Traffic Trace Info
DumpFile: 200903302045.dump
FileSize: 1283.84MB
Id: 200903302045
StartTime: Mon Mar 30 20:45:00 2009
EndTime: Mon Mar 30 21:00:00 2009
TotalTime: 899.88 seconds
TotalCapSize: 1002.19MB CapLen: 96 bytes
# of packets: 18455978 (13390.75MB)
AvgRate: 124.83Mbps stddev:12.37M
IP flow (unique src/dst pair) Information
# of flows: 932237 (avg. 19.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.8% 1.9% 1.5% 1.4% 1.3% 1.3% 1.0% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 587471
Top 10 bandwidth usage (bytes/total in %):
17.6% 11.3% 10.5% 5.8% 4.9% 3.9% 3.7% 2.8% 2.8% 2.3%
# of IPv6 addresses: 2158
Top 10 bandwidth usage (bytes/total in %):
84.5% 42.2% 42.2% 5.5% 3.7% 2.4% 1.8% 1.7% 0.7% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903302045.pktlen.png)
detailed numbers
[ 32- 63]: 3720156
[ 64- 127]: 4051701
[ 128- 255]: 957215
[ 256- 511]: 404986
[ 512- 1023]: 384518
[ 1024- 2047]: 8937402
Protocol Breakdown
![[protocol breakdown chart]](200903302045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18455978 (100.00%) 14041223705 (100.00%) 760.80
ip 18400264 ( 99.70%) 13997244873 ( 99.69%) 760.71
tcp 14825408 ( 80.33%) 12988181644 ( 92.50%) 876.08
http(s) 7611440 ( 41.24%) 10344691134 ( 73.67%) 1359.10
http(c) 3377555 ( 18.30%) 329469317 ( 2.35%) 97.55
squid 305643 ( 1.66%) 135319389 ( 0.96%) 442.74
smtp 363762 ( 1.97%) 108224953 ( 0.77%) 297.52
ftp 135779 ( 0.74%) 115377285 ( 0.82%) 849.74
pop3 14462 ( 0.08%) 8646768 ( 0.06%) 597.90
imap 4948 ( 0.03%) 631490 ( 0.00%) 127.63
telnet 1295 ( 0.01%) 128808 ( 0.00%) 99.47
ssh 635953 ( 3.45%) 443422063 ( 3.16%) 697.26
dns 18507 ( 0.10%) 3044073 ( 0.02%) 164.48
bgp 175 ( 0.00%) 73104 ( 0.00%) 417.74
napster 34 ( 0.00%) 2595 ( 0.00%) 76.32
realaud 49 ( 0.00%) 5513 ( 0.00%) 112.51
rtsp 10605 ( 0.06%) 3114745 ( 0.02%) 293.71
icecast 17765 ( 0.10%) 1204170 ( 0.01%) 67.78
other 2327428 ( 12.61%) 1494825757 ( 10.65%) 642.27
udp 2259363 ( 12.24%) 805106013 ( 5.73%) 356.34
dns 1118229 ( 6.06%) 244978385 ( 1.74%) 219.08
realaud 6 ( 0.00%) 1834 ( 0.00%) 305.67
halflif 57857 ( 0.31%) 23010384 ( 0.16%) 397.71
starcra 41 ( 0.00%) 6309 ( 0.00%) 153.88
everque 157 ( 0.00%) 29666 ( 0.00%) 188.96
unreal 545 ( 0.00%) 267070 ( 0.00%) 490.04
quake 17 ( 0.00%) 1485 ( 0.00%) 87.35
cuseeme 9 ( 0.00%) 2393 ( 0.00%) 265.89
other 1082313 ( 5.86%) 536691216 ( 3.82%) 495.87
icmp 1112227 ( 6.03%) 134734835 ( 0.96%) 121.14
ipip 336 ( 0.00%) 40676 ( 0.00%) 121.06
ipsec 114 ( 0.00%) 18044 ( 0.00%) 158.28
ip6 65465 ( 0.35%) 41442592 ( 0.30%) 633.05
other 137351 ( 0.74%) 27721069 ( 0.20%) 201.83
frag 60176 ( 0.33%) 62583041 ( 0.45%) 1040.00
ip6 55714 ( 0.30%) 43978832 ( 0.31%) 789.37
tcp6 34570 ( 0.19%) 40333834 ( 0.29%) 1166.73
http(s) 2911 ( 0.02%) 1963688 ( 0.01%) 674.58
http(c) 4872 ( 0.03%) 979272 ( 0.01%) 201.00
smtp 64 ( 0.00%) 23361 ( 0.00%) 365.02
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 363 ( 0.00%) 30225 ( 0.00%) 83.26
other 26358 ( 0.14%) 37337116 ( 0.27%) 1416.54
udp6 16761 ( 0.09%) 2734114 ( 0.02%) 163.12
dns 13771 ( 0.07%) 2055928 ( 0.01%) 149.29
halflif 2 ( 0.00%) 680 ( 0.00%) 340.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
other 2987 ( 0.02%) 677398 ( 0.00%) 226.78
icmp6 3970 ( 0.02%) 547803 ( 0.00%) 137.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 383 ( 0.00%) 359001 ( 0.00%) 937.34
tcpdump file: 200903302045.dump.gz (451.29 MB)