Traffic Trace Info
DumpFile: 200903302145.dump
FileSize: 1284.40MB
Id: 200903302145
StartTime: Mon Mar 30 21:45:00 2009
EndTime: Mon Mar 30 22:00:01 2009
TotalTime: 900.42 seconds
TotalCapSize: 998.98MB CapLen: 96 bytes
# of packets: 18692588 (13749.50MB)
AvgRate: 128.10Mbps stddev:14.99M
IP flow (unique src/dst pair) Information
# of flows: 886192 (avg. 21.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 1.7% 1.4% 1.2% 1.2% 1.2% 1.0% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 566931
Top 10 bandwidth usage (bytes/total in %):
13.2% 12.5% 11.7% 6.0% 4.7% 3.8% 3.8% 3.6% 3.6% 2.7%
# of IPv6 addresses: 2899
Top 10 bandwidth usage (bytes/total in %):
24.3% 16.0% 16.0% 15.9% 15.8% 9.6% 8.4% 5.4% 4.1% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903302145.pktlen.png)
detailed numbers
[ 32- 63]: 3981773
[ 64- 127]: 3762913
[ 128- 255]: 967771
[ 256- 511]: 403266
[ 512- 1023]: 385326
[ 1024- 2047]: 9191539
Protocol Breakdown
![[protocol breakdown chart]](200903302145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18692588 (100.00%) 14417393942 (100.00%) 771.29
ip 18660720 ( 99.83%) 14409382574 ( 99.94%) 772.18
tcp 14832708 ( 79.35%) 12860115226 ( 89.20%) 867.01
http(s) 7060282 ( 37.77%) 9617042520 ( 66.70%) 1362.13
http(c) 3277857 ( 17.54%) 288443461 ( 2.00%) 88.00
squid 290244 ( 1.55%) 122316833 ( 0.85%) 421.43
smtp 426629 ( 2.28%) 111920147 ( 0.78%) 262.34
ftp 124414 ( 0.67%) 103469953 ( 0.72%) 831.66
pop3 10835 ( 0.06%) 5402628 ( 0.04%) 498.63
imap 4380 ( 0.02%) 347857 ( 0.00%) 79.42
telnet 713 ( 0.00%) 88998 ( 0.00%) 124.82
ssh 203674 ( 1.09%) 50207915 ( 0.35%) 246.51
dns 18681 ( 0.10%) 1814602 ( 0.01%) 97.14
bgp 140 ( 0.00%) 46992 ( 0.00%) 335.66
napster 15 ( 0.00%) 910 ( 0.00%) 60.67
realaud 14 ( 0.00%) 986 ( 0.00%) 70.43
rtsp 165291 ( 0.88%) 205793178 ( 1.43%) 1245.04
icecast 32398 ( 0.17%) 13656079 ( 0.09%) 421.51
other 3217136 ( 17.21%) 2339561867 ( 16.23%) 727.22
udp 3023609 ( 16.18%) 1391587588 ( 9.65%) 460.24
dns 1211216 ( 6.48%) 256611783 ( 1.78%) 211.86
rip 2 ( 0.00%) 120 ( 0.00%) 60.00
realaud 17 ( 0.00%) 1665 ( 0.00%) 97.94
halflif 184 ( 0.00%) 30160 ( 0.00%) 163.91
starcra 25 ( 0.00%) 4397 ( 0.00%) 175.88
everque 119 ( 0.00%) 18953 ( 0.00%) 159.27
unreal 636 ( 0.00%) 313839 ( 0.00%) 493.46
quake 28 ( 0.00%) 3977 ( 0.00%) 142.04
cuseeme 5 ( 0.00%) 737 ( 0.00%) 147.40
other 1811096 ( 9.69%) 1134499099 ( 7.87%) 626.42
icmp 715821 ( 3.83%) 110333710 ( 0.77%) 154.14
ipip 330 ( 0.00%) 40340 ( 0.00%) 122.24
ipsec 118 ( 0.00%) 18604 ( 0.00%) 157.66
ip6 67388 ( 0.36%) 40195734 ( 0.28%) 596.48
other 20746 ( 0.11%) 7091372 ( 0.05%) 341.82
frag 69638 ( 0.37%) 70300013 ( 0.49%) 1009.51
ip6 31868 ( 0.17%) 8011368 ( 0.06%) 251.39
tcp6 9309 ( 0.05%) 3679888 ( 0.03%) 395.30
http(s) 2309 ( 0.01%) 1309592 ( 0.01%) 567.17
http(c) 4548 ( 0.02%) 859543 ( 0.01%) 188.99
smtp 192 ( 0.00%) 76813 ( 0.00%) 400.07
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 363 ( 0.00%) 30223 ( 0.00%) 83.26
other 1895 ( 0.01%) 1403545 ( 0.01%) 740.66
udp6 18193 ( 0.10%) 3175727 ( 0.02%) 174.56
dns 14014 ( 0.07%) 2136189 ( 0.01%) 152.43
halflif 3 ( 0.00%) 1708 ( 0.00%) 569.33
unreal 1 ( 0.00%) 117 ( 0.00%) 117.00
other 4175 ( 0.02%) 1037713 ( 0.01%) 248.55
icmp6 3640 ( 0.02%) 497020 ( 0.00%) 136.54
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 696 ( 0.00%) 654653 ( 0.00%) 940.59
tcpdump file: 200903302145.dump.gz (457.91 MB)