Traffic Trace Info
DumpFile: 200903302300.dump
FileSize: 1291.00MB
Id: 200903302300
StartTime: Mon Mar 30 23:00:01 2009
EndTime: Mon Mar 30 23:15:01 2009
TotalTime: 899.92 seconds
TotalCapSize: 1003.53MB CapLen: 96 bytes
# of packets: 18827103 (13765.32MB)
AvgRate: 128.32Mbps stddev:17.75M
IP flow (unique src/dst pair) Information
# of flows: 835775 (avg. 22.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 3.0% 2.9% 1.3% 1.2% 1.1% 1.1% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 553874
Top 10 bandwidth usage (bytes/total in %):
14.0% 12.7% 8.5% 7.0% 7.0% 5.0% 3.8% 3.1% 3.0% 2.9%
# of IPv6 addresses: 2904
Top 10 bandwidth usage (bytes/total in %):
21.9% 20.3% 15.7% 15.7% 14.7% 13.8% 10.6% 7.2% 6.3% 5.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903302300.pktlen.png)
detailed numbers
[ 32- 63]: 4017962
[ 64- 127]: 3815812
[ 128- 255]: 966845
[ 256- 511]: 443506
[ 512- 1023]: 519182
[ 1024- 2047]: 9063796
Protocol Breakdown
![[protocol breakdown chart]](200903302300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18827103 (100.00%) 14433987932 (100.00%) 766.66
ip 18761493 ( 99.65%) 14421518001 ( 99.91%) 768.68
tcp 14525054 ( 77.15%) 12465832464 ( 86.36%) 858.23
http(s) 7069161 ( 37.55%) 9706520239 ( 67.25%) 1373.08
http(c) 3644410 ( 19.36%) 294523048 ( 2.04%) 80.82
squid 340275 ( 1.81%) 158675041 ( 1.10%) 466.31
smtp 366443 ( 1.95%) 99697615 ( 0.69%) 272.07
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 162378 ( 0.86%) 148753059 ( 1.03%) 916.09
pop3 9525 ( 0.05%) 5225030 ( 0.04%) 548.56
imap 4364 ( 0.02%) 1224342 ( 0.01%) 280.55
telnet 3153 ( 0.02%) 741753 ( 0.01%) 235.25
ssh 40977 ( 0.22%) 9416600 ( 0.07%) 229.80
dns 20036 ( 0.11%) 3254838 ( 0.02%) 162.45
bgp 161 ( 0.00%) 68647 ( 0.00%) 426.38
napster 186 ( 0.00%) 11731 ( 0.00%) 63.07
realaud 31 ( 0.00%) 2387 ( 0.00%) 77.00
rtsp 3762 ( 0.02%) 1490785 ( 0.01%) 396.27
icecast 12744 ( 0.07%) 876081 ( 0.01%) 68.74
other 2847377 ( 15.12%) 2035347008 ( 14.10%) 714.81
udp 3372266 ( 17.91%) 1783036606 ( 12.35%) 528.74
dns 1144433 ( 6.08%) 254517190 ( 1.76%) 222.40
realaud 1100 ( 0.01%) 66667 ( 0.00%) 60.61
halflif 131713 ( 0.70%) 36093715 ( 0.25%) 274.03
starcra 39 ( 0.00%) 6863 ( 0.00%) 175.97
everque 73 ( 0.00%) 13784 ( 0.00%) 188.82
unreal 513 ( 0.00%) 252744 ( 0.00%) 492.68
quake 9 ( 0.00%) 740 ( 0.00%) 82.22
cuseeme 3 ( 0.00%) 251 ( 0.00%) 83.67
other 2094017 ( 11.12%) 1491950255 ( 10.34%) 712.48
icmp 723108 ( 3.84%) 113139246 ( 0.78%) 156.46
ipip 327 ( 0.00%) 39576 ( 0.00%) 121.03
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 70334 ( 0.37%) 43949126 ( 0.30%) 624.86
other 70292 ( 0.37%) 15503287 ( 0.11%) 220.56
frag 97459 ( 0.52%) 93794224 ( 0.65%) 962.40
ip6 65610 ( 0.35%) 12469931 ( 0.09%) 190.06
tcp6 42715 ( 0.23%) 8390449 ( 0.06%) 196.43
http(s) 3171 ( 0.02%) 1867060 ( 0.01%) 588.79
http(c) 35777 ( 0.19%) 3533834 ( 0.02%) 98.77
smtp 523 ( 0.00%) 283478 ( 0.00%) 542.02
ssh 3 ( 0.00%) 246 ( 0.00%) 82.00
bgp 365 ( 0.00%) 31262 ( 0.00%) 85.65
other 2876 ( 0.02%) 2674569 ( 0.02%) 929.96
udp6 17966 ( 0.10%) 2998535 ( 0.02%) 166.90
dns 14092 ( 0.07%) 2125367 ( 0.01%) 150.82
everque 1 ( 0.00%) 145 ( 0.00%) 145.00
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 3872 ( 0.02%) 872921 ( 0.01%) 225.44
icmp6 4354 ( 0.02%) 570930 ( 0.00%) 131.13
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 544 ( 0.00%) 505801 ( 0.00%) 929.78
tcpdump file: 200903302300.dump.gz (458.74 MB)