Traffic Trace Info
DumpFile: 200903301530.dump
FileSize: 1397.43MB
Id: 200903301530
StartTime: Mon Mar 30 15:30:00 2009
EndTime: Mon Mar 30 15:45:00 2009
TotalTime: 900.22 seconds
TotalCapSize: 1094.27MB CapLen: 96 bytes
# of packets: 19859411 (13684.63MB)
AvgRate: 127.52Mbps stddev:11.89M
IP flow (unique src/dst pair) Information
# of flows: 685030 (avg. 28.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.5% 7.7% 3.1% 1.4% 1.3% 1.1% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 441302
Top 10 bandwidth usage (bytes/total in %):
11.3% 10.5% 10.5% 9.1% 8.9% 8.5% 7.9% 4.2% 3.2% 1.8%
# of IPv6 addresses: 1998
Top 10 bandwidth usage (bytes/total in %):
37.1% 36.4% 15.8% 11.1% 10.1% 10.1% 7.8% 5.5% 4.7% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301530.pktlen.png)
detailed numbers
[ 32- 63]: 4554032
[ 64- 127]: 3979970
[ 128- 255]: 918472
[ 256- 511]: 536891
[ 512- 1023]: 1254150
[ 1024- 2047]: 8615896
Protocol Breakdown
![[protocol breakdown chart]](200903301530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19859411 (100.00%) 14349378917 (100.00%) 722.55
ip 19775846 ( 99.58%) 14336861487 ( 99.91%) 724.97
tcp 17102089 ( 86.12%) 13706785789 ( 95.52%) 801.47
http(s) 7203966 ( 36.27%) 9608834945 ( 66.96%) 1333.83
http(c) 4891247 ( 24.63%) 660192466 ( 4.60%) 134.97
squid 277930 ( 1.40%) 112802773 ( 0.79%) 405.87
smtp 315722 ( 1.59%) 138030037 ( 0.96%) 437.19
ftp 136349 ( 0.69%) 118506377 ( 0.83%) 869.14
pop3 11112 ( 0.06%) 5272139 ( 0.04%) 474.45
imap 9303 ( 0.05%) 8498601 ( 0.06%) 913.53
telnet 9712 ( 0.05%) 2482671 ( 0.02%) 255.63
ssh 1899361 ( 9.56%) 1567083958 ( 10.92%) 825.06
dns 16010 ( 0.08%) 3765264 ( 0.03%) 235.18
bgp 148 ( 0.00%) 50954 ( 0.00%) 344.28
napster 116 ( 0.00%) 8656 ( 0.00%) 74.62
realaud 2117 ( 0.01%) 135706 ( 0.00%) 64.10
rtsp 9857 ( 0.05%) 7908511 ( 0.06%) 802.32
icecast 26993 ( 0.14%) 9255825 ( 0.06%) 342.90
hotline 3 ( 0.00%) 192 ( 0.00%) 64.00
other 2292141 ( 11.54%) 1463956594 ( 10.20%) 638.69
udp 2016106 ( 10.15%) 541081427 ( 3.77%) 268.38
dns 1104892 ( 5.56%) 269074293 ( 1.88%) 243.53
realaud 16 ( 0.00%) 1593 ( 0.00%) 99.56
halflif 149 ( 0.00%) 24186 ( 0.00%) 162.32
starcra 30 ( 0.00%) 5303 ( 0.00%) 176.77
everque 57 ( 0.00%) 11025 ( 0.00%) 193.42
unreal 552 ( 0.00%) 258085 ( 0.00%) 467.55
quake 16 ( 0.00%) 1514 ( 0.00%) 94.62
cuseeme 3 ( 0.00%) 256 ( 0.00%) 85.33
other 910227 ( 4.58%) 271566843 ( 1.89%) 298.35
icmp 542293 ( 2.73%) 46371259 ( 0.32%) 85.51
ipip 307 ( 0.00%) 39428 ( 0.00%) 128.43
ipsec 116 ( 0.00%) 18256 ( 0.00%) 157.38
ip6 45852 ( 0.23%) 28507301 ( 0.20%) 621.72
other 69083 ( 0.35%) 14058027 ( 0.10%) 203.49
frag 44962 ( 0.23%) 49293147 ( 0.34%) 1096.33
ip6 83565 ( 0.42%) 12517430 ( 0.09%) 149.79
tcp6 60277 ( 0.30%) 8369403 ( 0.06%) 138.85
http(s) 2278 ( 0.01%) 1412045 ( 0.01%) 619.86
http(c) 55379 ( 0.28%) 5316039 ( 0.04%) 95.99
smtp 303 ( 0.00%) 121177 ( 0.00%) 399.92
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 22 ( 0.00%) 6428 ( 0.00%) 292.18
bgp 357 ( 0.00%) 29581 ( 0.00%) 82.86
other 1936 ( 0.01%) 1483961 ( 0.01%) 766.51
udp6 17935 ( 0.09%) 3113058 ( 0.02%) 173.57
dns 15637 ( 0.08%) 2532809 ( 0.02%) 161.98
realaud 1 ( 0.00%) 103 ( 0.00%) 103.00
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 1 ( 0.00%) 118 ( 0.00%) 118.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2293 ( 0.01%) 579711 ( 0.00%) 252.82
icmp6 4895 ( 0.02%) 632112 ( 0.00%) 129.13
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 427 ( 0.00%) 398641 ( 0.00%) 933.59
tcpdump file: 200903301530.dump.gz (483.81 MB)