4347544 ( 36.89%) 5927656034 ( 70.96%) 1363.45
http(c) 2493883 ( 21.16%) 226067985 ( 2.71%) 90.65
squid 297594 ( 2.52%) 140156597 ( 1.68%) 470.97
smtp 206379 ( 1.75%) 37608301 ( 0.45%) 182.23
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 38157 ( 0.32%) 23654539 ( 0.28%) 619.93
pop3 9377 ( 0.08%) 2305010 ( 0.03%) 245.82
imap 5679 ( 0.05%) 4867727 ( 0.06%) 857.15
telnet 801 ( 0.01%) 71505 ( 0.00%) 89.27
ssh 18312 ( 0.16%) 3970693 ( 0.05%) 216.84
dns 10509 ( 0.09%) 1039443 ( 0.01%) 98.91
bgp 131 ( 0.00%) 44191 ( 0.00%) 337.34
napster 87 ( 0.00%) 7020 ( 0.00%) 80.69
realaud 25 ( 0.00%) 2419 ( 0.00%) 96.76
rtsp 81588 ( 0.69%) 6628732 ( 0.08%) 81.25
icecast 164 ( 0.00%) 14617 ( 0.00%) 89.13
hotline 5 ( 0.00%) 611 ( 0.00%) 122.20
other 1737414 ( 14.74%) 1056939560 ( 12.65%) 608.34
udp 1931324 ( 16.39%) 827270551 ( 9.90%) 428.34
dns 857285 ( 7.27%) 218328416 ( 2.61%) 254.67
realaud 11 ( 0.00%) 1604 ( 0.00%) 145.82
halflif 121 ( 0.00%) 21840 ( 0.00%) 180.50
starcra 45 ( 0.00%) 8894 ( 0.00%) 197.64
everque 76 ( 0.00%) 13001 ( 0.00%) 171.07
unreal 505 ( 0.00%) 291944 ( 0.00%) 578.11
quake 9 ( 0.00%) 1249 ( 0.00%) 138.78
cuseeme 6 ( 0.00%) 520 ( 0.00%) 86.67
other 1073099 ( 9.10%) 608462365 ( 7.28%) 567.01
icmp 518830 ( 4.40%) 76840252 ( 0.92%) 148.10
ipip 294 ( 0.00%) 35092 ( 0.00%) 119.36
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 26663 ( 0.23%) 8766660 ( 0.10%) 328.79
other 6442 ( 0.05%) 876000 ( 0.01%) 135.98
frag 38453 ( 0.33%) 40970007 ( 0.49%) 1065.46
ip6 54648 ( 0.46%) 9230627 ( 0.11%) 168.91
tcp6 33615 ( 0.29%) 5681984 ( 0.07%) 169.03
http(s) 1970 ( 0.02%) 1757519 ( 0.02%) 892.14
http(c) 3090 ( 0.03%) 556736 ( 0.01%) 180.17
smtp 57 ( 0.00%) 14535 ( 0.00%) 255.00
ftp 9 ( 0.00%) 900 ( 0.00%) 100.00
bgp 360 ( 0.00%) 29715 ( 0.00%) 82.54
other 28129 ( 0.24%) 3322579 ( 0.04%) 118.12
udp6 13573 ( 0.12%) 2306005 ( 0.03%) 169.90
dns 11272 ( 0.10%) 1689082 ( 0.02%) 149.85
starcra 2 ( 0.00%) 672 ( 0.00%) 336.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2298 ( 0.02%) 616145 ( 0.01%) 268.12
icmp6 7087 ( 0.06%) 920079 ( 0.01%) 129.83
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 343 ( 0.00%) 318479 ( 0.00%) 928.51
tcpdump file: 200903300915.dump.gz (273.14 MB)