Traffic Trace Info
DumpFile: 200903301100.dump
FileSize: 1069.57MB
Id: 200903301100
StartTime: Mon Mar 30 11:00:00 2009
EndTime: Mon Mar 30 11:15:01 2009
TotalTime: 900.54 seconds
TotalCapSize: 836.56MB CapLen: 96 bytes
# of packets: 15268987 (9883.86MB)
AvgRate: 92.06Mbps stddev:10.23M
IP flow (unique src/dst pair) Information
# of flows: 556615 (avg. 27.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.2% 2.0% 2.0% 1.9% 1.9% 1.5% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 369748
Top 10 bandwidth usage (bytes/total in %):
10.0% 7.5% 7.3% 7.0% 6.2% 3.7% 3.6% 3.1% 2.6% 2.6%
# of IPv6 addresses: 1904
Top 10 bandwidth usage (bytes/total in %):
25.5% 15.7% 12.8% 12.7% 10.9% 8.2% 7.5% 6.3% 6.3% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301100.pktlen.png)
detailed numbers
[ 32- 63]: 3036491
[ 64- 127]: 4060532
[ 128- 255]: 859985
[ 256- 511]: 377212
[ 512- 1023]: 473213
[ 1024- 2047]: 6461554
Protocol Breakdown
![[protocol breakdown chart]](200903301100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15268987 (100.00%) 10363974607 (100.00%) 678.76
ip 15235537 ( 99.78%) 10353998479 ( 99.90%) 679.60
tcp 12236136 ( 80.14%) 9031475035 ( 87.14%) 738.10
http(s) 4806252 ( 31.48%) 6474000071 ( 62.47%) 1347.00
http(c) 2734743 ( 17.91%) 344674316 ( 3.33%) 126.04
squid 268291 ( 1.76%) 70084481 ( 0.68%) 261.23
smtp 303131 ( 1.99%) 154191761 ( 1.49%) 508.66
ftp 68810 ( 0.45%) 58574059 ( 0.57%) 851.24
pop3 24239 ( 0.16%) 26747911 ( 0.26%) 1103.51
imap 5086 ( 0.03%) 1610348 ( 0.02%) 316.62
telnet 8338 ( 0.05%) 1293730 ( 0.01%) 155.16
ssh 1609280 ( 10.54%) 239059494 ( 2.31%) 148.55
dns 12720 ( 0.08%) 1293554 ( 0.01%) 101.69
bgp 142 ( 0.00%) 52426 ( 0.00%) 369.20
napster 80 ( 0.00%) 5428 ( 0.00%) 67.85
realaud 20 ( 0.00%) 1831 ( 0.00%) 91.55
rtsp 59110 ( 0.39%) 11035313 ( 0.11%) 186.69
icecast 8713 ( 0.06%) 7789386 ( 0.08%) 894.00
hotline 434 ( 0.00%) 27775 ( 0.00%) 64.00
other 2326747 ( 15.24%) 1641033151 ( 15.83%) 705.29
udp 2438529 ( 15.97%) 1249201702 ( 12.05%) 512.28
dns 938638 ( 6.15%) 239760518 ( 2.31%) 255.43
realaud 116 ( 0.00%) 9208 ( 0.00%) 79.38
halflif 181 ( 0.00%) 33152 ( 0.00%) 183.16
starcra 17 ( 0.00%) 2797 ( 0.00%) 164.53
everque 72 ( 0.00%) 17732 ( 0.00%) 246.28
unreal 1762 ( 0.01%) 1193734 ( 0.01%) 677.49
quake 14 ( 0.00%) 1742 ( 0.00%) 124.43
cuseeme 4 ( 0.00%) 348 ( 0.00%) 87.00
other 1497563 ( 9.81%) 1008046500 ( 9.73%) 673.12
icmp 514083 ( 3.37%) 45062397 ( 0.43%) 87.66
ipip 315 ( 0.00%) 38070 ( 0.00%) 120.86
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 39073 ( 0.26%) 26675549 ( 0.26%) 682.71
other 7289 ( 0.05%) 1528030 ( 0.01%) 209.64
frag 42326 ( 0.28%) 46317028 ( 0.45%) 1094.29
ip6 33450 ( 0.22%) 9976128 ( 0.10%) 298.24
tcp6 9520 ( 0.06%) 5970721 ( 0.06%) 627.18
http(s) 2720 ( 0.02%) 2424604 ( 0.02%) 891.40
http(c) 3190 ( 0.02%) 618148 ( 0.01%) 193.78
smtp 433 ( 0.00%) 197914 ( 0.00%) 457.08
ftp 37 ( 0.00%) 7292 ( 0.00%) 197.08
ssh 3 ( 0.00%) 246 ( 0.00%) 82.00
bgp 367 ( 0.00%) 31168 ( 0.00%) 84.93
other 2770 ( 0.02%) 2691349 ( 0.03%) 971.61
udp6 16933 ( 0.11%) 2794618 ( 0.03%) 165.04
dns 15187 ( 0.10%) 2297422 ( 0.02%) 151.28
halflif 1 ( 0.00%) 98 ( 0.00%) 98.00
other 1745 ( 0.01%) 497098 ( 0.00%) 284.87
icmp6 6616 ( 0.04%) 879054 ( 0.01%) 132.87
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 351 ( 0.00%) 327655 ( 0.00%) 933.49
tcpdump file: 200903301100.dump.gz (382.76 MB)