Traffic Trace Info
DumpFile: 200903301345.dump
FileSize: 1546.23MB
Id: 200903301345
StartTime: Mon Mar 30 13:45:01 2009
EndTime: Mon Mar 30 14:00:01 2009
TotalTime: 899.98 seconds
TotalCapSize: 1218.48MB CapLen: 96 bytes
# of packets: 21478715 (15256.53MB)
AvgRate: 142.23Mbps stddev:20.28M
IP flow (unique src/dst pair) Information
# of flows: 674073 (avg. 31.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
37.2% 3.3% 0.8% 0.8% 0.7% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 462127
Top 10 bandwidth usage (bytes/total in %):
37.9% 37.3% 7.7% 5.5% 4.1% 3.6% 3.4% 3.1% 2.4% 1.9%
# of IPv6 addresses: 1880
Top 10 bandwidth usage (bytes/total in %):
22.0% 20.3% 15.4% 13.1% 12.1% 11.8% 9.3% 6.1% 4.8% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301345.pktlen.png)
detailed numbers
[ 32- 63]: 4071386
[ 64- 127]: 4878761
[ 128- 255]: 957932
[ 256- 511]: 765921
[ 512- 1023]: 621964
[ 1024- 2047]: 10182751
Protocol Breakdown
![[protocol breakdown chart]](200903301345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21478715 (100.00%) 15997626461 (100.00%) 744.81
ip 21442673 ( 99.83%) 15986883794 ( 99.93%) 745.56
tcp 18600071 ( 86.60%) 15287568692 ( 95.56%) 821.91
http(s) 5513032 ( 25.67%) 7331281274 ( 45.83%) 1329.81
http(c) 3578784 ( 16.66%) 389986793 ( 2.44%) 108.97
squid 285082 ( 1.33%) 77431745 ( 0.48%) 271.61
smtp 279888 ( 1.30%) 133725364 ( 0.84%) 477.78
ftp 220388 ( 1.03%) 238858217 ( 1.49%) 1083.81
pop3 9709 ( 0.05%) 2476017 ( 0.02%) 255.02
imap 5762 ( 0.03%) 1914567 ( 0.01%) 332.27
telnet 3399 ( 0.02%) 565709 ( 0.00%) 166.43
ssh 6265678 ( 29.17%) 6179962949 ( 38.63%) 986.32
dns 12612 ( 0.06%) 1278010 ( 0.01%) 101.33
bgp 147 ( 0.00%) 48934 ( 0.00%) 332.88
napster 127 ( 0.00%) 9426 ( 0.00%) 74.22
realaud 3015 ( 0.01%) 193364 ( 0.00%) 64.13
rtsp 50799 ( 0.24%) 11144787 ( 0.07%) 219.39
icecast 299686 ( 1.40%) 25568128 ( 0.16%) 85.32
hotline 51 ( 0.00%) 3152 ( 0.00%) 61.80
other 2071907 ( 9.65%) 893119956 ( 5.58%) 431.06
udp 1972742 ( 9.18%) 606063764 ( 3.79%) 307.22
dns 916155 ( 4.27%) 231900988 ( 1.45%) 253.12
realaud 926 ( 0.00%) 55650 ( 0.00%) 60.10
halflif 122 ( 0.00%) 22764 ( 0.00%) 186.59
starcra 24 ( 0.00%) 3853 ( 0.00%) 160.54
everque 62 ( 0.00%) 12361 ( 0.00%) 199.37
unreal 853 ( 0.00%) 521513 ( 0.00%) 611.39
quake 19 ( 0.00%) 1852 ( 0.00%) 97.47
cuseeme 2 ( 0.00%) 563 ( 0.00%) 281.50
other 1054430 ( 4.91%) 373433862 ( 2.33%) 354.16
icmp 791907 ( 3.69%) 63557147 ( 0.40%) 80.26
ipip 314 ( 0.00%) 40404 ( 0.00%) 128.68
ipsec 122 ( 0.00%) 19652 ( 0.00%) 161.08
ip6 40565 ( 0.19%) 22700809 ( 0.14%) 559.62
other 36952 ( 0.17%) 6933326 ( 0.04%) 187.63
frag 38250 ( 0.18%) 41693467 ( 0.26%) 1090.03
ip6 36042 ( 0.17%) 10742667 ( 0.07%) 298.06
tcp6 13304 ( 0.06%) 6711451 ( 0.04%) 504.47
http(s) 2618 ( 0.01%) 2071801 ( 0.01%) 791.37
http(c) 6740 ( 0.03%) 919054 ( 0.01%) 136.36
smtp 259 ( 0.00%) 115252 ( 0.00%) 444.99
ftp 38 ( 0.00%) 4322 ( 0.00%) 113.74
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 375 ( 0.00%) 32212 ( 0.00%) 85.90
other 3272 ( 0.02%) 3568638 ( 0.02%) 1090.66
udp6 16099 ( 0.07%) 2747490 ( 0.02%) 170.66
dns 13968 ( 0.07%) 2218213 ( 0.01%) 158.81
halflif 1 ( 0.00%) 99 ( 0.00%) 99.00
other 2130 ( 0.01%) 529178 ( 0.00%) 248.44
icmp6 6115 ( 0.03%) 810944 ( 0.01%) 132.62
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 494 ( 0.00%) 468702 ( 0.00%) 948.79
tcpdump file: 200903301345.dump.gz (519.23 MB)