Traffic Trace Info
DumpFile: 200903301015.dump
FileSize: 991.51MB
Id: 200903301015
StartTime: Mon Mar 30 10:15:00 2009
EndTime: Mon Mar 30 10:30:00 2009
TotalTime: 900.02 seconds
TotalCapSize: 775.79MB CapLen: 96 bytes
# of packets: 14136742 (8623.96MB)
AvgRate: 80.38Mbps stddev:10.64M
IP flow (unique src/dst pair) Information
# of flows: 715998 (avg. 19.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.6% 2.5% 2.0% 1.9% 1.4% 1.3% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 453873
Top 10 bandwidth usage (bytes/total in %):
10.0% 9.3% 9.3% 4.8% 4.5% 4.5% 4.5% 2.9% 2.9% 2.6%
# of IPv6 addresses: 2114
Top 10 bandwidth usage (bytes/total in %):
20.3% 15.9% 15.6% 14.0% 14.0% 8.0% 7.8% 6.3% 4.4% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301015.pktlen.png)
detailed numbers
[ 32- 63]: 2978598
[ 64- 127]: 3955064
[ 128- 255]: 747049
[ 256- 511]: 402853
[ 512- 1023]: 497647
[ 1024- 2047]: 5555531
Protocol Breakdown
![[protocol breakdown chart]](200903301015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14136742 (100.00%) 9042875887 (100.00%) 639.67
ip 14099772 ( 99.74%) 9034740200 ( 99.91%) 640.77
tcp 11226380 ( 79.41%) 7806108526 ( 86.32%) 695.34
http(s) 4092611 ( 28.95%) 5422162662 ( 59.96%) 1324.87
http(c) 2342313 ( 16.57%) 236896198 ( 2.62%) 101.14
squid 294589 ( 2.08%) 91842858 ( 1.02%) 311.77
smtp 325800 ( 2.30%) 152821149 ( 1.69%) 469.06
ftp 88305 ( 0.62%) 86694105 ( 0.96%) 981.76
pop3 31249 ( 0.22%) 31750501 ( 0.35%) 1016.05
imap 5810 ( 0.04%) 2813519 ( 0.03%) 484.25
telnet 1841 ( 0.01%) 240165 ( 0.00%) 130.45
ssh 1544188 ( 10.92%) 228460713 ( 2.53%) 147.95
dns 11861 ( 0.08%) 1192238 ( 0.01%) 100.52
bgp 125 ( 0.00%) 34486 ( 0.00%) 275.89
napster 103 ( 0.00%) 7396 ( 0.00%) 71.81
realaud 22 ( 0.00%) 1688 ( 0.00%) 76.73
rtsp 36831 ( 0.26%) 6562649 ( 0.07%) 178.18
icecast 184 ( 0.00%) 14363 ( 0.00%) 78.06
hotline 12 ( 0.00%) 1336 ( 0.00%) 111.33
other 2450533 ( 17.33%) 1544612320 ( 17.08%) 630.32
udp 2343226 ( 16.58%) 1169874931 ( 12.94%) 499.26
dns 953644 ( 6.75%) 251345577 ( 2.78%) 263.56
realaud 19 ( 0.00%) 5774 ( 0.00%) 303.89
halflif 135 ( 0.00%) 23812 ( 0.00%) 176.39
starcra 2615 ( 0.02%) 220284 ( 0.00%) 84.24
everque 68 ( 0.00%) 12490 ( 0.00%) 183.68
unreal 2217 ( 0.02%) 1528356 ( 0.02%) 689.38
quake 18 ( 0.00%) 2191 ( 0.00%) 121.72
cuseeme 3 ( 0.00%) 291 ( 0.00%) 97.00
other 1383251 ( 9.78%) 916161534 ( 10.13%) 662.32
icmp 492529 ( 3.48%) 42865601 ( 0.47%) 87.03
ipip 313 ( 0.00%) 37812 ( 0.00%) 120.81
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 27038 ( 0.19%) 8836649 ( 0.10%) 326.82
other 10174 ( 0.07%) 6998985 ( 0.08%) 687.93
frag 42084 ( 0.30%) 45069875 ( 0.50%) 1070.95
ip6 36970 ( 0.26%) 8135687 ( 0.09%) 220.06
tcp6 12990 ( 0.09%) 4008320 ( 0.04%) 308.57
http(s) 1798 ( 0.01%) 1296021 ( 0.01%) 720.81
http(c) 8681 ( 0.06%) 1129090 ( 0.01%) 130.06
smtp 346 ( 0.00%) 176989 ( 0.00%) 511.53
dns 20 ( 0.00%) 2364 ( 0.00%) 118.20
bgp 363 ( 0.00%) 30693 ( 0.00%) 84.55
other 1782 ( 0.01%) 1373163 ( 0.02%) 770.57
udp6 16439 ( 0.12%) 2938586 ( 0.03%) 178.76
dns 13432 ( 0.10%) 2063090 ( 0.02%) 153.60
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 3006 ( 0.02%) 875386 ( 0.01%) 291.21
icmp6 7247 ( 0.05%) 936551 ( 0.01%) 129.23
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 264 ( 0.00%) 248150 ( 0.00%) 939.96
tcpdump file: 200903301015.dump.gz (361.34 MB)