Traffic Trace Info
DumpFile: 200903302100.dump
FileSize: 1248.61MB
Id: 200903302100
StartTime: Mon Mar 30 21:00:00 2009
EndTime: Mon Mar 30 21:15:00 2009
TotalTime: 899.67 seconds
TotalCapSize: 973.72MB CapLen: 96 bytes
# of packets: 18012409 (12643.63MB)
AvgRate: 117.90Mbps stddev:12.08M
IP flow (unique src/dst pair) Information
# of flows: 838959 (avg. 21.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 2.3% 1.6% 1.5% 1.4% 1.3% 1.3% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 555118
Top 10 bandwidth usage (bytes/total in %):
15.6% 11.4% 11.2% 5.9% 5.2% 4.4% 3.0% 2.4% 2.3% 2.2%
# of IPv6 addresses: 2749
Top 10 bandwidth usage (bytes/total in %):
74.2% 69.4% 8.6% 5.8% 5.0% 3.1% 2.9% 2.8% 1.2% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903302100.pktlen.png)
detailed numbers
[ 32- 63]: 3674411
[ 64- 127]: 4092814
[ 128- 255]: 1037391
[ 256- 511]: 423678
[ 512- 1023]: 411959
[ 1024- 2047]: 8372156
Protocol Breakdown
![[protocol breakdown chart]](200903302100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18012409 (100.00%) 13257809778 (100.00%) 736.04
ip 17966249 ( 99.74%) 13230869653 ( 99.80%) 736.43
tcp 14248612 ( 79.10%) 12173932142 ( 91.82%) 854.39
http(s) 7127514 ( 39.57%) 9586916319 ( 72.31%) 1345.06
http(c) 3402282 ( 18.89%) 320972475 ( 2.42%) 94.34
squid 339382 ( 1.88%) 156059171 ( 1.18%) 459.83
smtp 342751 ( 1.90%) 79942352 ( 0.60%) 233.24
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 117655 ( 0.65%) 91981112 ( 0.69%) 781.79
pop3 8475 ( 0.05%) 2435279 ( 0.02%) 287.35
imap 21575 ( 0.12%) 1533345 ( 0.01%) 71.07
telnet 1065 ( 0.01%) 114918 ( 0.00%) 107.90
ssh 208180 ( 1.16%) 31379044 ( 0.24%) 150.73
dns 19618 ( 0.11%) 3325894 ( 0.03%) 169.53
bgp 172 ( 0.00%) 71526 ( 0.00%) 415.85
napster 43 ( 0.00%) 3414 ( 0.00%) 79.40
realaud 10 ( 0.00%) 716 ( 0.00%) 71.60
rtsp 21508 ( 0.12%) 2886719 ( 0.02%) 134.22
icecast 17691 ( 0.10%) 1179931 ( 0.01%) 66.70
other 2620681 ( 14.55%) 1895129327 ( 14.29%) 723.14
udp 2502010 ( 13.89%) 865747937 ( 6.53%) 346.02
dns 1174374 ( 6.52%) 246000136 ( 1.86%) 209.47
realaud 24 ( 0.00%) 2195 ( 0.00%) 91.46
halflif 84586 ( 0.47%) 26065124 ( 0.20%) 308.15
starcra 44 ( 0.00%) 7912 ( 0.00%) 179.82
everque 148 ( 0.00%) 18808 ( 0.00%) 127.08
unreal 567 ( 0.00%) 273070 ( 0.00%) 481.60
quake 25 ( 0.00%) 3259 ( 0.00%) 130.36
cuseeme 5 ( 0.00%) 1280 ( 0.00%) 256.00
other 1241713 ( 6.89%) 593245893 ( 4.47%) 477.76
icmp 1024818 ( 5.69%) 130433382 ( 0.98%) 127.27
ipip 290 ( 0.00%) 34336 ( 0.00%) 118.40
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 62794 ( 0.35%) 39529356 ( 0.30%) 629.51
other 127613 ( 0.71%) 21174804 ( 0.16%) 165.93
frag 66318 ( 0.37%) 67922371 ( 0.51%) 1024.19
ip6 46160 ( 0.26%) 26940125 ( 0.20%) 583.62
tcp6 23381 ( 0.13%) 22978049 ( 0.17%) 982.77
http(s) 2791 ( 0.02%) 1682717 ( 0.01%) 602.91
http(c) 4832 ( 0.03%) 937549 ( 0.01%) 194.03
smtp 377 ( 0.00%) 148623 ( 0.00%) 394.23
imap 90 ( 0.00%) 20606 ( 0.00%) 228.96
ssh 3 ( 0.00%) 246 ( 0.00%) 82.00
dns 9 ( 0.00%) 1625 ( 0.00%) 180.56
bgp 374 ( 0.00%) 31877 ( 0.00%) 85.23
other 14905 ( 0.08%) 20154806 ( 0.15%) 1352.22
udp6 18512 ( 0.10%) 3181688 ( 0.02%) 171.87
dns 15041 ( 0.08%) 2264297 ( 0.02%) 150.54
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
halflif 2 ( 0.00%) 261 ( 0.00%) 130.50
starcra 2 ( 0.00%) 666 ( 0.00%) 333.00
quake 1 ( 0.00%) 92 ( 0.00%) 92.00
other 3465 ( 0.02%) 916263 ( 0.01%) 264.43
icmp6 4043 ( 0.02%) 591558 ( 0.00%) 146.32
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 193 ( 0.00%) 184614 ( 0.00%) 956.55
tcpdump file: 200903302100.dump.gz (445.30 MB)