Traffic Trace Info
DumpFile: 200903301145.dump
FileSize: 1117.65MB
Id: 200903301145
StartTime: Mon Mar 30 11:45:01 2009
EndTime: Mon Mar 30 12:00:01 2009
TotalTime: 900.04 seconds
TotalCapSize: 877.46MB CapLen: 96 bytes
# of packets: 15739329 (8672.35MB)
AvgRate: 80.82Mbps stddev:12.92M
IP flow (unique src/dst pair) Information
# of flows: 597320 (avg. 26.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.5% 2.3% 1.7% 1.5% 1.4% 1.3% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 405645
Top 10 bandwidth usage (bytes/total in %):
12.0% 10.5% 7.6% 3.9% 3.1% 3.1% 2.6% 2.5% 2.5% 2.5%
# of IPv6 addresses: 2041
Top 10 bandwidth usage (bytes/total in %):
20.5% 15.4% 14.4% 14.3% 14.0% 9.6% 9.6% 7.2% 6.3% 6.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301145.pktlen.png)
detailed numbers
[ 32- 63]: 3904617
[ 64- 127]: 4626831
[ 128- 255]: 859300
[ 256- 511]: 386567
[ 512- 1023]: 576650
[ 1024- 2047]: 5385364
Protocol Breakdown
![[protocol breakdown chart]](200903301145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15739329 (100.00%) 9093614820 (100.00%) 577.76
ip 15708114 ( 99.80%) 9084881956 ( 99.90%) 578.36
tcp 12477017 ( 79.27%) 8266232214 ( 90.90%) 662.52
http(s) 4420587 ( 28.09%) 5774039039 ( 63.50%) 1306.17
http(c) 3173650 ( 20.16%) 448273443 ( 4.93%) 141.25
squid 225897 ( 1.44%) 67551252 ( 0.74%) 299.04
smtp 296768 ( 1.89%) 115688725 ( 1.27%) 389.83
ftp 104059 ( 0.66%) 97707338 ( 1.07%) 938.96
pop3 7240 ( 0.05%) 2999901 ( 0.03%) 414.35
imap 4022 ( 0.03%) 997088 ( 0.01%) 247.91
telnet 10445 ( 0.07%) 1366370 ( 0.02%) 130.82
ssh 1673927 ( 10.64%) 259022789 ( 2.85%) 154.74
dns 13177 ( 0.08%) 1299077 ( 0.01%) 98.59
bgp 167 ( 0.00%) 65156 ( 0.00%) 390.16
napster 86 ( 0.00%) 5160 ( 0.00%) 60.00
realaud 82 ( 0.00%) 11295 ( 0.00%) 137.74
rtsp 77467 ( 0.49%) 15398853 ( 0.17%) 198.78
icecast 412265 ( 2.62%) 32318633 ( 0.36%) 78.39
hotline 12 ( 0.00%) 1320 ( 0.00%) 110.00
other 2057111 ( 13.07%) 1449483475 ( 15.94%) 704.62
udp 1838551 ( 11.68%) 638783850 ( 7.02%) 347.44
dns 917900 ( 5.83%) 233501154 ( 2.57%) 254.39
realaud 9 ( 0.00%) 1056 ( 0.00%) 117.33
halflif 128 ( 0.00%) 22358 ( 0.00%) 174.67
starcra 48 ( 0.00%) 6038 ( 0.00%) 125.79
everque 137 ( 0.00%) 30579 ( 0.00%) 223.20
unreal 1430 ( 0.01%) 910951 ( 0.01%) 637.03
quake 9 ( 0.00%) 822 ( 0.00%) 91.33
cuseeme 2 ( 0.00%) 166 ( 0.00%) 83.00
other 918731 ( 5.84%) 404200115 ( 4.44%) 439.95
icmp 1267805 ( 8.06%) 97029925 ( 1.07%) 76.53
ipip 329 ( 0.00%) 41310 ( 0.00%) 125.56
ipsec 118 ( 0.00%) 18604 ( 0.00%) 157.66
ip6 79509 ( 0.51%) 75553050 ( 0.83%) 950.25
other 44785 ( 0.28%) 7223003 ( 0.08%) 161.28
frag 38200 ( 0.24%) 41824860 ( 0.46%) 1094.89
ip6 31215 ( 0.20%) 8732864 ( 0.10%) 279.76
tcp6 8552 ( 0.05%) 4685539 ( 0.05%) 547.89
http(s) 2825 ( 0.02%) 2558953 ( 0.03%) 905.82
http(c) 3643 ( 0.02%) 707236 ( 0.01%) 194.14
smtp 105 ( 0.00%) 31898 ( 0.00%) 303.79
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 364 ( 0.00%) 30755 ( 0.00%) 84.49
other 1613 ( 0.01%) 1356525 ( 0.01%) 841.00
udp6 15590 ( 0.10%) 2714188 ( 0.03%) 174.10
dns 12834 ( 0.08%) 1974453 ( 0.02%) 153.85
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2755 ( 0.02%) 739629 ( 0.01%) 268.47
icmp6 6533 ( 0.04%) 853104 ( 0.01%) 130.58
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 510 ( 0.00%) 475953 ( 0.01%) 933.24
tcpdump file: 200903301145.dump.gz (391.03 MB)