Traffic Trace Info
DumpFile: 200903302115.dump
FileSize: 1310.52MB
Id: 200903302115
StartTime: Mon Mar 30 21:15:00 2009
EndTime: Mon Mar 30 21:30:00 2009
TotalTime: 900.22 seconds
TotalCapSize: 1020.86MB CapLen: 96 bytes
# of packets: 18974147 (13013.17MB)
AvgRate: 121.26Mbps stddev:11.63M
IP flow (unique src/dst pair) Information
# of flows: 932389 (avg. 20.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 2.7% 2.3% 1.8% 1.5% 1.3% 1.1% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 602124
Top 10 bandwidth usage (bytes/total in %):
14.5% 12.7% 12.6% 5.3% 5.3% 4.5% 3.4% 2.9% 2.7% 2.7%
# of IPv6 addresses: 2691
Top 10 bandwidth usage (bytes/total in %):
30.7% 21.3% 13.6% 13.6% 10.2% 9.5% 7.9% 5.2% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903302115.pktlen.png)
detailed numbers
[ 32- 63]: 4683534
[ 64- 127]: 3822015
[ 128- 255]: 1033653
[ 256- 511]: 416454
[ 512- 1023]: 391361
[ 1024- 2047]: 8627130
Protocol Breakdown
![[protocol breakdown chart]](200903302115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18974147 (100.00%) 13645295628 (100.00%) 719.15
ip 18940699 ( 99.82%) 13636020511 ( 99.93%) 719.93
tcp 15402508 ( 81.18%) 12392361643 ( 90.82%) 804.57
http(s) 7480996 ( 39.43%) 9716061780 ( 71.20%) 1298.77
http(c) 4043862 ( 21.31%) 353059681 ( 2.59%) 87.31
squid 373636 ( 1.97%) 149671867 ( 1.10%) 400.58
smtp 317312 ( 1.67%) 76561088 ( 0.56%) 241.28
ftp 102853 ( 0.54%) 71509997 ( 0.52%) 695.26
pop3 12575 ( 0.07%) 7502987 ( 0.05%) 596.66
imap 5689 ( 0.03%) 1154744 ( 0.01%) 202.98
telnet 807 ( 0.00%) 102893 ( 0.00%) 127.50
ssh 188374 ( 0.99%) 32176831 ( 0.24%) 170.81
dns 18359 ( 0.10%) 1955005 ( 0.01%) 106.49
bgp 138 ( 0.00%) 45832 ( 0.00%) 332.12
napster 43 ( 0.00%) 4170 ( 0.00%) 96.98
realaud 39 ( 0.00%) 3948 ( 0.00%) 101.23
rtsp 18997 ( 0.10%) 22118646 ( 0.16%) 1164.32
icecast 16891 ( 0.09%) 1128969 ( 0.01%) 66.84
hotline 18 ( 0.00%) 1149 ( 0.00%) 63.83
other 2821878 ( 14.87%) 1959299596 ( 14.36%) 694.32
udp 2614734 ( 13.78%) 1080130714 ( 7.92%) 413.09
dns 1134340 ( 5.98%) 226408295 ( 1.66%) 199.59
realaud 11 ( 0.00%) 1094 ( 0.00%) 99.45
halflif 76986 ( 0.41%) 28636303 ( 0.21%) 371.97
starcra 39 ( 0.00%) 6421 ( 0.00%) 164.64
everque 147 ( 0.00%) 28651 ( 0.00%) 194.90
unreal 520 ( 0.00%) 251479 ( 0.00%) 483.61
quake 28 ( 0.00%) 2787 ( 0.00%) 99.54
cuseeme 8 ( 0.00%) 1467 ( 0.00%) 183.38
other 1402402 ( 7.39%) 824679351 ( 6.04%) 588.05
icmp 780764 ( 4.11%) 110460494 ( 0.81%) 141.48
ipip 344 ( 0.00%) 43292 ( 0.00%) 125.85
ipsec 114 ( 0.00%) 18012 ( 0.00%) 158.00
ip6 63712 ( 0.34%) 39838155 ( 0.29%) 625.28
other 78523 ( 0.41%) 13168201 ( 0.10%) 167.70
frag 69123 ( 0.36%) 69550859 ( 0.51%) 1006.19
ip6 33448 ( 0.18%) 9275117 ( 0.07%) 277.30
tcp6 12074 ( 0.06%) 5276693 ( 0.04%) 437.03
http(s) 3461 ( 0.02%) 2321178 ( 0.02%) 670.67
http(c) 5617 ( 0.03%) 1108942 ( 0.01%) 197.43
smtp 444 ( 0.00%) 170967 ( 0.00%) 385.06
bgp 359 ( 0.00%) 29816 ( 0.00%) 83.05
other 2193 ( 0.01%) 1645790 ( 0.01%) 750.47
udp6 17263 ( 0.09%) 2853560 ( 0.02%) 165.30
dns 14112 ( 0.07%) 2107932 ( 0.02%) 149.37
halflif 5 ( 0.00%) 2392 ( 0.00%) 478.40
other 3146 ( 0.02%) 743236 ( 0.01%) 236.25
icmp6 3366 ( 0.02%) 455163 ( 0.00%) 135.22
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 715 ( 0.00%) 685621 ( 0.01%) 958.91
tcpdump file: 200903302115.dump.gz (468.11 MB)