Traffic Trace Info
DumpFile: 200903301830.dump
FileSize: 1445.34MB
Id: 200903301830
StartTime: Mon Mar 30 18:30:00 2009
EndTime: Mon Mar 30 18:45:00 2009
TotalTime: 899.82 seconds
TotalCapSize: 1127.06MB CapLen: 96 bytes
# of packets: 20856198 (14936.99MB)
AvgRate: 139.26Mbps stddev:17.02M
IP flow (unique src/dst pair) Information
# of flows: 738159 (avg. 28.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.6% 2.0% 1.8% 1.7% 1.7% 1.6% 1.6% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 477823
Top 10 bandwidth usage (bytes/total in %):
11.3% 9.3% 8.4% 7.6% 6.3% 5.4% 3.8% 3.4% 3.4% 2.6%
# of IPv6 addresses: 2237
Top 10 bandwidth usage (bytes/total in %):
20.8% 14.3% 13.1% 13.1% 10.6% 8.4% 8.4% 7.5% 6.4% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301830.pktlen.png)
detailed numbers
[ 32- 63]: 4119695
[ 64- 127]: 4769772
[ 128- 255]: 1078635
[ 256- 511]: 463525
[ 512- 1023]: 536070
[ 1024- 2047]: 9888501
Protocol Breakdown
![[protocol breakdown chart]](200903301830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20856198 (100.00%) 15662565318 (100.00%) 750.98
ip 20822637 ( 99.84%) 15652921882 ( 99.94%) 751.73
tcp 15884842 ( 76.16%) 13755377776 ( 87.82%) 865.94
http(s) 8060835 ( 38.65%) 11044879869 ( 70.52%) 1370.19
http(c) 4164865 ( 19.97%) 422528827 ( 2.70%) 101.45
squid 274660 ( 1.32%) 123105006 ( 0.79%) 448.21
smtp 339438 ( 1.63%) 109644431 ( 0.70%) 323.02
ftp 143222 ( 0.69%) 129156610 ( 0.82%) 901.79
pop3 8204 ( 0.04%) 2973967 ( 0.02%) 362.50
imap 5860 ( 0.03%) 1238471 ( 0.01%) 211.34
telnet 13736 ( 0.07%) 3431652 ( 0.02%) 249.83
ssh 173277 ( 0.83%) 37062211 ( 0.24%) 213.89
dns 16547 ( 0.08%) 3622496 ( 0.02%) 218.92
bgp 198 ( 0.00%) 92618 ( 0.00%) 467.77
napster 23 ( 0.00%) 1386 ( 0.00%) 60.26
realaud 320 ( 0.00%) 448723 ( 0.00%) 1402.26
rtsp 41585 ( 0.20%) 16184439 ( 0.10%) 389.19
icecast 17444 ( 0.08%) 1154894 ( 0.01%) 66.21
hotline 28 ( 0.00%) 21167 ( 0.00%) 755.96
other 2624595 ( 12.58%) 1859830709 ( 11.87%) 708.62
udp 3321228 ( 15.92%) 1687499181 ( 10.77%) 508.09
dns 1119048 ( 5.37%) 251397133 ( 1.61%) 224.65
realaud 614 ( 0.00%) 43359 ( 0.00%) 70.62
halflif 149 ( 0.00%) 26628 ( 0.00%) 178.71
starcra 31 ( 0.00%) 3833 ( 0.00%) 123.65
everque 113 ( 0.00%) 25701 ( 0.00%) 227.44
unreal 538 ( 0.00%) 254050 ( 0.00%) 472.21
quake 13 ( 0.00%) 1470 ( 0.00%) 113.08
cuseeme 6 ( 0.00%) 1270 ( 0.00%) 211.67
other 2200539 ( 10.55%) 1435623439 ( 9.17%) 652.40
icmp 1479827 ( 7.10%) 123167587 ( 0.79%) 83.23
ipip 303 ( 0.00%) 35230 ( 0.00%) 116.27
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 89428 ( 0.43%) 74864801 ( 0.48%) 837.15
other 46901 ( 0.22%) 11960243 ( 0.08%) 255.01
frag 53009 ( 0.25%) 55919040 ( 0.36%) 1054.90
ip6 33561 ( 0.16%) 9643436 ( 0.06%) 287.34
tcp6 11353 ( 0.05%) 5646692 ( 0.04%) 497.37
http(s) 2908 ( 0.01%) 1995433 ( 0.01%) 686.19
http(c) 4893 ( 0.02%) 863415 ( 0.01%) 176.46
smtp 643 ( 0.00%) 567094 ( 0.00%) 881.95
imap 728 ( 0.00%) 810199 ( 0.01%) 1112.91
bgp 361 ( 0.00%) 30222 ( 0.00%) 83.72
other 1820 ( 0.01%) 1380329 ( 0.01%) 758.42
udp6 17599 ( 0.08%) 3008679 ( 0.02%) 170.96
dns 15380 ( 0.07%) 2415693 ( 0.02%) 157.07
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
halflif 1 ( 0.00%) 116 ( 0.00%) 116.00
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
unreal 1 ( 0.00%) 112 ( 0.00%) 112.00
other 2215 ( 0.01%) 592535 ( 0.00%) 267.51
icmp6 4132 ( 0.02%) 556161 ( 0.00%) 134.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 447 ( 0.00%) 427824 ( 0.00%) 957.10
tcpdump file: 200903301830.dump.gz (489.62 MB)