Traffic Trace Info
DumpFile: 200903301845.dump
FileSize: 1347.39MB
Id: 200903301845
StartTime: Mon Mar 30 18:45:00 2009
EndTime: Mon Mar 30 19:00:01 2009
TotalTime: 900.54 seconds
TotalCapSize: 1047.27MB CapLen: 96 bytes
# of packets: 19665260 (13952.03MB)
AvgRate: 129.96Mbps stddev:11.67M
IP flow (unique src/dst pair) Information
# of flows: 804786 (avg. 24.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.4% 2.2% 1.9% 1.6% 1.3% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 518017
Top 10 bandwidth usage (bytes/total in %):
10.5% 10.2% 9.5% 7.9% 5.4% 5.1% 4.0% 3.8% 3.6% 3.0%
# of IPv6 addresses: 2052
Top 10 bandwidth usage (bytes/total in %):
21.3% 14.2% 13.3% 13.3% 10.7% 10.5% 7.3% 7.1% 7.1% 6.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301845.pktlen.png)
detailed numbers
[ 32- 63]: 4371057
[ 64- 127]: 3846388
[ 128- 255]: 1169708
[ 256- 511]: 493687
[ 512- 1023]: 584817
[ 1024- 2047]: 9199603
Protocol Breakdown
![[protocol breakdown chart]](200903301845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19665260 (100.00%) 14629764268 (100.00%) 743.94
ip 19631911 ( 99.83%) 14620281273 ( 99.94%) 744.72
tcp 15650855 ( 79.59%) 12912628292 ( 88.26%) 825.04
http(s) 7307396 ( 37.16%) 9902386283 ( 67.69%) 1355.12
http(c) 4324784 ( 21.99%) 403321905 ( 2.76%) 93.26
squid 345613 ( 1.76%) 189087312 ( 1.29%) 547.11
smtp 353735 ( 1.80%) 114539942 ( 0.78%) 323.80
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 139318 ( 0.71%) 123584235 ( 0.84%) 887.07
pop3 7952 ( 0.04%) 2953905 ( 0.02%) 371.47
imap 4733 ( 0.02%) 541400 ( 0.00%) 114.39
telnet 17038 ( 0.09%) 5469474 ( 0.04%) 321.02
ssh 240716 ( 1.22%) 35155191 ( 0.24%) 146.04
dns 14701 ( 0.07%) 1448936 ( 0.01%) 98.56
bgp 151 ( 0.00%) 56471 ( 0.00%) 373.98
napster 4 ( 0.00%) 254 ( 0.00%) 63.50
realaud 50 ( 0.00%) 5058 ( 0.00%) 101.16
rtsp 54063 ( 0.27%) 17689741 ( 0.12%) 327.21
icecast 17956 ( 0.09%) 1195544 ( 0.01%) 66.58
hotline 13 ( 0.00%) 1382 ( 0.00%) 106.31
other 2822617 ( 14.35%) 2115190355 ( 14.46%) 749.37
udp 3214017 ( 16.34%) 1582283139 ( 10.82%) 492.31
dns 1122852 ( 5.71%) 254925345 ( 1.74%) 227.03
realaud 953 ( 0.00%) 57451 ( 0.00%) 60.28
halflif 146 ( 0.00%) 23281 ( 0.00%) 159.46
starcra 41 ( 0.00%) 6949 ( 0.00%) 169.49
everque 75 ( 0.00%) 13813 ( 0.00%) 184.17
unreal 550 ( 0.00%) 271999 ( 0.00%) 494.54
quake 19 ( 0.00%) 4488 ( 0.00%) 236.21
cuseeme 10 ( 0.00%) 2340 ( 0.00%) 234.00
other 2088711 ( 10.62%) 1326795850 ( 9.07%) 635.22
icmp 645376 ( 3.28%) 64726963 ( 0.44%) 100.29
ipip 330 ( 0.00%) 41398 ( 0.00%) 125.45
ipsec 114 ( 0.00%) 18044 ( 0.00%) 158.28
ip6 71105 ( 0.36%) 47993153 ( 0.33%) 674.96
other 50114 ( 0.25%) 12590284 ( 0.09%) 251.23
frag 57489 ( 0.29%) 59524705 ( 0.41%) 1035.41
ip6 33349 ( 0.17%) 9482995 ( 0.06%) 284.36
tcp6 11450 ( 0.06%) 5645781 ( 0.04%) 493.08
http(s) 3142 ( 0.02%) 2533212 ( 0.02%) 806.24
http(c) 5047 ( 0.03%) 947071 ( 0.01%) 187.65
smtp 374 ( 0.00%) 175705 ( 0.00%) 469.80
imap 705 ( 0.00%) 576045 ( 0.00%) 817.09
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 4 ( 0.00%) 462 ( 0.00%) 115.50
bgp 360 ( 0.00%) 29715 ( 0.00%) 82.54
other 1816 ( 0.01%) 1383399 ( 0.01%) 761.78
udp6 17408 ( 0.09%) 2912945 ( 0.02%) 167.33
dns 14702 ( 0.07%) 2262955 ( 0.02%) 153.92
starcra 2 ( 0.00%) 232 ( 0.00%) 116.00
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
other 2703 ( 0.01%) 649648 ( 0.00%) 240.34
icmp6 4153 ( 0.02%) 623966 ( 0.00%) 150.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 307 ( 0.00%) 296087 ( 0.00%) 964.45
tcpdump file: 200903301845.dump.gz (476.11 MB)