Traffic Trace Info
DumpFile: 200903311030.dump
FileSize: 960.86MB
Id: 200903311030
StartTime: Tue Mar 31 10:30:01 2009
EndTime: Tue Mar 31 10:45:01 2009
TotalTime: 900.07 seconds
TotalCapSize: 752.43MB CapLen: 96 bytes
# of packets: 13658776 (8933.82MB)
AvgRate: 83.27Mbps stddev:15.24M
IP flow (unique src/dst pair) Information
# of flows: 646387 (avg. 21.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 2.3% 1.8% 1.8% 1.6% 1.5% 1.3% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 431634
Top 10 bandwidth usage (bytes/total in %):
13.9% 8.5% 6.7% 6.6% 5.8% 5.6% 4.0% 3.4% 2.6% 2.3%
# of IPv6 addresses: 2783
Top 10 bandwidth usage (bytes/total in %):
78.0% 77.9% 3.6% 3.6% 3.4% 3.4% 2.9% 2.1% 2.0% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311030.pktlen.png)
detailed numbers
[ 32- 63]: 2980485
[ 64- 127]: 3597015
[ 128- 255]: 555320
[ 256- 511]: 421311
[ 512- 1023]: 308405
[ 1024- 2047]: 5796240
Protocol Breakdown
![[protocol breakdown chart]](200903311030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13658776 (100.00%) 9367789062 (100.00%) 685.84
ip 13607047 ( 99.62%) 9330875246 ( 99.61%) 685.74
tcp 10999349 ( 80.53%) 8764498371 ( 93.56%) 796.82
http(s) 4739491 ( 34.70%) 6278728404 ( 67.02%) 1324.77
http(c) 2818126 ( 20.63%) 283790942 ( 3.03%) 100.70
squid 218127 ( 1.60%) 78146881 ( 0.83%) 358.26
smtp 313277 ( 2.29%) 107672979 ( 1.15%) 343.70
ftp 132045 ( 0.97%) 112388536 ( 1.20%) 851.14
pop3 6996 ( 0.05%) 2372114 ( 0.03%) 339.07
imap 3381 ( 0.02%) 344872 ( 0.00%) 102.00
telnet 2713 ( 0.02%) 397809 ( 0.00%) 146.63
ssh 69842 ( 0.51%) 10981416 ( 0.12%) 157.23
dns 20927 ( 0.15%) 11484143 ( 0.12%) 548.77
bgp 140 ( 0.00%) 42424 ( 0.00%) 303.03
napster 10 ( 0.00%) 949 ( 0.00%) 94.90
realaud 10 ( 0.00%) 716 ( 0.00%) 71.60
rtsp 235002 ( 1.72%) 136732616 ( 1.46%) 581.84
icecast 7171 ( 0.05%) 5943653 ( 0.06%) 828.85
hotline 34 ( 0.00%) 2106 ( 0.00%) 61.94
other 2432037 ( 17.81%) 1735466611 ( 18.53%) 713.59
udp 1574618 ( 11.53%) 482252130 ( 5.15%) 306.27
dns 862118 ( 6.31%) 190073669 ( 2.03%) 220.47
realaud 18 ( 0.00%) 2633 ( 0.00%) 146.28
halflif 51 ( 0.00%) 5494 ( 0.00%) 107.73
starcra 19 ( 0.00%) 2916 ( 0.00%) 153.47
everque 62 ( 0.00%) 11463 ( 0.00%) 184.89
unreal 22 ( 0.00%) 2910 ( 0.00%) 132.27
quake 26 ( 0.00%) 3111 ( 0.00%) 119.65
cuseeme 3 ( 0.00%) 529 ( 0.00%) 176.33
other 712170 ( 5.21%) 292070053 ( 3.12%) 410.11
icmp 992960 ( 7.27%) 77008536 ( 0.82%) 77.55
ipip 331 ( 0.00%) 39810 ( 0.00%) 120.27
ipsec 302 ( 0.00%) 71596 ( 0.00%) 237.07
ip6 29006 ( 0.21%) 5607525 ( 0.06%) 193.32
other 10481 ( 0.08%) 1397278 ( 0.01%) 133.32
frag 39071 ( 0.29%) 42657112 ( 0.46%) 1091.78
ip6 51729 ( 0.38%) 36913816 ( 0.39%) 713.60
tcp6 29264 ( 0.21%) 32403155 ( 0.35%) 1107.27
http(s) 379 ( 0.00%) 335151 ( 0.00%) 884.30
http(c) 2404 ( 0.02%) 233306 ( 0.00%) 97.05
smtp 836 ( 0.01%) 300424 ( 0.00%) 359.36
ftp 21 ( 0.00%) 6979 ( 0.00%) 332.33
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
bgp 368 ( 0.00%) 31254 ( 0.00%) 84.93
other 25254 ( 0.18%) 31495816 ( 0.34%) 1247.16
udp6 17580 ( 0.13%) 3078702 ( 0.03%) 175.13
dns 14037 ( 0.10%) 2109804 ( 0.02%) 150.30
quake 1 ( 0.00%) 119 ( 0.00%) 119.00
other 3542 ( 0.03%) 968779 ( 0.01%) 273.51
icmp6 3923 ( 0.03%) 554193 ( 0.01%) 141.27
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 932 ( 0.01%) 873686 ( 0.01%) 937.43
tcpdump file: 200903311030.dump.gz (322.88 MB)