Traffic Trace Info
DumpFile: 200903300945.dump
FileSize: 1060.25MB
Id: 200903300945
StartTime: Mon Mar 30 09:45:00 2009
EndTime: Mon Mar 30 10:00:01 2009
TotalTime: 900.40 seconds
TotalCapSize: 831.75MB CapLen: 96 bytes
# of packets: 14973490 (10260.16MB)
AvgRate: 96.11Mbps stddev:19.30M
IP flow (unique src/dst pair) Information
# of flows: 627858 (avg. 23.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
21.9% 2.1% 1.9% 1.4% 1.1% 1.1% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 424239
Top 10 bandwidth usage (bytes/total in %):
22.0% 22.0% 8.5% 7.8% 6.4% 4.3% 4.1% 3.6% 3.0% 2.7%
# of IPv6 addresses: 1841
Top 10 bandwidth usage (bytes/total in %):
16.7% 16.6% 14.6% 14.6% 14.6% 13.1% 11.2% 7.2% 7.1% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903300945.pktlen.png)
detailed numbers
[ 32- 63]: 2469760
[ 64- 127]: 3666219
[ 128- 255]: 747391
[ 256- 511]: 716470
[ 512- 1023]: 659996
[ 1024- 2047]: 6713654
Protocol Breakdown
![[protocol breakdown chart]](200903300945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14973490 (100.00%) 10758557853 (100.00%) 718.51
ip 14924955 ( 99.68%) 10749927215 ( 99.92%) 720.27
tcp 12243859 ( 81.77%) 9589681886 ( 89.14%) 783.22
http(s) 4041619 ( 26.99%) 5429304012 ( 50.46%) 1343.35
http(c) 2226033 ( 14.87%) 196009677 ( 1.82%) 88.05
squid 303331 ( 2.03%) 144891247 ( 1.35%) 477.67
smtp 243666 ( 1.63%) 69309104 ( 0.64%) 284.44
nntp 3 ( 0.00%) 184 ( 0.00%) 61.33
ftp 84916 ( 0.57%) 84353840 ( 0.78%) 993.38
pop3 8433 ( 0.06%) 3190628 ( 0.03%) 378.35
imap 30513 ( 0.20%) 38466203 ( 0.36%) 1260.65
telnet 1023 ( 0.01%) 144635 ( 0.00%) 141.38
ssh 3535108 ( 23.61%) 2487342196 ( 23.12%) 703.61
dns 11075 ( 0.07%) 1123963 ( 0.01%) 101.49
bgp 156 ( 0.00%) 51399 ( 0.00%) 329.48
napster 92 ( 0.00%) 7415 ( 0.00%) 80.60
realaud 21 ( 0.00%) 1440 ( 0.00%) 68.57
rtsp 349 ( 0.00%) 167784 ( 0.00%) 480.76
icecast 287 ( 0.00%) 19934 ( 0.00%) 69.46
hotline 11 ( 0.00%) 970 ( 0.00%) 88.18
other 1757222 ( 11.74%) 1135297195 ( 10.55%) 646.07
udp 2226724 ( 14.87%) 1083982032 ( 10.08%) 486.81
dns 1032066 ( 6.89%) 246992207 ( 2.30%) 239.32
realaud 240 ( 0.00%) 18513 ( 0.00%) 77.14
halflif 114 ( 0.00%) 19220 ( 0.00%) 168.60
starcra 63 ( 0.00%) 11309 ( 0.00%) 179.51
everque 61 ( 0.00%) 11422 ( 0.00%) 187.25
unreal 2559 ( 0.02%) 1846474 ( 0.02%) 721.56
quake 11 ( 0.00%) 1528 ( 0.00%) 138.91
cuseeme 5 ( 0.00%) 799 ( 0.00%) 159.80
other 1191331 ( 7.96%) 834898768 ( 7.76%) 700.81
icmp 419940 ( 2.80%) 66967283 ( 0.62%) 159.47
ipip 312 ( 0.00%) 37570 ( 0.00%) 120.42
ipsec 114 ( 0.00%) 18116 ( 0.00%) 158.91
ip6 27876 ( 0.19%) 8412777 ( 0.08%) 301.79
other 6130 ( 0.04%) 827551 ( 0.01%) 135.00
frag 35841 ( 0.24%) 39013609 ( 0.36%) 1088.52
ip6 48535 ( 0.32%) 8630638 ( 0.08%) 177.82
tcp6 26115 ( 0.17%) 4740342 ( 0.04%) 181.52
http(s) 1657 ( 0.01%) 1257432 ( 0.01%) 758.86
http(c) 2852 ( 0.02%) 541918 ( 0.01%) 190.01
smtp 229 ( 0.00%) 113650 ( 0.00%) 496.29
ftp 2 ( 0.00%) 148 ( 0.00%) 74.00
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 381 ( 0.00%) 33548 ( 0.00%) 88.05
other 20992 ( 0.14%) 2793474 ( 0.03%) 133.07
udp6 15116 ( 0.10%) 2618154 ( 0.02%) 173.20
dns 12255 ( 0.08%) 1882652 ( 0.02%) 153.62
starcra 1 ( 0.00%) 566 ( 0.00%) 566.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2859 ( 0.02%) 734829 ( 0.01%) 257.02
icmp6 6877 ( 0.05%) 894698 ( 0.01%) 130.10
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 397 ( 0.00%) 373364 ( 0.00%) 940.46
tcpdump file: 200903300945.dump.gz (356.17 MB)