Traffic Trace Info
DumpFile: 200903300930.dump
FileSize: 986.71MB
Id: 200903300930
StartTime: Mon Mar 30 09:30:00 2009
EndTime: Mon Mar 30 09:45:00 2009
TotalTime: 900.03 seconds
TotalCapSize: 774.14MB CapLen: 96 bytes
# of packets: 13930286 (10696.04MB)
AvgRate: 99.69Mbps stddev:14.38M
IP flow (unique src/dst pair) Information
# of flows: 572929 (avg. 24.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
27.2% 2.0% 1.8% 1.4% 1.2% 1.1% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 381003
Top 10 bandwidth usage (bytes/total in %):
27.2% 27.2% 8.2% 7.4% 5.4% 5.4% 3.3% 2.6% 2.1% 2.0%
# of IPv6 addresses: 1571
Top 10 bandwidth usage (bytes/total in %):
54.0% 53.8% 10.2% 8.5% 8.5% 8.3% 4.5% 4.0% 4.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300930.pktlen.png)
detailed numbers
[ 32- 63]: 2624249
[ 64- 127]: 2469983
[ 128- 255]: 562711
[ 256- 511]: 710085
[ 512- 1023]: 374953
[ 1024- 2047]: 7188305
Protocol Breakdown
![[protocol breakdown chart]](200903300930.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13930286 (100.00%) 11215616064 (100.00%) 805.12
ip 13794045 ( 99.02%) 11200643960 ( 99.87%) 811.99
tcp 11314023 ( 81.22%) 10218317003 ( 91.11%) 903.16
http(s) 4151887 ( 29.80%) 5620699729 ( 50.11%) 1353.77
http(c) 2211549 ( 15.88%) 197631217 ( 1.76%) 89.36
squid 313382 ( 2.25%) 165238597 ( 1.47%) 527.28
smtp 249491 ( 1.79%) 53613475 ( 0.48%) 214.89
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 89379 ( 0.64%) 101016519 ( 0.90%) 1130.20
pop3 14833 ( 0.11%) 13775379 ( 0.12%) 928.70
imap 4518 ( 0.03%) 2652330 ( 0.02%) 587.06
telnet 647 ( 0.00%) 58170 ( 0.00%) 89.91
ssh 2620602 ( 18.81%) 3054415349 ( 27.23%) 1165.54
dns 13301 ( 0.10%) 3309850 ( 0.03%) 248.84
bgp 187 ( 0.00%) 84569 ( 0.00%) 452.24
napster 103 ( 0.00%) 6698 ( 0.00%) 65.03
realaud 17 ( 0.00%) 2384 ( 0.00%) 140.24
rtsp 44133 ( 0.32%) 2850339 ( 0.03%) 64.59
icecast 221 ( 0.00%) 15265 ( 0.00%) 69.07
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1599770 ( 11.48%) 1002946951 ( 8.94%) 626.93
udp 2013223 ( 14.45%) 905850667 ( 8.08%) 449.95
dns 940253 ( 6.75%) 234936917 ( 2.09%) 249.87
realaud 22 ( 0.00%) 1843 ( 0.00%) 83.77
halflif 144 ( 0.00%) 23458 ( 0.00%) 162.90
starcra 40 ( 0.00%) 7060 ( 0.00%) 176.50
everque 57 ( 0.00%) 10417 ( 0.00%) 182.75
unreal 684 ( 0.00%) 464859 ( 0.00%) 679.62
quake 19 ( 0.00%) 4102 ( 0.00%) 215.89
cuseeme 3 ( 0.00%) 243 ( 0.00%) 81.00
other 1071874 ( 7.69%) 670293356 ( 5.98%) 625.35
icmp 433828 ( 3.11%) 66616044 ( 0.59%) 153.55
ipip 325 ( 0.00%) 40770 ( 0.00%) 125.45
ipsec 132 ( 0.00%) 21872 ( 0.00%) 165.70
ip6 24358 ( 0.17%) 6927023 ( 0.06%) 284.38
other 8156 ( 0.06%) 2870581 ( 0.03%) 351.96
frag 34820 ( 0.25%) 37955410 ( 0.34%) 1090.05
ip6 136241 ( 0.98%) 14972104 ( 0.13%) 109.89
tcp6 116365 ( 0.84%) 11680696 ( 0.10%) 100.38
http(s) 1841 ( 0.01%) 1559749 ( 0.01%) 847.23
http(c) 3441 ( 0.02%) 603900 ( 0.01%) 175.50
smtp 175 ( 0.00%) 70813 ( 0.00%) 404.65
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 368 ( 0.00%) 30965 ( 0.00%) 84.14
other 110538 ( 0.79%) 9415097 ( 0.08%) 85.18
udp6 12804 ( 0.09%) 1974442 ( 0.02%) 154.21
dns 11674 ( 0.08%) 1755689 ( 0.02%) 150.39
other 1130 ( 0.01%) 218753 ( 0.00%) 193.59
icmp6 6555 ( 0.05%) 851767 ( 0.01%) 129.94
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 487 ( 0.00%) 461119 ( 0.00%) 946.86
tcpdump file: 200903300930.dump.gz (321.38 MB)