Traffic Trace Info
DumpFile: 200903302130.dump
FileSize: 1267.77MB
Id: 200903302130
StartTime: Mon Mar 30 21:30:00 2009
EndTime: Mon Mar 30 21:45:00 2009
TotalTime: 900.00 seconds
TotalCapSize: 987.25MB CapLen: 96 bytes
# of packets: 18356682 (13126.95MB)
AvgRate: 122.34Mbps stddev:11.37M
IP flow (unique src/dst pair) Information
# of flows: 875490 (avg. 20.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.1% 1.5% 1.5% 1.3% 1.3% 1.3% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 576170
Top 10 bandwidth usage (bytes/total in %):
14.8% 14.0% 12.3% 5.0% 4.3% 4.2% 3.8% 2.9% 2.8% 2.4%
# of IPv6 addresses: 2942
Top 10 bandwidth usage (bytes/total in %):
26.1% 18.7% 13.7% 13.7% 12.3% 8.8% 8.7% 7.5% 3.8% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903302130.pktlen.png)
detailed numbers
[ 32- 63]: 4489512
[ 64- 127]: 3451332
[ 128- 255]: 904395
[ 256- 511]: 396890
[ 512- 1023]: 357989
[ 1024- 2047]: 8756564
Protocol Breakdown
![[protocol breakdown chart]](200903302130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18356682 (100.00%) 13764606359 (100.00%) 749.84
ip 18322154 ( 99.81%) 13755409227 ( 99.93%) 750.75
tcp 15166684 ( 82.62%) 12810067927 ( 93.07%) 844.62
http(s) 7457627 ( 40.63%) 9939645016 ( 72.21%) 1332.82
http(c) 3753308 ( 20.45%) 314045288 ( 2.28%) 83.67
squid 298827 ( 1.63%) 131703958 ( 0.96%) 440.74
smtp 360848 ( 1.97%) 69170718 ( 0.50%) 191.69
ftp 103608 ( 0.56%) 76644978 ( 0.56%) 739.76
pop3 9771 ( 0.05%) 4698284 ( 0.03%) 480.84
imap 4282 ( 0.02%) 489213 ( 0.00%) 114.25
telnet 762 ( 0.00%) 96953 ( 0.00%) 127.23
ssh 122776 ( 0.67%) 40192244 ( 0.29%) 327.36
dns 20633 ( 0.11%) 5338377 ( 0.04%) 258.73
bgp 166 ( 0.00%) 70467 ( 0.00%) 424.50
napster 16 ( 0.00%) 974 ( 0.00%) 60.88
realaud 71 ( 0.00%) 21002 ( 0.00%) 295.80
rtsp 24264 ( 0.13%) 29261514 ( 0.21%) 1205.96
icecast 17290 ( 0.09%) 1156271 ( 0.01%) 66.88
hotline 4 ( 0.00%) 246 ( 0.00%) 61.50
other 2992423 ( 16.30%) 2197531944 ( 15.97%) 734.37
udp 2217042 ( 12.08%) 777142396 ( 5.65%) 350.53
dns 1076332 ( 5.86%) 223813781 ( 1.63%) 207.94
rip 2 ( 0.00%) 120 ( 0.00%) 60.00
realaud 203 ( 0.00%) 13101 ( 0.00%) 64.54
halflif 39392 ( 0.21%) 17224824 ( 0.13%) 437.27
starcra 19 ( 0.00%) 3055 ( 0.00%) 160.79
everque 126 ( 0.00%) 27524 ( 0.00%) 218.44
unreal 509 ( 0.00%) 238839 ( 0.00%) 469.23
quake 21 ( 0.00%) 2440 ( 0.00%) 116.19
cuseeme 8 ( 0.00%) 701 ( 0.00%) 87.62
other 1100244 ( 5.99%) 535720847 ( 3.89%) 486.91
icmp 839399 ( 4.57%) 118100247 ( 0.86%) 140.70
ipip 292 ( 0.00%) 34632 ( 0.00%) 118.60
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 68540 ( 0.37%) 42998379 ( 0.31%) 627.35
other 30085 ( 0.16%) 7047950 ( 0.05%) 234.27
frag 66129 ( 0.36%) 67381077 ( 0.49%) 1018.93
ip6 34528 ( 0.19%) 9197132 ( 0.07%) 266.37
tcp6 11297 ( 0.06%) 4683917 ( 0.03%) 414.62
http(s) 2833 ( 0.02%) 1833831 ( 0.01%) 647.31
http(c) 5528 ( 0.03%) 992423 ( 0.01%) 179.53
smtp 282 ( 0.00%) 99885 ( 0.00%) 354.20
imap 150 ( 0.00%) 35025 ( 0.00%) 233.50
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 9 ( 0.00%) 1006 ( 0.00%) 111.78
bgp 376 ( 0.00%) 32473 ( 0.00%) 86.36
other 2117 ( 0.01%) 1689102 ( 0.01%) 797.88
udp6 18406 ( 0.10%) 3073328 ( 0.02%) 166.97
dns 14115 ( 0.08%) 2060149 ( 0.01%) 145.95
halflif 6 ( 0.00%) 2985 ( 0.00%) 497.50
other 4285 ( 0.02%) 1010194 ( 0.01%) 235.75
icmp6 3877 ( 0.02%) 571356 ( 0.00%) 147.37
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 918 ( 0.01%) 864451 ( 0.01%) 941.67
tcpdump file: 200903302130.dump.gz (451.70 MB)