Traffic Trace Info
DumpFile: 200903301000.dump
FileSize: 1011.78MB
Id: 200903301000
StartTime: Mon Mar 30 10:00:01 2009
EndTime: Mon Mar 30 10:15:00 2009
TotalTime: 899.08 seconds
TotalCapSize: 790.57MB CapLen: 96 bytes
# of packets: 14495789 (9379.05MB)
AvgRate: 87.50Mbps stddev:16.23M
IP flow (unique src/dst pair) Information
# of flows: 631331 (avg. 22.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 5.2% 2.3% 2.1% 2.0% 1.8% 1.8% 1.3% 1.2% 0.9%
IP address Information
# of IPv4 addresses: 386818
Top 10 bandwidth usage (bytes/total in %):
16.0% 9.4% 8.7% 5.9% 5.8% 5.3% 4.4% 3.7% 3.1% 3.0%
# of IPv6 addresses: 1878
Top 10 bandwidth usage (bytes/total in %):
64.6% 64.6% 10.8% 5.8% 5.4% 5.4% 4.5% 3.1% 2.8% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301000.pktlen.png)
detailed numbers
[ 32- 63]: 2979351
[ 64- 127]: 3690918
[ 128- 255]: 734197
[ 256- 511]: 433801
[ 512- 1023]: 592613
[ 1024- 2047]: 6064909
Protocol Breakdown
![[protocol breakdown chart]](200903301000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14495789 (100.00%) 9834643577 (100.00%) 678.45
ip 14455407 ( 99.72%) 9811168527 ( 99.76%) 678.72
tcp 11848510 ( 81.74%) 8730843428 ( 88.78%) 736.87
http(s) 4647233 ( 32.06%) 6231995861 ( 63.37%) 1341.01
http(c) 2442974 ( 16.85%) 228082341 ( 2.32%) 93.36
squid 286939 ( 1.98%) 111930309 ( 1.14%) 390.08
smtp 243204 ( 1.68%) 60923371 ( 0.62%) 250.50
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 88777 ( 0.61%) 94530855 ( 0.96%) 1064.81
pop3 7906 ( 0.05%) 3857015 ( 0.04%) 487.86
imap 7531 ( 0.05%) 4066718 ( 0.04%) 540.00
telnet 1338 ( 0.01%) 185652 ( 0.00%) 138.75
ssh 1707694 ( 11.78%) 389959454 ( 3.97%) 228.35
dns 10888 ( 0.08%) 1106459 ( 0.01%) 101.62
bgp 134 ( 0.00%) 42906 ( 0.00%) 320.19
napster 97 ( 0.00%) 5870 ( 0.00%) 60.52
realaud 8 ( 0.00%) 592 ( 0.00%) 74.00
rtsp 25412 ( 0.18%) 1686299 ( 0.02%) 66.36
icecast 230 ( 0.00%) 17280 ( 0.00%) 75.13
hotline 145 ( 0.00%) 8944 ( 0.00%) 61.68
other 2377998 ( 16.40%) 1602443378 ( 16.29%) 673.86
udp 2163978 ( 14.93%) 1034576064 ( 10.52%) 478.09
dns 991857 ( 6.84%) 261299521 ( 2.66%) 263.44
realaud 7 ( 0.00%) 1102 ( 0.00%) 157.43
halflif 155 ( 0.00%) 27568 ( 0.00%) 177.86
starcra 22 ( 0.00%) 3485 ( 0.00%) 158.41
everque 68 ( 0.00%) 12571 ( 0.00%) 184.87
unreal 2285 ( 0.02%) 1656312 ( 0.02%) 724.86
quake 13 ( 0.00%) 1400 ( 0.00%) 107.69
cuseeme 7 ( 0.00%) 1025 ( 0.00%) 146.43
other 1168490 ( 8.06%) 771018278 ( 7.84%) 659.84
icmp 411925 ( 2.84%) 38292679 ( 0.39%) 92.96
ipip 331 ( 0.00%) 40582 ( 0.00%) 122.60
ipsec 116 ( 0.00%) 18256 ( 0.00%) 157.38
ip6 24398 ( 0.17%) 6550193 ( 0.07%) 268.47
other 6149 ( 0.04%) 847325 ( 0.01%) 137.80
frag 43027 ( 0.30%) 46329283 ( 0.47%) 1076.75
ip6 40382 ( 0.28%) 23475050 ( 0.24%) 581.32
tcp6 18085 ( 0.12%) 19754430 ( 0.20%) 1092.31
http(s) 11748 ( 0.08%) 16382084 ( 0.17%) 1394.46
http(c) 3107 ( 0.02%) 574945 ( 0.01%) 185.05
smtp 334 ( 0.00%) 147805 ( 0.00%) 442.53
ftp 19 ( 0.00%) 1775 ( 0.00%) 93.42
bgp 368 ( 0.00%) 31193 ( 0.00%) 84.76
other 2509 ( 0.02%) 2616628 ( 0.03%) 1042.90
udp6 14984 ( 0.10%) 2546964 ( 0.03%) 169.98
dns 13278 ( 0.09%) 2067721 ( 0.02%) 155.73
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
halflif 1 ( 0.00%) 111 ( 0.00%) 111.00
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1703 ( 0.01%) 478918 ( 0.00%) 281.22
icmp6 7005 ( 0.05%) 911732 ( 0.01%) 130.15
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 277 ( 0.00%) 257708 ( 0.00%) 930.35
tcpdump file: 200903301000.dump.gz (361.49 MB)