Traffic Trace Info
DumpFile: 200903301415.dump
FileSize: 1350.56MB
Id: 200903301415
StartTime: Mon Mar 30 14:15:01 2009
EndTime: Mon Mar 30 14:30:01 2009
TotalTime: 900.11 seconds
TotalCapSize: 1063.23MB CapLen: 96 bytes
# of packets: 18828991 (12503.32MB)
AvgRate: 116.51Mbps stddev:27.18M
IP flow (unique src/dst pair) Information
# of flows: 597305 (avg. 31.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.2% 4.2% 2.1% 1.8% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 388892
Top 10 bandwidth usage (bytes/total in %):
18.3% 18.3% 8.3% 7.4% 6.1% 4.4% 4.3% 4.2% 2.7% 2.1%
# of IPv6 addresses: 1788
Top 10 bandwidth usage (bytes/total in %):
24.4% 17.4% 16.0% 16.0% 8.1% 8.1% 7.2% 7.2% 7.1% 6.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301415.pktlen.png)
detailed numbers
[ 32- 63]: 3557609
[ 64- 127]: 5096622
[ 128- 255]: 896288
[ 256- 511]: 535348
[ 512- 1023]: 581746
[ 1024- 2047]: 8161378
Protocol Breakdown
![[protocol breakdown chart]](200903301415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18828991 (100.00%) 13110678097 (100.00%) 696.30
ip 18797962 ( 99.84%) 13102793437 ( 99.94%) 697.03
tcp 16264985 ( 86.38%) 12485805200 ( 95.23%) 767.65
http(s) 6079623 ( 32.29%) 8147467106 ( 62.14%) 1340.13
http(c) 3919512 ( 20.82%) 402561097 ( 3.07%) 102.71
squid 294281 ( 1.56%) 128582314 ( 0.98%) 436.94
smtp 279703 ( 1.49%) 142694235 ( 1.09%) 510.16
ftp 125306 ( 0.67%) 103068388 ( 0.79%) 822.53
pop3 10274 ( 0.05%) 2649915 ( 0.02%) 257.92
imap 4510 ( 0.02%) 1374303 ( 0.01%) 304.72
telnet 3062 ( 0.02%) 529209 ( 0.00%) 172.83
ssh 3289860 ( 17.47%) 2594675326 ( 19.79%) 788.69
dns 13404 ( 0.07%) 1306034 ( 0.01%) 97.44
bgp 133 ( 0.00%) 46543 ( 0.00%) 349.95
napster 102 ( 0.00%) 7320 ( 0.00%) 71.76
realaud 3016 ( 0.02%) 187965 ( 0.00%) 62.32
rtsp 30722 ( 0.16%) 33366189 ( 0.25%) 1086.07
icecast 31991 ( 0.17%) 9584979 ( 0.07%) 299.61
hotline 160 ( 0.00%) 10905 ( 0.00%) 68.16
other 2179325 ( 11.57%) 917693312 ( 7.00%) 421.09
udp 1825843 ( 9.70%) 552900810 ( 4.22%) 302.82
dns 888470 ( 4.72%) 218739803 ( 1.67%) 246.20
realaud 1203 ( 0.01%) 72374 ( 0.00%) 60.16
halflif 111 ( 0.00%) 19235 ( 0.00%) 173.29
starcra 26 ( 0.00%) 5004 ( 0.00%) 192.46
everque 53 ( 0.00%) 11075 ( 0.00%) 208.96
unreal 467 ( 0.00%) 249523 ( 0.00%) 534.31
quake 22 ( 0.00%) 1899 ( 0.00%) 86.32
cuseeme 4 ( 0.00%) 493 ( 0.00%) 123.25
other 935307 ( 4.97%) 333648818 ( 2.54%) 356.73
icmp 646340 ( 3.43%) 54271562 ( 0.41%) 83.97
ipip 309 ( 0.00%) 37566 ( 0.00%) 121.57
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 25074 ( 0.13%) 4059379 ( 0.03%) 161.90
other 35299 ( 0.19%) 5701224 ( 0.04%) 161.51
frag 38254 ( 0.20%) 41941107 ( 0.32%) 1096.38
ip6 31029 ( 0.16%) 7884660 ( 0.06%) 254.11
tcp6 8785 ( 0.05%) 4135453 ( 0.03%) 470.74
http(s) 2450 ( 0.01%) 1967051 ( 0.02%) 802.88
http(c) 4258 ( 0.02%) 772853 ( 0.01%) 181.51
smtp 61 ( 0.00%) 11622 ( 0.00%) 190.52
dns 4 ( 0.00%) 457 ( 0.00%) 114.25
bgp 372 ( 0.00%) 31343 ( 0.00%) 84.26
other 1640 ( 0.01%) 1352127 ( 0.01%) 824.47
udp6 15566 ( 0.08%) 2650698 ( 0.02%) 170.29
dns 14094 ( 0.07%) 2274070 ( 0.02%) 161.35
cuseeme 1 ( 0.00%) 112 ( 0.00%) 112.00
other 1471 ( 0.01%) 376516 ( 0.00%) 255.96
icmp6 6363 ( 0.03%) 829204 ( 0.01%) 130.32
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 284 ( 0.00%) 265089 ( 0.00%) 933.41
tcpdump file: 200903301415.dump.gz (467.93 MB)