Traffic Trace Info
DumpFile: 200903302245.dump
FileSize: 1300.15MB
Id: 200903302245
StartTime: Mon Mar 30 22:45:01 2009
EndTime: Mon Mar 30 23:00:01 2009
TotalTime: 900.34 seconds
TotalCapSize: 1011.08MB CapLen: 96 bytes
# of packets: 18924780 (13476.52MB)
AvgRate: 125.60Mbps stddev:13.65M
IP flow (unique src/dst pair) Information
# of flows: 973320 (avg. 19.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 1.6% 1.3% 1.2% 1.0% 0.9% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 570083
Top 10 bandwidth usage (bytes/total in %):
15.4% 15.2% 9.8% 6.8% 6.8% 5.1% 2.4% 2.4% 2.2% 1.8%
# of IPv6 addresses: 2998
Top 10 bandwidth usage (bytes/total in %):
23.7% 16.2% 16.2% 16.1% 10.8% 10.6% 9.7% 7.6% 6.3% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903302245.pktlen.png)
detailed numbers
[ 32- 63]: 4221225
[ 64- 127]: 3967115
[ 128- 255]: 943170
[ 256- 511]: 454171
[ 512- 1023]: 519224
[ 1024- 2047]: 8819875
Protocol Breakdown
![[protocol breakdown chart]](200903302245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18924780 (100.00%) 14131152296 (100.00%) 746.70
ip 18860163 ( 99.66%) 14119210289 ( 99.92%) 748.63
tcp 14531017 ( 76.78%) 12226049879 ( 86.52%) 841.38
http(s) 7156236 ( 37.81%) 9735593319 ( 68.89%) 1360.43
http(c) 3884920 ( 20.53%) 360324225 ( 2.55%) 92.75
squid 358206 ( 1.89%) 182986491 ( 1.29%) 510.84
smtp 368363 ( 1.95%) 97810618 ( 0.69%) 265.53
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 212415 ( 1.12%) 205973547 ( 1.46%) 969.68
pop3 9014 ( 0.05%) 4453960 ( 0.03%) 494.12
imap 5344 ( 0.03%) 1251767 ( 0.01%) 234.24
telnet 7728 ( 0.04%) 2261402 ( 0.02%) 292.62
ssh 74405 ( 0.39%) 20156376 ( 0.14%) 270.90
dns 19408 ( 0.10%) 3188917 ( 0.02%) 164.31
bgp 179 ( 0.00%) 76806 ( 0.00%) 429.08
napster 189 ( 0.00%) 14535 ( 0.00%) 76.90
realaud 16 ( 0.00%) 1110 ( 0.00%) 69.38
rtsp 2717 ( 0.01%) 781578 ( 0.01%) 287.66
icecast 12480 ( 0.07%) 842086 ( 0.01%) 67.47
hotline 2 ( 0.00%) 132 ( 0.00%) 66.00
other 2419359 ( 12.78%) 1610330850 ( 11.40%) 665.60
udp 3224490 ( 17.04%) 1712842447 ( 12.12%) 531.20
dns 1139391 ( 6.02%) 250428223 ( 1.77%) 219.79
realaud 605 ( 0.00%) 38043 ( 0.00%) 62.88
halflif 110396 ( 0.58%) 29228379 ( 0.21%) 264.76
starcra 32 ( 0.00%) 5454 ( 0.00%) 170.44
everque 65 ( 0.00%) 12634 ( 0.00%) 194.37
unreal 623 ( 0.00%) 302881 ( 0.00%) 486.17
quake 24 ( 0.00%) 2040 ( 0.00%) 85.00
cuseeme 8 ( 0.00%) 902 ( 0.00%) 112.75
other 1973033 ( 10.43%) 1432694744 ( 10.14%) 726.14
icmp 964892 ( 5.10%) 125380132 ( 0.89%) 129.94
ipip 338 ( 0.00%) 41342 ( 0.00%) 122.31
ipsec 118 ( 0.00%) 18604 ( 0.00%) 157.66
ip6 67884 ( 0.36%) 40834573 ( 0.29%) 601.53
other 71424 ( 0.38%) 14043312 ( 0.10%) 196.62
frag 110674 ( 0.58%) 102745955 ( 0.73%) 928.37
ip6 64617 ( 0.34%) 11942007 ( 0.08%) 184.81
tcp6 41904 ( 0.22%) 7667460 ( 0.05%) 182.98
http(s) 3680 ( 0.02%) 2553366 ( 0.02%) 693.85
http(c) 35581 ( 0.19%) 3551876 ( 0.03%) 99.83
smtp 276 ( 0.00%) 126949 ( 0.00%) 459.96
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 351 ( 0.00%) 29045 ( 0.00%) 82.75
other 2012 ( 0.01%) 1405827 ( 0.01%) 698.72
udp6 17343 ( 0.09%) 2802712 ( 0.02%) 161.60
dns 13705 ( 0.07%) 2002300 ( 0.01%) 146.10
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
halflif 3 ( 0.00%) 800 ( 0.00%) 266.67
starcra 1 ( 0.00%) 566 ( 0.00%) 566.00
other 3633 ( 0.02%) 798939 ( 0.01%) 219.91
icmp6 4390 ( 0.02%) 583089 ( 0.00%) 132.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 950 ( 0.01%) 884666 ( 0.01%) 931.23
tcpdump file: 200903302245.dump.gz (463.77 MB)