Traffic Trace Info
DumpFile: 200903301545.dump
FileSize: 1411.25MB
Id: 200903301545
StartTime: Mon Mar 30 15:45:00 2009
EndTime: Mon Mar 30 16:00:01 2009
TotalTime: 900.60 seconds
TotalCapSize: 1105.00MB CapLen: 96 bytes
# of packets: 20056347 (13857.39MB)
AvgRate: 129.07Mbps stddev:13.72M
IP flow (unique src/dst pair) Information
# of flows: 777811 (avg. 25.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.4% 4.2% 3.8% 1.1% 1.1% 1.1% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 527928
Top 10 bandwidth usage (bytes/total in %):
11.3% 10.4% 10.4% 9.1% 8.3% 7.4% 4.6% 4.2% 3.9% 2.3%
# of IPv6 addresses: 1974
Top 10 bandwidth usage (bytes/total in %):
34.5% 34.4% 15.0% 14.6% 14.6% 10.2% 6.6% 5.5% 4.8% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301545.pktlen.png)
detailed numbers
[ 32- 63]: 4895059
[ 64- 127]: 3740232
[ 128- 255]: 824681
[ 256- 511]: 544423
[ 512- 1023]: 1354279
[ 1024- 2047]: 8697673
Protocol Breakdown
![[protocol breakdown chart]](200903301545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20056347 (100.00%) 14530526038 (100.00%) 724.49
ip 19977582 ( 99.61%) 14518346443 ( 99.92%) 726.73
tcp 17247358 ( 85.99%) 13840559101 ( 95.25%) 802.47
http(s) 7518103 ( 37.48%) 9969668020 ( 68.61%) 1326.09
http(c) 4947595 ( 24.67%) 684745752 ( 4.71%) 138.40
squid 271889 ( 1.36%) 105589937 ( 0.73%) 388.36
smtp 292670 ( 1.46%) 102210898 ( 0.70%) 349.24
ftp 116900 ( 0.58%) 82776101 ( 0.57%) 708.09
pop3 11193 ( 0.06%) 4621031 ( 0.03%) 412.85
imap 12981 ( 0.06%) 11700086 ( 0.08%) 901.32
telnet 13420 ( 0.07%) 3347065 ( 0.02%) 249.41
ssh 1660830 ( 8.28%) 1536530423 ( 10.57%) 925.16
dns 12960 ( 0.06%) 1294738 ( 0.01%) 99.90
bgp 140 ( 0.00%) 47824 ( 0.00%) 341.60
napster 107 ( 0.00%) 7877 ( 0.00%) 73.62
realaud 78 ( 0.00%) 11173 ( 0.00%) 143.24
rtsp 12308 ( 0.06%) 10826248 ( 0.07%) 879.61
icecast 37579 ( 0.19%) 13803812 ( 0.09%) 367.33
other 2338603 ( 11.66%) 1313377996 ( 9.04%) 561.61
udp 1973196 ( 9.84%) 576651180 ( 3.97%) 292.24
dns 1068903 ( 5.33%) 267863171 ( 1.84%) 250.60
realaud 857 ( 0.00%) 53174 ( 0.00%) 62.05
halflif 128 ( 0.00%) 21867 ( 0.00%) 170.84
starcra 27 ( 0.00%) 4397 ( 0.00%) 162.85
everque 65 ( 0.00%) 12874 ( 0.00%) 198.06
unreal 591 ( 0.00%) 269209 ( 0.00%) 455.51
quake 16 ( 0.00%) 1431 ( 0.00%) 89.44
cuseeme 3 ( 0.00%) 290 ( 0.00%) 96.67
other 902386 ( 4.50%) 308285245 ( 2.12%) 341.63
icmp 644411 ( 3.21%) 53922593 ( 0.37%) 83.68
ipip 326 ( 0.00%) 38000 ( 0.00%) 116.56
ipsec 602 ( 0.00%) 340932 ( 0.00%) 566.33
ip6 45933 ( 0.23%) 31341319 ( 0.22%) 682.33
other 65756 ( 0.33%) 15493318 ( 0.11%) 235.62
frag 47011 ( 0.23%) 51484596 ( 0.35%) 1095.16
ip6 78765 ( 0.39%) 12179595 ( 0.08%) 154.63
tcp6 56282 ( 0.28%) 8327507 ( 0.06%) 147.96
http(s) 2359 ( 0.01%) 1349973 ( 0.01%) 572.26
http(c) 51032 ( 0.25%) 4920766 ( 0.03%) 96.43
smtp 89 ( 0.00%) 43282 ( 0.00%) 486.31
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 5 ( 0.00%) 545 ( 0.00%) 109.00
bgp 358 ( 0.00%) 30080 ( 0.00%) 84.02
other 2437 ( 0.01%) 1982689 ( 0.01%) 813.58
udp6 17184 ( 0.09%) 2916304 ( 0.02%) 169.71
dns 15261 ( 0.08%) 2425559 ( 0.02%) 158.94
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1920 ( 0.01%) 490412 ( 0.00%) 255.42
icmp6 4936 ( 0.02%) 618314 ( 0.00%) 125.27
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 333 ( 0.00%) 313390 ( 0.00%) 941.11
tcpdump file: 200903301545.dump.gz (482.05 MB)