Traffic Trace Info
DumpFile: 200903301030.dump
FileSize: 954.89MB
Id: 200903301030
StartTime: Mon Mar 30 10:30:00 2009
EndTime: Mon Mar 30 10:45:01 2009
TotalTime: 900.88 seconds
TotalCapSize: 748.27MB CapLen: 96 bytes
# of packets: 13539495 (7757.81MB)
AvgRate: 72.23Mbps stddev:9.66M
IP flow (unique src/dst pair) Information
# of flows: 673438 (avg. 20.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.6% 1.5% 1.2% 1.2% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 420016
Top 10 bandwidth usage (bytes/total in %):
11.7% 10.3% 8.3% 5.8% 5.0% 3.1% 2.8% 2.7% 2.7% 2.6%
# of IPv6 addresses: 1480
Top 10 bandwidth usage (bytes/total in %):
16.6% 16.3% 15.7% 10.3% 8.7% 7.7% 6.2% 6.2% 5.4% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301030.pktlen.png)
detailed numbers
[ 32- 63]: 2972240
[ 64- 127]: 4074276
[ 128- 255]: 759998
[ 256- 511]: 374951
[ 512- 1023]: 494365
[ 1024- 2047]: 4863665
Protocol Breakdown
![[protocol breakdown chart]](200903301030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13539495 (100.00%) 8134654949 (100.00%) 600.81
ip 13501815 ( 99.72%) 8126928509 ( 99.91%) 601.91
tcp 10739635 ( 79.32%) 7235327484 ( 88.94%) 673.70
http(s) 3949901 ( 29.17%) 5272719731 ( 64.82%) 1334.90
http(c) 2471826 ( 18.26%) 281658366 ( 3.46%) 113.95
squid 238147 ( 1.76%) 64285401 ( 0.79%) 269.94
smtp 230010 ( 1.70%) 58354893 ( 0.72%) 253.71
ftp 103153 ( 0.76%) 108898707 ( 1.34%) 1055.70
pop3 10961 ( 0.08%) 2705020 ( 0.03%) 246.79
imap 2748 ( 0.02%) 594636 ( 0.01%) 216.39
telnet 1884 ( 0.01%) 234654 ( 0.00%) 124.55
ssh 1609152 ( 11.88%) 234461267 ( 2.88%) 145.70
dns 13871 ( 0.10%) 3387240 ( 0.04%) 244.20
bgp 151 ( 0.00%) 50793 ( 0.00%) 336.38
napster 251 ( 0.00%) 17344 ( 0.00%) 69.10
realaud 28 ( 0.00%) 3680 ( 0.00%) 131.43
rtsp 73699 ( 0.54%) 11901718 ( 0.15%) 161.49
icecast 5556 ( 0.04%) 4917681 ( 0.06%) 885.11
hotline 945 ( 0.01%) 59106 ( 0.00%) 62.55
other 2027350 ( 14.97%) 1191077127 ( 14.64%) 587.50
udp 1905264 ( 14.07%) 818377455 ( 10.06%) 429.53
dns 890312 ( 6.58%) 229834811 ( 2.83%) 258.15
realaud 8 ( 0.00%) 760 ( 0.00%) 95.00
halflif 132 ( 0.00%) 22217 ( 0.00%) 168.31
starcra 26 ( 0.00%) 4250 ( 0.00%) 163.46
everque 54 ( 0.00%) 11280 ( 0.00%) 208.89
unreal 2132 ( 0.02%) 1456693 ( 0.02%) 683.25
quake 19 ( 0.00%) 1873 ( 0.00%) 98.58
cuseeme 8 ( 0.00%) 912 ( 0.00%) 114.00
other 1012446 ( 7.48%) 586961521 ( 7.22%) 579.75
icmp 828133 ( 6.12%) 66273700 ( 0.81%) 80.03
ipip 321 ( 0.00%) 39285 ( 0.00%) 122.38
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 22454 ( 0.17%) 6111048 ( 0.08%) 272.16
other 5898 ( 0.04%) 782157 ( 0.01%) 132.61
frag 36323 ( 0.27%) 39541324 ( 0.49%) 1088.60
ip6 37680 ( 0.28%) 7726440 ( 0.09%) 205.05
tcp6 17011 ( 0.13%) 4605751 ( 0.06%) 270.75
http(s) 1867 ( 0.01%) 1674811 ( 0.02%) 897.06
http(c) 12850 ( 0.09%) 1453566 ( 0.02%) 113.12
smtp 204 ( 0.00%) 79204 ( 0.00%) 388.25
bgp 367 ( 0.00%) 31307 ( 0.00%) 85.31
other 1723 ( 0.01%) 1366863 ( 0.02%) 793.30
udp6 13381 ( 0.10%) 1994593 ( 0.02%) 149.06
dns 12472 ( 0.09%) 1846488 ( 0.02%) 148.05
everque 3 ( 0.00%) 364 ( 0.00%) 121.33
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
other 905 ( 0.01%) 147624 ( 0.00%) 163.12
icmp6 7031 ( 0.05%) 907456 ( 0.01%) 129.06
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 227 ( 0.00%) 214560 ( 0.00%) 945.20
tcpdump file: 200903301030.dump.gz (344.98 MB)