Traffic Trace Info
DumpFile: 200903302230.dump
FileSize: 1308.52MB
Id: 200903302230
StartTime: Mon Mar 30 22:30:00 2009
EndTime: Mon Mar 30 22:45:01 2009
TotalTime: 900.31 seconds
TotalCapSize: 1018.00MB CapLen: 96 bytes
# of packets: 19019484 (13815.42MB)
AvgRate: 128.72Mbps stddev:12.61M
IP flow (unique src/dst pair) Information
# of flows: 801681 (avg. 23.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 1.3% 1.1% 1.1% 1.0% 0.8% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 524168
Top 10 bandwidth usage (bytes/total in %):
13.7% 11.1% 9.2% 7.4% 7.4% 5.8% 5.5% 2.2% 2.0% 1.7%
# of IPv6 addresses: 3038
Top 10 bandwidth usage (bytes/total in %):
25.3% 18.0% 16.9% 16.9% 12.0% 11.7% 9.4% 7.3% 7.0% 6.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903302230.pktlen.png)
detailed numbers
[ 32- 63]: 3965785
[ 64- 127]: 4154901
[ 128- 255]: 899177
[ 256- 511]: 431385
[ 512- 1023]: 482656
[ 1024- 2047]: 9085580
Protocol Breakdown
![[protocol breakdown chart]](200903302230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19019484 (100.00%) 14486520581 (100.00%) 761.67
ip 18961491 ( 99.70%) 14475741572 ( 99.93%) 763.43
tcp 14505999 ( 76.27%) 12464464113 ( 86.04%) 859.26
http(s) 7100600 ( 37.33%) 9788416403 ( 67.57%) 1378.53
http(c) 3518372 ( 18.50%) 308020560 ( 2.13%) 87.55
squid 355100 ( 1.87%) 133228841 ( 0.92%) 375.19
smtp 375643 ( 1.98%) 69039916 ( 0.48%) 183.79
ftp 230131 ( 1.21%) 224121186 ( 1.55%) 973.89
pop3 10722 ( 0.06%) 6068600 ( 0.04%) 566.00
imap 5902 ( 0.03%) 1333765 ( 0.01%) 225.99
telnet 8473 ( 0.04%) 2437829 ( 0.02%) 287.72
ssh 106805 ( 0.56%) 32758099 ( 0.23%) 306.71
dns 21499 ( 0.11%) 5414010 ( 0.04%) 251.83
bgp 150 ( 0.00%) 63839 ( 0.00%) 425.59
napster 451 ( 0.00%) 276060 ( 0.00%) 612.11
realaud 39 ( 0.00%) 6052 ( 0.00%) 155.18
rtsp 3603 ( 0.02%) 1307266 ( 0.01%) 362.83
icecast 17320 ( 0.09%) 4324032 ( 0.03%) 249.66
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 2751144 ( 14.46%) 1887644955 ( 13.03%) 686.13
udp 3343033 ( 17.58%) 1826310217 ( 12.61%) 546.30
dns 1131495 ( 5.95%) 249087769 ( 1.72%) 220.14
realaud 1259 ( 0.01%) 75884 ( 0.00%) 60.27
halflif 103181 ( 0.54%) 27504328 ( 0.19%) 266.56
starcra 28 ( 0.00%) 5184 ( 0.00%) 185.14
everque 106 ( 0.00%) 30524 ( 0.00%) 287.96
unreal 503 ( 0.00%) 232773 ( 0.00%) 462.77
quake 20 ( 0.00%) 1791 ( 0.00%) 89.55
cuseeme 4 ( 0.00%) 376 ( 0.00%) 94.00
other 2106126 ( 11.07%) 1549257115 ( 10.69%) 735.60
icmp 976354 ( 5.13%) 128993200 ( 0.89%) 132.12
ipip 320 ( 0.00%) 37986 ( 0.00%) 118.71
ipsec 114 ( 0.00%) 18012 ( 0.00%) 158.00
ip6 69069 ( 0.36%) 43307206 ( 0.30%) 627.01
other 66602 ( 0.35%) 12610838 ( 0.09%) 189.35
frag 97549 ( 0.51%) 92999211 ( 0.64%) 953.36
ip6 57993 ( 0.30%) 10779009 ( 0.07%) 185.87
tcp6 35601 ( 0.19%) 6503096 ( 0.04%) 182.67
http(s) 3101 ( 0.02%) 1969242 ( 0.01%) 635.03
http(c) 29751 ( 0.16%) 2945766 ( 0.02%) 99.01
smtp 164 ( 0.00%) 72215 ( 0.00%) 440.34
bgp 372 ( 0.00%) 31587 ( 0.00%) 84.91
other 2213 ( 0.01%) 1484286 ( 0.01%) 670.71
udp6 17868 ( 0.09%) 3020702 ( 0.02%) 169.06
dns 13719 ( 0.07%) 2015242 ( 0.01%) 146.89
halflif 1 ( 0.00%) 145 ( 0.00%) 145.00
other 4148 ( 0.02%) 1005315 ( 0.01%) 242.36
icmp6 3714 ( 0.02%) 512841 ( 0.00%) 138.08
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 780 ( 0.00%) 738290 ( 0.01%) 946.53
tcpdump file: 200903302230.dump.gz (464.04 MB)