Traffic Trace Info
DumpFile: 200903301245.dump
FileSize: 1171.59MB
Id: 200903301245
StartTime: Mon Mar 30 12:45:00 2009
EndTime: Mon Mar 30 13:00:00 2009
TotalTime: 900.14 seconds
TotalCapSize: 917.89MB CapLen: 96 bytes
# of packets: 16625578 (9410.90MB)
AvgRate: 87.71Mbps stddev:13.46M
IP flow (unique src/dst pair) Information
# of flows: 538837 (avg. 30.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 2.6% 2.0% 1.3% 1.2% 1.2% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 352083
Top 10 bandwidth usage (bytes/total in %):
12.1% 9.1% 6.6% 4.2% 4.0% 3.9% 3.0% 2.8% 2.6% 2.6%
# of IPv6 addresses: 1757
Top 10 bandwidth usage (bytes/total in %):
29.5% 23.0% 15.4% 14.9% 14.6% 8.7% 8.0% 7.7% 6.1% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301245.pktlen.png)
detailed numbers
[ 32- 63]: 3931279
[ 64- 127]: 4783304
[ 128- 255]: 942214
[ 256- 511]: 466380
[ 512- 1023]: 577598
[ 1024- 2047]: 5924803
Protocol Breakdown
![[protocol breakdown chart]](200903301245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16625578 (100.00%) 9868043390 (100.00%) 593.55
ip 16593965 ( 99.81%) 9859419249 ( 99.91%) 594.16
tcp 13607461 ( 81.85%) 8859361366 ( 89.78%) 651.07
http(s) 4951860 ( 29.78%) 6531653841 ( 66.19%) 1319.03
http(c) 3796395 ( 22.83%) 374053720 ( 3.79%) 98.53
squid 374251 ( 2.25%) 99567937 ( 1.01%) 266.05
smtp 283199 ( 1.70%) 158050811 ( 1.60%) 558.09
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 195313 ( 1.17%) 194878060 ( 1.97%) 997.77
pop3 13494 ( 0.08%) 7904389 ( 0.08%) 585.77
imap 4411 ( 0.03%) 1240300 ( 0.01%) 281.18
telnet 3014 ( 0.02%) 356996 ( 0.00%) 118.45
ssh 1525948 ( 9.18%) 223319526 ( 2.26%) 146.35
dns 12327 ( 0.07%) 1263129 ( 0.01%) 102.47
bgp 145 ( 0.00%) 50285 ( 0.00%) 346.79
napster 100 ( 0.00%) 7721 ( 0.00%) 77.21
realaud 28 ( 0.00%) 4422 ( 0.00%) 157.93
rtsp 75026 ( 0.45%) 11968910 ( 0.12%) 159.53
icecast 409254 ( 2.46%) 32144165 ( 0.33%) 78.54
other 1962692 ( 11.81%) 1222896914 ( 12.39%) 623.07
udp 2353650 ( 14.16%) 892284113 ( 9.04%) 379.11
dns 938303 ( 5.64%) 236221752 ( 2.39%) 251.75
realaud 585 ( 0.00%) 38193 ( 0.00%) 65.29
halflif 173 ( 0.00%) 29925 ( 0.00%) 172.98
starcra 33 ( 0.00%) 8093 ( 0.00%) 245.24
everque 138 ( 0.00%) 27284 ( 0.00%) 197.71
unreal 1093 ( 0.01%) 654710 ( 0.01%) 599.00
quake 9 ( 0.00%) 811 ( 0.00%) 90.11
cuseeme 6 ( 0.00%) 712 ( 0.00%) 118.67
other 1412751 ( 8.50%) 655155074 ( 6.64%) 463.74
icmp 532746 ( 3.20%) 45261380 ( 0.46%) 84.96
ipip 317 ( 0.00%) 40138 ( 0.00%) 126.62
ipsec 114 ( 0.00%) 18044 ( 0.00%) 158.28
ip6 62985 ( 0.38%) 55991157 ( 0.57%) 888.96
other 36692 ( 0.22%) 6463051 ( 0.07%) 176.14
frag 42099 ( 0.25%) 44535323 ( 0.45%) 1057.87
ip6 31613 ( 0.19%) 8624141 ( 0.09%) 272.80
tcp6 9406 ( 0.06%) 4886543 ( 0.05%) 519.51
http(s) 2102 ( 0.01%) 1330472 ( 0.01%) 632.96
http(c) 4255 ( 0.03%) 846115 ( 0.01%) 198.85
smtp 115 ( 0.00%) 46098 ( 0.00%) 400.85
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 355 ( 0.00%) 29601 ( 0.00%) 83.38
other 2577 ( 0.02%) 2634085 ( 0.03%) 1022.15
udp6 15516 ( 0.09%) 2574089 ( 0.03%) 165.90
dns 13814 ( 0.08%) 2152352 ( 0.02%) 155.81
halflif 1 ( 0.00%) 118 ( 0.00%) 118.00
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
unreal 1 ( 0.00%) 103 ( 0.00%) 103.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1698 ( 0.01%) 421301 ( 0.00%) 248.12
icmp6 6302 ( 0.04%) 825600 ( 0.01%) 131.01
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 359 ( 0.00%) 333829 ( 0.00%) 929.89
tcpdump file: 200903301245.dump.gz (418.07 MB)