Traffic Trace Info
DumpFile: 200903301430.dump
FileSize: 1369.54MB
Id: 200903301430
StartTime: Mon Mar 30 14:30:01 2009
EndTime: Mon Mar 30 14:45:00 2009
TotalTime: 899.33 seconds
TotalCapSize: 1074.74MB CapLen: 96 bytes
# of packets: 19318974 (12294.00MB)
AvgRate: 114.67Mbps stddev:12.66M
IP flow (unique src/dst pair) Information
# of flows: 640041 (avg. 30.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.7% 3.8% 1.7% 1.5% 1.4% 1.1% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 406310
Top 10 bandwidth usage (bytes/total in %):
10.4% 9.7% 9.7% 9.5% 5.9% 3.9% 3.9% 3.3% 3.2% 2.8%
# of IPv6 addresses: 1912
Top 10 bandwidth usage (bytes/total in %):
22.6% 18.5% 16.2% 16.2% 13.8% 8.5% 6.7% 6.5% 6.2% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301430.pktlen.png)
detailed numbers
[ 32- 63]: 4045361
[ 64- 127]: 4931149
[ 128- 255]: 1103561
[ 256- 511]: 445283
[ 512- 1023]: 1115907
[ 1024- 2047]: 7677713
Protocol Breakdown
![[protocol breakdown chart]](200903301430.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19318974 (100.00%) 12891189085 (100.00%) 667.28
ip 19287833 ( 99.84%) 12883418101 ( 99.94%) 667.96
tcp 16197221 ( 83.84%) 12044942510 ( 93.44%) 743.64
http(s) 6340969 ( 32.82%) 8505171650 ( 65.98%) 1341.30
http(c) 4405567 ( 22.80%) 434861558 ( 3.37%) 98.71
squid 274039 ( 1.42%) 99914076 ( 0.78%) 364.60
smtp 248402 ( 1.29%) 95537496 ( 0.74%) 384.61
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 184821 ( 0.96%) 198957845 ( 1.54%) 1076.49
pop3 7997 ( 0.04%) 3008415 ( 0.02%) 376.19
imap 11745 ( 0.06%) 12769152 ( 0.10%) 1087.20
telnet 3230 ( 0.02%) 609603 ( 0.00%) 188.73
ssh 2535131 ( 13.12%) 1439828724 ( 11.17%) 567.95
dns 14642 ( 0.08%) 3434300 ( 0.03%) 234.55
bgp 172 ( 0.00%) 74932 ( 0.00%) 435.65
napster 137 ( 0.00%) 12441 ( 0.00%) 90.81
realaud 3026 ( 0.02%) 190776 ( 0.00%) 63.05
rtsp 31637 ( 0.16%) 36435726 ( 0.28%) 1151.68
icecast 25310 ( 0.13%) 9137618 ( 0.07%) 361.03
hotline 16 ( 0.00%) 1560 ( 0.00%) 97.50
other 2110373 ( 10.92%) 1204996214 ( 9.35%) 570.99
udp 2212356 ( 11.45%) 760212876 ( 5.90%) 343.62
dns 956339 ( 4.95%) 234290441 ( 1.82%) 244.99
realaud 9 ( 0.00%) 1107 ( 0.00%) 123.00
halflif 122 ( 0.00%) 20975 ( 0.00%) 171.93
starcra 24 ( 0.00%) 6134 ( 0.00%) 255.58
everque 53 ( 0.00%) 11074 ( 0.00%) 208.94
unreal 465 ( 0.00%) 241140 ( 0.00%) 518.58
quake 14 ( 0.00%) 1175 ( 0.00%) 83.93
cuseeme 6 ( 0.00%) 487 ( 0.00%) 81.17
other 1255174 ( 6.50%) 525512704 ( 4.08%) 418.68
icmp 807626 ( 4.18%) 64787829 ( 0.50%) 80.22
ipip 313 ( 0.00%) 39298 ( 0.00%) 125.55
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 29766 ( 0.15%) 6367891 ( 0.05%) 213.93
other 40439 ( 0.21%) 7050001 ( 0.05%) 174.34
frag 41449 ( 0.21%) 45137402 ( 0.35%) 1088.99
ip6 31141 ( 0.16%) 7770984 ( 0.06%) 249.54
tcp6 7937 ( 0.04%) 3619884 ( 0.03%) 456.08
http(s) 2158 ( 0.01%) 1495868 ( 0.01%) 693.17
http(c) 3746 ( 0.02%) 702410 ( 0.01%) 187.51
smtp 97 ( 0.00%) 43254 ( 0.00%) 445.92
bgp 372 ( 0.00%) 31770 ( 0.00%) 85.40
other 1564 ( 0.01%) 1346582 ( 0.01%) 860.99
udp6 16669 ( 0.09%) 2875628 ( 0.02%) 172.51
dns 14326 ( 0.07%) 2288408 ( 0.02%) 159.74
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 2342 ( 0.01%) 587108 ( 0.00%) 250.69
icmp6 5979 ( 0.03%) 781424 ( 0.01%) 130.69
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 526 ( 0.00%) 489968 ( 0.00%) 931.50
tcpdump file: 200903301430.dump.gz (474.97 MB)