Traffic Trace Info
DumpFile: 200903301300.dump
FileSize: 1100.82MB
Id: 200903301300
StartTime: Mon Mar 30 13:00:00 2009
EndTime: Mon Mar 30 13:15:01 2009
TotalTime: 900.63 seconds
TotalCapSize: 861.49MB CapLen: 96 bytes
# of packets: 15682503 (8573.46MB)
AvgRate: 79.86Mbps stddev:10.76M
IP flow (unique src/dst pair) Information
# of flows: 554147 (avg. 28.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 3.0% 2.2% 1.3% 1.2% 0.9% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 361184
Top 10 bandwidth usage (bytes/total in %):
11.4% 10.8% 7.9% 3.4% 3.2% 3.2% 3.1% 3.1% 3.1% 2.4%
# of IPv6 addresses: 1798
Top 10 bandwidth usage (bytes/total in %):
29.4% 20.9% 15.1% 14.6% 14.0% 9.9% 7.6% 6.8% 6.2% 5.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301300.pktlen.png)
detailed numbers
[ 32- 63]: 3749356
[ 64- 127]: 4630827
[ 128- 255]: 988568
[ 256- 511]: 461835
[ 512- 1023]: 529570
[ 1024- 2047]: 5322347
Protocol Breakdown
![[protocol breakdown chart]](200903301300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15682503 (100.00%) 8989919615 (100.00%) 573.25
ip 15650154 ( 99.79%) 8981277721 ( 99.90%) 573.88
tcp 12659054 ( 80.72%) 8111804669 ( 90.23%) 640.79
http(s) 4450745 ( 28.38%) 5891469842 ( 65.53%) 1323.70
http(c) 3473236 ( 22.15%) 379551898 ( 4.22%) 109.28
squid 405706 ( 2.59%) 99308547 ( 1.10%) 244.78
smtp 247334 ( 1.58%) 110642560 ( 1.23%) 447.34
ftp 113381 ( 0.72%) 93600184 ( 1.04%) 825.54
pop3 24178 ( 0.15%) 20103808 ( 0.22%) 831.49
imap 3887 ( 0.02%) 1164447 ( 0.01%) 299.57
telnet 3178 ( 0.02%) 424349 ( 0.00%) 133.53
ssh 1511546 ( 9.64%) 221725465 ( 2.47%) 146.69
dns 12620 ( 0.08%) 1270245 ( 0.01%) 100.65
bgp 147 ( 0.00%) 42763 ( 0.00%) 290.90
napster 128 ( 0.00%) 9742 ( 0.00%) 76.11
realaud 61 ( 0.00%) 10337 ( 0.00%) 169.46
rtsp 12794 ( 0.08%) 12115401 ( 0.13%) 946.96
icecast 410194 ( 2.62%) 32198168 ( 0.36%) 78.49
hotline 12 ( 0.00%) 1320 ( 0.00%) 110.00
other 1989905 ( 12.69%) 1248165473 ( 13.88%) 627.25
udp 2269048 ( 14.47%) 799394445 ( 8.89%) 352.30
dns 877187 ( 5.59%) 204163392 ( 2.27%) 232.75
realaud 921 ( 0.01%) 55466 ( 0.00%) 60.22
halflif 117 ( 0.00%) 19155 ( 0.00%) 163.72
starcra 18 ( 0.00%) 3028 ( 0.00%) 168.22
everque 121 ( 0.00%) 24175 ( 0.00%) 199.79
unreal 974 ( 0.01%) 596146 ( 0.01%) 612.06
quake 16 ( 0.00%) 2007 ( 0.00%) 125.44
cuseeme 8 ( 0.00%) 878 ( 0.00%) 109.75
other 1389200 ( 8.86%) 594372662 ( 6.61%) 427.85
icmp 649358 ( 4.14%) 53560612 ( 0.60%) 82.48
ipip 340 ( 0.00%) 41043 ( 0.00%) 120.71
ipsec 116 ( 0.00%) 18256 ( 0.00%) 157.38
ip6 30085 ( 0.19%) 8900575 ( 0.10%) 295.85
other 42153 ( 0.27%) 7558121 ( 0.08%) 179.30
frag 43356 ( 0.28%) 46381767 ( 0.52%) 1069.79
ip6 32349 ( 0.21%) 8641894 ( 0.10%) 267.15
tcp6 8822 ( 0.06%) 4720461 ( 0.05%) 535.08
http(s) 1770 ( 0.01%) 1213718 ( 0.01%) 685.72
http(c) 3985 ( 0.03%) 759494 ( 0.01%) 190.59
smtp 176 ( 0.00%) 76162 ( 0.00%) 432.74
ssh 3 ( 0.00%) 246 ( 0.00%) 82.00
bgp 366 ( 0.00%) 30928 ( 0.00%) 84.50
other 2522 ( 0.02%) 2639913 ( 0.03%) 1046.75
udp6 16441 ( 0.10%) 2730249 ( 0.03%) 166.06
dns 14234 ( 0.09%) 2212777 ( 0.02%) 155.46
other 2207 ( 0.01%) 517472 ( 0.01%) 234.47
icmp6 6689 ( 0.04%) 840657 ( 0.01%) 125.68
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 367 ( 0.00%) 346447 ( 0.00%) 944.00
tcpdump file: 200903301300.dump.gz (399.96 MB)