Traffic Trace Info
DumpFile: 200903302330.dump
FileSize: 1296.98MB
Id: 200903302330
StartTime: Mon Mar 30 23:30:00 2009
EndTime: Mon Mar 30 23:45:01 2009
TotalTime: 900.48 seconds
TotalCapSize: 1008.32MB CapLen: 96 bytes
# of packets: 18900883 (14224.51MB)
AvgRate: 132.51Mbps stddev:11.27M
IP flow (unique src/dst pair) Information
# of flows: 814839 (avg. 23.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 2.9% 2.4% 1.6% 1.4% 1.3% 1.1% 1.0% 1.0% 0.7%
IP address Information
# of IPv4 addresses: 522298
Top 10 bandwidth usage (bytes/total in %):
13.3% 12.0% 8.9% 5.9% 5.4% 5.2% 5.2% 2.9% 2.9% 2.4%
# of IPv6 addresses: 3479
Top 10 bandwidth usage (bytes/total in %):
21.8% 18.0% 18.0% 14.2% 11.5% 11.3% 10.5% 8.7% 7.7% 6.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903302330.pktlen.png)
detailed numbers
[ 32- 63]: 3836518
[ 64- 127]: 3672958
[ 128- 255]: 1034329
[ 256- 511]: 472543
[ 512- 1023]: 429329
[ 1024- 2047]: 9455206
Protocol Breakdown
![[protocol breakdown chart]](200903302330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18900883 (100.00%) 14915484585 (100.00%) 789.14
ip 18840131 ( 99.68%) 14904334336 ( 99.93%) 791.10
tcp 14495864 ( 76.69%) 12963817659 ( 86.92%) 894.31
http(s) 7154513 ( 37.85%) 9822800178 ( 65.86%) 1372.95
http(c) 3686392 ( 19.50%) 521448637 ( 3.50%) 141.45
squid 452079 ( 2.39%) 230120783 ( 1.54%) 509.03
smtp 350669 ( 1.86%) 127083885 ( 0.85%) 362.40
ftp 113176 ( 0.60%) 84834974 ( 0.57%) 749.58
pop3 8585 ( 0.05%) 3996959 ( 0.03%) 465.57
imap 8321 ( 0.04%) 4597016 ( 0.03%) 552.46
telnet 1296 ( 0.01%) 151414 ( 0.00%) 116.83
ssh 37709 ( 0.20%) 8032632 ( 0.05%) 213.02
dns 21770 ( 0.12%) 5449233 ( 0.04%) 250.31
bgp 162 ( 0.00%) 64292 ( 0.00%) 396.86
napster 404 ( 0.00%) 188173 ( 0.00%) 465.77
realaud 149 ( 0.00%) 12061 ( 0.00%) 80.95
rtsp 3291 ( 0.02%) 1095303 ( 0.01%) 332.82
icecast 12419 ( 0.07%) 841011 ( 0.01%) 67.72
other 2644924 ( 13.99%) 2153100808 ( 14.44%) 814.05
udp 3470005 ( 18.36%) 1766202037 ( 11.84%) 508.99
dns 1105119 ( 5.85%) 240874405 ( 1.61%) 217.96
realaud 914 ( 0.00%) 55595 ( 0.00%) 60.83
halflif 129323 ( 0.68%) 33371847 ( 0.22%) 258.05
starcra 28 ( 0.00%) 4176 ( 0.00%) 149.14
everque 35805 ( 0.19%) 28527807 ( 0.19%) 796.75
unreal 488 ( 0.00%) 240725 ( 0.00%) 493.29
quake 21 ( 0.00%) 1856 ( 0.00%) 88.38
cuseeme 2 ( 0.00%) 158 ( 0.00%) 79.00
other 2197989 ( 11.63%) 1463006694 ( 9.81%) 665.61
icmp 731370 ( 3.87%) 108250353 ( 0.73%) 148.01
ipip 333 ( 0.00%) 41618 ( 0.00%) 124.98
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 80369 ( 0.43%) 54742285 ( 0.37%) 681.14
other 62078 ( 0.33%) 11262688 ( 0.08%) 181.43
frag 82317 ( 0.44%) 81297504 ( 0.55%) 987.62
ip6 60752 ( 0.32%) 11150249 ( 0.07%) 183.54
tcp6 38395 ( 0.20%) 6653468 ( 0.04%) 173.29
http(s) 2820 ( 0.01%) 1781893 ( 0.01%) 631.88
http(c) 31428 ( 0.17%) 3115950 ( 0.02%) 99.15
smtp 331 ( 0.00%) 141945 ( 0.00%) 428.84
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 9 ( 0.00%) 945 ( 0.00%) 105.00
bgp 386 ( 0.00%) 34126 ( 0.00%) 88.41
other 3419 ( 0.02%) 1578437 ( 0.01%) 461.67
udp6 17856 ( 0.09%) 3239882 ( 0.02%) 181.45
dns 12813 ( 0.07%) 1862142 ( 0.01%) 145.33
halflif 5 ( 0.00%) 1466 ( 0.00%) 293.20
starcra 2 ( 0.00%) 692 ( 0.00%) 346.00
cuseeme 2 ( 0.00%) 201 ( 0.00%) 100.50
other 5034 ( 0.03%) 1375381 ( 0.01%) 273.22
icmp6 3694 ( 0.02%) 524666 ( 0.00%) 142.03
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 777 ( 0.00%) 728153 ( 0.00%) 937.13
tcpdump file: 200903302330.dump.gz (460.02 MB)