Traffic Trace Info
DumpFile: 200903301130.dump
FileSize: 1001.20MB
Id: 200903301130
StartTime: Mon Mar 30 11:30:01 2009
EndTime: Mon Mar 30 11:45:01 2009
TotalTime: 900.02 seconds
TotalCapSize: 785.52MB CapLen: 96 bytes
# of packets: 14133082 (8210.86MB)
AvgRate: 76.54Mbps stddev:10.72M
IP flow (unique src/dst pair) Information
# of flows: 583627 (avg. 24.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.6% 2.2% 2.0% 1.7% 1.2% 1.2% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 391710
Top 10 bandwidth usage (bytes/total in %):
10.5% 9.1% 8.2% 4.0% 3.2% 3.2% 2.9% 2.7% 2.6% 2.6%
# of IPv6 addresses: 1612
Top 10 bandwidth usage (bytes/total in %):
17.6% 16.2% 15.6% 13.5% 8.5% 7.9% 7.9% 6.9% 6.4% 6.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301130.pktlen.png)
detailed numbers
[ 32- 63]: 3263305
[ 64- 127]: 4048522
[ 128- 255]: 800323
[ 256- 511]: 364602
[ 512- 1023]: 551287
[ 1024- 2047]: 5105043
Protocol Breakdown
![[protocol breakdown chart]](200903301130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14133082 (100.00%) 8609714732 (100.00%) 609.19
ip 14103566 ( 99.79%) 8601639252 ( 99.91%) 609.89
tcp 11476808 ( 81.21%) 7891574457 ( 91.66%) 687.61
http(s) 4082922 ( 28.89%) 5396279718 ( 62.68%) 1321.67
http(c) 2764514 ( 19.56%) 475284340 ( 5.52%) 171.92
squid 243580 ( 1.72%) 73872303 ( 0.86%) 303.28
smtp 255728 ( 1.81%) 85258930 ( 0.99%) 333.40
ftp 76729 ( 0.54%) 50529262 ( 0.59%) 658.54
pop3 7726 ( 0.05%) 3102699 ( 0.04%) 401.59
imap 5556 ( 0.04%) 3345499 ( 0.04%) 602.14
telnet 9027 ( 0.06%) 1587431 ( 0.02%) 175.85
ssh 1597815 ( 11.31%) 240248559 ( 2.79%) 150.36
dns 13562 ( 0.10%) 3336547 ( 0.04%) 246.02
bgp 163 ( 0.00%) 63292 ( 0.00%) 388.29
napster 189 ( 0.00%) 18489 ( 0.00%) 97.83
realaud 89 ( 0.00%) 9300 ( 0.00%) 104.49
rtsp 73020 ( 0.52%) 11790328 ( 0.14%) 161.47
icecast 232216 ( 1.64%) 21414685 ( 0.25%) 92.22
hotline 12 ( 0.00%) 1320 ( 0.00%) 110.00
other 2113957 ( 14.96%) 1525431575 ( 17.72%) 721.60
udp 1776227 ( 12.57%) 608908183 ( 7.07%) 342.81
dns 926568 ( 6.56%) 232425148 ( 2.70%) 250.85
realaud 7 ( 0.00%) 639 ( 0.00%) 91.29
halflif 127 ( 0.00%) 23466 ( 0.00%) 184.77
starcra 25 ( 0.00%) 4885 ( 0.00%) 195.40
everque 120 ( 0.00%) 31363 ( 0.00%) 261.36
unreal 1428 ( 0.01%) 946489 ( 0.01%) 662.81
quake 15 ( 0.00%) 1766 ( 0.00%) 117.73
cuseeme 2 ( 0.00%) 454 ( 0.00%) 227.00
other 847646 ( 6.00%) 375249487 ( 4.36%) 442.70
icmp 788043 ( 5.58%) 63541527 ( 0.74%) 80.63
ipip 338 ( 0.00%) 41462 ( 0.00%) 122.67
ipsec 114 ( 0.00%) 18012 ( 0.00%) 158.00
ip6 46161 ( 0.33%) 35065246 ( 0.41%) 759.63
other 15875 ( 0.11%) 2490365 ( 0.03%) 156.87
frag 39532 ( 0.28%) 42153497 ( 0.49%) 1066.31
ip6 29516 ( 0.21%) 8075480 ( 0.09%) 273.60
tcp6 8012 ( 0.06%) 4598605 ( 0.05%) 573.96
http(s) 2581 ( 0.02%) 2507120 ( 0.03%) 971.38
http(c) 3255 ( 0.02%) 594463 ( 0.01%) 182.63
smtp 187 ( 0.00%) 72048 ( 0.00%) 385.28
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 364 ( 0.00%) 30824 ( 0.00%) 84.68
other 1623 ( 0.01%) 1393978 ( 0.02%) 858.89
udp6 14489 ( 0.10%) 2251675 ( 0.03%) 155.41
dns 13429 ( 0.10%) 2042269 ( 0.02%) 152.08
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1057 ( 0.01%) 209088 ( 0.00%) 197.81
icmp6 6612 ( 0.05%) 868542 ( 0.01%) 131.36
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 373 ( 0.00%) 352578 ( 0.00%) 945.25
tcpdump file: 200903301130.dump.gz (357.30 MB)