Traffic Trace Info
DumpFile: 200903302345.dump
FileSize: 1240.31MB
Id: 200903302345
StartTime: Mon Mar 30 23:45:01 2009
EndTime: Tue Mar 31 00:00:01 2009
TotalTime: 900.09 seconds
TotalCapSize: 967.18MB CapLen: 96 bytes
# of packets: 17880250 (13311.41MB)
AvgRate: 124.05Mbps stddev:12.38M
IP flow (unique src/dst pair) Information
# of flows: 836688 (avg. 21.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 1.9% 1.7% 1.3% 1.3% 1.2% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 529663
Top 10 bandwidth usage (bytes/total in %):
13.5% 13.5% 12.9% 5.8% 5.8% 5.2% 3.7% 2.3% 2.0% 2.0%
# of IPv6 addresses: 2788
Top 10 bandwidth usage (bytes/total in %):
22.1% 22.0% 19.9% 13.4% 12.8% 12.8% 8.6% 7.1% 6.5% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903302345.pktlen.png)
detailed numbers
[ 32- 63]: 3931166
[ 64- 127]: 3303679
[ 128- 255]: 988955
[ 256- 511]: 434695
[ 512- 1023]: 402289
[ 1024- 2047]: 8819466
Protocol Breakdown
![[protocol breakdown chart]](200903302345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17880250 (100.00%) 13958021969 (100.00%) 780.64
ip 17819850 ( 99.66%) 13948002359 ( 99.93%) 782.72
tcp 14541890 ( 81.33%) 13114172187 ( 93.95%) 901.82
http(s) 7484230 ( 41.86%) 10406706748 ( 74.56%) 1390.48
http(c) 3714382 ( 20.77%) 539024542 ( 3.86%) 145.12
squid 476438 ( 2.66%) 254808575 ( 1.83%) 534.82
smtp 297673 ( 1.66%) 68601092 ( 0.49%) 230.46
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 117010 ( 0.65%) 90457974 ( 0.65%) 773.08
pop3 15414 ( 0.09%) 14381953 ( 0.10%) 933.04
imap 9966 ( 0.06%) 4705532 ( 0.03%) 472.16
telnet 847 ( 0.00%) 104108 ( 0.00%) 122.91
ssh 44997 ( 0.25%) 12678414 ( 0.09%) 281.76
dns 20062 ( 0.11%) 3229830 ( 0.02%) 160.99
bgp 157 ( 0.00%) 58133 ( 0.00%) 370.27
napster 98 ( 0.00%) 6395 ( 0.00%) 65.26
realaud 52 ( 0.00%) 5096 ( 0.00%) 98.00
rtsp 1488 ( 0.01%) 110909 ( 0.00%) 74.54
icecast 12406 ( 0.07%) 834824 ( 0.01%) 67.29
other 2346620 ( 13.12%) 1718455062 ( 12.31%) 732.31
udp 2290395 ( 12.81%) 667422975 ( 4.78%) 291.40
dns 1135851 ( 6.35%) 250844605 ( 1.80%) 220.84
realaud 914 ( 0.01%) 55056 ( 0.00%) 60.24
halflif 98990 ( 0.55%) 25902749 ( 0.19%) 261.67
starcra 43 ( 0.00%) 7053 ( 0.00%) 164.02
everque 15526 ( 0.09%) 10789464 ( 0.08%) 694.93
unreal 601 ( 0.00%) 297598 ( 0.00%) 495.17
quake 33 ( 0.00%) 2835 ( 0.00%) 85.91
cuseeme 4 ( 0.00%) 335 ( 0.00%) 83.75
other 1038290 ( 5.81%) 379418537 ( 2.72%) 365.43
icmp 907624 ( 5.08%) 122184035 ( 0.88%) 134.62
ipip 311 ( 0.00%) 36784 ( 0.00%) 118.28
ipsec 116 ( 0.00%) 18360 ( 0.00%) 158.28
ip6 66561 ( 0.37%) 40942689 ( 0.29%) 615.12
other 12953 ( 0.07%) 3225329 ( 0.02%) 249.00
frag 67082 ( 0.38%) 71067486 ( 0.51%) 1059.41
ip6 60400 ( 0.34%) 10019610 ( 0.07%) 165.89
tcp6 38714 ( 0.22%) 6137971 ( 0.04%) 158.55
http(s) 2423 ( 0.01%) 1437098 ( 0.01%) 593.11
http(c) 33481 ( 0.19%) 3115783 ( 0.02%) 93.06
smtp 261 ( 0.00%) 111582 ( 0.00%) 427.52
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 6 ( 0.00%) 649 ( 0.00%) 108.17
bgp 360 ( 0.00%) 30097 ( 0.00%) 83.60
other 2181 ( 0.01%) 1442590 ( 0.01%) 661.44
udp6 16935 ( 0.09%) 2657181 ( 0.02%) 156.90
dns 13782 ( 0.08%) 2042176 ( 0.01%) 148.18
other 3153 ( 0.02%) 615005 ( 0.00%) 195.05
icmp6 3979 ( 0.02%) 531353 ( 0.00%) 133.54
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 742 ( 0.00%) 689025 ( 0.00%) 928.61
tcpdump file: 200903302345.dump.gz (438.79 MB)