Traffic Trace Info
DumpFile: 200903301315.dump
FileSize: 1388.47MB
Id: 200903301315
StartTime: Mon Mar 30 13:15:01 2009
EndTime: Mon Mar 30 13:30:00 2009
TotalTime: 899.29 seconds
TotalCapSize: 1093.71MB CapLen: 96 bytes
# of packets: 19313988 (13411.06MB)
AvgRate: 125.13Mbps stddev:39.98M
IP flow (unique src/dst pair) Information
# of flows: 604606 (avg. 31.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
33.8% 4.5% 1.3% 1.0% 1.0% 0.8% 0.8% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 406430
Top 10 bandwidth usage (bytes/total in %):
33.9% 33.9% 7.8% 6.9% 5.8% 4.7% 4.5% 2.8% 1.9% 1.5%
# of IPv6 addresses: 2160
Top 10 bandwidth usage (bytes/total in %):
23.5% 16.1% 15.5% 15.5% 13.5% 7.9% 7.5% 6.5% 5.3% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301315.pktlen.png)
detailed numbers
[ 32- 63]: 3687756
[ 64- 127]: 4648953
[ 128- 255]: 908506
[ 256- 511]: 637183
[ 512- 1023]: 483101
[ 1024- 2047]: 8948489
Protocol Breakdown
![[protocol breakdown chart]](200903301315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19313988 (100.00%) 14062518010 (100.00%) 728.10
ip 19281012 ( 99.83%) 14054238235 ( 99.94%) 728.92
tcp 16491067 ( 85.38%) 13366419060 ( 95.05%) 810.52
http(s) 4385066 ( 22.70%) 5811470476 ( 41.33%) 1325.29
http(c) 3221281 ( 16.68%) 322181977 ( 2.29%) 100.02
squid 399924 ( 2.07%) 112558774 ( 0.80%) 281.45
smtp 268904 ( 1.39%) 103565678 ( 0.74%) 385.14
ftp 156274 ( 0.81%) 156742550 ( 1.11%) 1003.00
pop3 8902 ( 0.05%) 5550140 ( 0.04%) 623.47
imap 7080 ( 0.04%) 1206966 ( 0.01%) 170.48
telnet 12950 ( 0.07%) 7544836 ( 0.05%) 582.61
ssh 5204449 ( 26.95%) 4965865725 ( 35.31%) 954.16
dns 12607 ( 0.07%) 1257560 ( 0.01%) 99.75
bgp 139 ( 0.00%) 40693 ( 0.00%) 292.76
napster 105 ( 0.00%) 7849 ( 0.00%) 74.75
realaud 52 ( 0.00%) 5396 ( 0.00%) 103.77
rtsp 36557 ( 0.19%) 10264991 ( 0.07%) 280.79
icecast 408071 ( 2.11%) 32060362 ( 0.23%) 78.57
hotline 12 ( 0.00%) 1320 ( 0.00%) 110.00
other 2368691 ( 12.26%) 1836093587 ( 13.06%) 775.15
udp 1927274 ( 9.98%) 610874021 ( 4.34%) 316.96
dns 776795 ( 4.02%) 177489940 ( 1.26%) 228.49
realaud 1241 ( 0.01%) 78810 ( 0.00%) 63.51
halflif 94 ( 0.00%) 14661 ( 0.00%) 155.97
starcra 27 ( 0.00%) 5300 ( 0.00%) 196.30
everque 113 ( 0.00%) 20987 ( 0.00%) 185.73
unreal 761 ( 0.00%) 475793 ( 0.00%) 625.22
quake 23 ( 0.00%) 2107 ( 0.00%) 91.61
cuseeme 4 ( 0.00%) 380 ( 0.00%) 95.00
other 1147872 ( 5.94%) 432590926 ( 3.08%) 376.86
icmp 788413 ( 4.08%) 63163749 ( 0.45%) 80.12
ipip 310 ( 0.00%) 39616 ( 0.00%) 127.79
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 27991 ( 0.14%) 5554592 ( 0.04%) 198.44
other 45845 ( 0.24%) 8169501 ( 0.06%) 178.20
frag 39840 ( 0.21%) 43102922 ( 0.31%) 1081.90
ip6 32976 ( 0.17%) 8279775 ( 0.06%) 251.08
tcp6 8956 ( 0.05%) 4080906 ( 0.03%) 455.66
http(s) 2057 ( 0.01%) 1380852 ( 0.01%) 671.29
http(c) 4203 ( 0.02%) 792898 ( 0.01%) 188.65
smtp 501 ( 0.00%) 509973 ( 0.00%) 1017.91
bgp 377 ( 0.00%) 32392 ( 0.00%) 85.92
other 1818 ( 0.01%) 1364791 ( 0.01%) 750.71
udp6 16614 ( 0.09%) 2930399 ( 0.02%) 176.38
dns 14142 ( 0.07%) 2191574 ( 0.02%) 154.97
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2470 ( 0.01%) 738602 ( 0.01%) 299.03
icmp6 6974 ( 0.04%) 885516 ( 0.01%) 126.97
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 401 ( 0.00%) 378738 ( 0.00%) 944.48
tcpdump file: 200903301315.dump.gz (470.75 MB)