Traffic Trace Info
DumpFile: 200903302030.dump
FileSize: 1275.61MB
Id: 200903302030
StartTime: Mon Mar 30 20:30:00 2009
EndTime: Mon Mar 30 20:45:00 2009
TotalTime: 900.31 seconds
TotalCapSize: 993.27MB CapLen: 96 bytes
# of packets: 18501245 (12777.89MB)
AvgRate: 119.06Mbps stddev:11.81M
IP flow (unique src/dst pair) Information
# of flows: 957601 (avg. 19.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.1% 2.0% 1.4% 1.3% 1.2% 1.2% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 616899
Top 10 bandwidth usage (bytes/total in %):
17.1% 10.3% 10.0% 4.5% 4.5% 4.2% 3.8% 2.2% 2.1% 2.1%
# of IPv6 addresses: 2185
Top 10 bandwidth usage (bytes/total in %):
27.6% 18.3% 14.8% 14.6% 9.4% 9.2% 8.8% 8.5% 8.1% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903302030.pktlen.png)
detailed numbers
[ 32- 63]: 4214508
[ 64- 127]: 4014905
[ 128- 255]: 992368
[ 256- 511]: 477008
[ 512- 1023]: 393386
[ 1024- 2047]: 8409070
Protocol Breakdown
![[protocol breakdown chart]](200903302030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18501245 (100.00%) 13398587207 (100.00%) 724.20
ip 18461293 ( 99.78%) 13389936821 ( 99.94%) 725.30
tcp 14957087 ( 80.84%) 12452099028 ( 92.94%) 832.52
http(s) 7407166 ( 40.04%) 9982100250 ( 74.50%) 1347.63
http(c) 3789595 ( 20.48%) 355518161 ( 2.65%) 93.81
squid 321702 ( 1.74%) 141605068 ( 1.06%) 440.17
smtp 339912 ( 1.84%) 124932269 ( 0.93%) 367.54
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 195753 ( 1.06%) 201915661 ( 1.51%) 1031.48
pop3 10869 ( 0.06%) 6073369 ( 0.05%) 558.78
imap 4284 ( 0.02%) 859015 ( 0.01%) 200.52
telnet 1467 ( 0.01%) 151336 ( 0.00%) 103.16
ssh 349848 ( 1.89%) 170863311 ( 1.28%) 488.39
dns 28451 ( 0.15%) 18490892 ( 0.14%) 649.92
bgp 166 ( 0.00%) 66730 ( 0.00%) 401.99
napster 37 ( 0.00%) 3001 ( 0.00%) 81.11
realaud 62 ( 0.00%) 8488 ( 0.00%) 136.90
rtsp 1423 ( 0.01%) 102992 ( 0.00%) 72.38
icecast 16954 ( 0.09%) 1127517 ( 0.01%) 66.50
hotline 10 ( 0.00%) 1337 ( 0.00%) 133.70
other 2489378 ( 13.46%) 1448278781 ( 10.81%) 581.78
udp 2417365 ( 13.07%) 732469119 ( 5.47%) 303.00
dns 1018077 ( 5.50%) 233192058 ( 1.74%) 229.05
realaud 11688 ( 0.06%) 5364208 ( 0.04%) 458.95
halflif 67293 ( 0.36%) 27293339 ( 0.20%) 405.59
starcra 50 ( 0.00%) 8456 ( 0.00%) 169.12
everque 112 ( 0.00%) 16330 ( 0.00%) 145.80
unreal 491 ( 0.00%) 224729 ( 0.00%) 457.70
quake 10 ( 0.00%) 1002 ( 0.00%) 100.20
cuseeme 10 ( 0.00%) 970 ( 0.00%) 97.00
other 1319453 ( 7.13%) 466233113 ( 3.48%) 353.35
icmp 830111 ( 4.49%) 115235050 ( 0.86%) 138.82
ipip 306 ( 0.00%) 37952 ( 0.00%) 124.03
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 79254 ( 0.43%) 60003557 ( 0.45%) 757.10
other 177058 ( 0.96%) 30074419 ( 0.22%) 169.86
frag 70496 ( 0.38%) 70249734 ( 0.52%) 996.51
ip6 39952 ( 0.22%) 8650386 ( 0.06%) 216.52
tcp6 20376 ( 0.11%) 5431211 ( 0.04%) 266.55
http(s) 2622 ( 0.01%) 1606809 ( 0.01%) 612.82
http(c) 14587 ( 0.08%) 1828248 ( 0.01%) 125.33
smtp 222 ( 0.00%) 106123 ( 0.00%) 478.03
imap 434 ( 0.00%) 404078 ( 0.00%) 931.06
bgp 354 ( 0.00%) 29247 ( 0.00%) 82.62
other 2157 ( 0.01%) 1456706 ( 0.01%) 675.34
udp6 15508 ( 0.08%) 2483441 ( 0.02%) 160.14
dns 13411 ( 0.07%) 1977481 ( 0.01%) 147.45
halflif 1 ( 0.00%) 145 ( 0.00%) 145.00
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
unreal 1 ( 0.00%) 111 ( 0.00%) 111.00
other 2094 ( 0.01%) 505588 ( 0.00%) 241.45
icmp6 3802 ( 0.02%) 509004 ( 0.00%) 133.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 236 ( 0.00%) 222650 ( 0.00%) 943.43
tcpdump file: 200903302030.dump.gz (448.48 MB)