Traffic Trace Info
DumpFile: 200903301945.dump
FileSize: 1266.40MB
Id: 200903301945
StartTime: Mon Mar 30 19:45:01 2009
EndTime: Mon Mar 30 20:00:01 2009
TotalTime: 900.24 seconds
TotalCapSize: 986.06MB CapLen: 96 bytes
# of packets: 18369823 (13122.64MB)
AvgRate: 122.29Mbps stddev:14.89M
IP flow (unique src/dst pair) Information
# of flows: 739796 (avg. 24.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.4% 1.3% 1.3% 1.1% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 487224
Top 10 bandwidth usage (bytes/total in %):
12.8% 10.5% 10.0% 6.4% 6.0% 4.6% 2.6% 2.6% 2.1% 2.1%
# of IPv6 addresses: 2220
Top 10 bandwidth usage (bytes/total in %):
27.8% 18.6% 16.1% 16.1% 13.4% 9.2% 9.1% 5.0% 3.8% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903301945.pktlen.png)
detailed numbers
[ 32- 63]: 3759587
[ 64- 127]: 4065691
[ 128- 255]: 1022418
[ 256- 511]: 404266
[ 512- 1023]: 437173
[ 1024- 2047]: 8680688
Protocol Breakdown
![[protocol breakdown chart]](200903301945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18369823 (100.00%) 13760088033 (100.00%) 749.06
ip 18337953 ( 99.83%) 13752259537 ( 99.94%) 749.93
tcp 14752185 ( 80.31%) 12647536629 ( 91.91%) 857.33
http(s) 7594305 ( 41.34%) 10435325950 ( 75.84%) 1374.10
http(c) 3869765 ( 21.07%) 351567055 ( 2.55%) 90.85
squid 365677 ( 1.99%) 187784336 ( 1.36%) 513.53
smtp 343278 ( 1.87%) 81811450 ( 0.59%) 238.32
ftp 71003 ( 0.39%) 62595708 ( 0.45%) 881.59
pop3 17304 ( 0.09%) 9832941 ( 0.07%) 568.25
imap 4181 ( 0.02%) 636936 ( 0.00%) 152.34
telnet 2887 ( 0.02%) 330621 ( 0.00%) 114.52
ssh 109198 ( 0.59%) 15410299 ( 0.11%) 141.12
dns 14257 ( 0.08%) 1435968 ( 0.01%) 100.72
bgp 144 ( 0.00%) 62232 ( 0.00%) 432.17
napster 25 ( 0.00%) 2110 ( 0.00%) 84.40
realaud 24 ( 0.00%) 3954 ( 0.00%) 164.75
rtsp 17000 ( 0.09%) 1113483 ( 0.01%) 65.50
icecast 16880 ( 0.09%) 1114268 ( 0.01%) 66.01
hotline 10 ( 0.00%) 600 ( 0.00%) 60.00
other 2326234 ( 12.66%) 1498507938 ( 10.89%) 644.18
udp 2576350 ( 14.02%) 930016439 ( 6.76%) 360.98
dns 973498 ( 5.30%) 211713388 ( 1.54%) 217.48
realaud 18935 ( 0.10%) 8319173 ( 0.06%) 439.35
halflif 172 ( 0.00%) 31817 ( 0.00%) 184.98
starcra 19 ( 0.00%) 2462 ( 0.00%) 129.58
everque 4048 ( 0.02%) 1661033 ( 0.01%) 410.33
unreal 599 ( 0.00%) 270462 ( 0.00%) 451.52
quake 29 ( 0.00%) 4076 ( 0.00%) 140.55
cuseeme 5 ( 0.00%) 1972 ( 0.00%) 394.40
other 1578905 ( 8.60%) 707896037 ( 5.14%) 448.35
icmp 826552 ( 4.50%) 116775910 ( 0.85%) 141.28
ipip 320 ( 0.00%) 39236 ( 0.00%) 122.61
ipsec 112 ( 0.00%) 17728 ( 0.00%) 158.29
ip6 67420 ( 0.37%) 41684501 ( 0.30%) 618.28
other 115014 ( 0.63%) 16189094 ( 0.12%) 140.76
frag 68612 ( 0.37%) 68567017 ( 0.50%) 999.34
ip6 31870 ( 0.17%) 7828496 ( 0.06%) 245.64
tcp6 10202 ( 0.06%) 4015168 ( 0.03%) 393.57
http(s) 2512 ( 0.01%) 1527914 ( 0.01%) 608.25
http(c) 5169 ( 0.03%) 951349 ( 0.01%) 184.05
smtp 286 ( 0.00%) 107993 ( 0.00%) 377.60
ftp 11 ( 0.00%) 998 ( 0.00%) 90.73
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 4 ( 0.00%) 408 ( 0.00%) 102.00
bgp 375 ( 0.00%) 32378 ( 0.00%) 86.34
other 1841 ( 0.01%) 1393731 ( 0.01%) 757.05
udp6 17456 ( 0.10%) 2966005 ( 0.02%) 169.91
dns 14433 ( 0.08%) 2224500 ( 0.02%) 154.13
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
other 3022 ( 0.02%) 741389 ( 0.01%) 245.33
icmp6 3920 ( 0.02%) 596261 ( 0.00%) 152.11
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 261 ( 0.00%) 246846 ( 0.00%) 945.77
tcpdump file: 200903301945.dump.gz (444.66 MB)