Traffic Trace Info
DumpFile: 200903311130.dump
FileSize: 952.55MB
Id: 200903311130
StartTime: Tue Mar 31 11:30:00 2009
EndTime: Tue Mar 31 11:45:00 2009
TotalTime: 900.00 seconds
TotalCapSize: 745.04MB CapLen: 96 bytes
# of packets: 13598230 (9286.30MB)
AvgRate: 86.55Mbps stddev:12.70M
IP flow (unique src/dst pair) Information
# of flows: 653694 (avg. 20.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.5% 1.7% 1.7% 1.6% 1.6% 1.6% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 398064
Top 10 bandwidth usage (bytes/total in %):
11.9% 11.2% 5.9% 5.3% 3.6% 3.3% 2.9% 2.9% 2.8% 2.5%
# of IPv6 addresses: 2241
Top 10 bandwidth usage (bytes/total in %):
22.6% 22.6% 13.9% 12.4% 6.6% 4.7% 4.5% 4.4% 4.4% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311130.pktlen.png)
detailed numbers
[ 32- 63]: 3270229
[ 64- 127]: 2963707
[ 128- 255]: 522621
[ 256- 511]: 429547
[ 512- 1023]: 376018
[ 1024- 2047]: 6036108
Protocol Breakdown
![[protocol breakdown chart]](200903311130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13598230 (100.00%) 9737394857 (100.00%) 716.08
ip 13571184 ( 99.80%) 9731795440 ( 99.94%) 717.09
tcp 11264714 ( 82.84%) 9068771924 ( 93.13%) 805.06
http(s) 4609940 ( 33.90%) 6049755903 ( 62.13%) 1312.33
http(c) 3062784 ( 22.52%) 574311992 ( 5.90%) 187.51
squid 229438 ( 1.69%) 82898858 ( 0.85%) 361.31
smtp 304425 ( 2.24%) 129863109 ( 1.33%) 426.58
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 196696 ( 1.45%) 215236075 ( 2.21%) 1094.26
pop3 8114 ( 0.06%) 3043225 ( 0.03%) 375.06
imap 5755 ( 0.04%) 1752706 ( 0.02%) 304.55
telnet 2759 ( 0.02%) 361117 ( 0.00%) 130.89
ssh 43230 ( 0.32%) 8561472 ( 0.09%) 198.04
dns 14123 ( 0.10%) 3429365 ( 0.04%) 242.82
bgp 129 ( 0.00%) 40924 ( 0.00%) 317.24
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 21 ( 0.00%) 1410 ( 0.00%) 67.14
rtsp 148136 ( 1.09%) 87846442 ( 0.90%) 593.01
icecast 9240 ( 0.07%) 7729893 ( 0.08%) 836.57
hotline 7 ( 0.00%) 664 ( 0.00%) 94.86
other 2629798 ( 19.34%) 1903931629 ( 19.55%) 723.98
udp 1716676 ( 12.62%) 606960203 ( 6.23%) 353.57
dns 920420 ( 6.77%) 212553030 ( 2.18%) 230.93
realaud 1835 ( 0.01%) 110576 ( 0.00%) 60.26
halflif 30 ( 0.00%) 3526 ( 0.00%) 117.53
starcra 47 ( 0.00%) 9172 ( 0.00%) 195.15
everque 76 ( 0.00%) 14142 ( 0.00%) 186.08
unreal 22 ( 0.00%) 3212 ( 0.00%) 146.00
quake 14 ( 0.00%) 1995 ( 0.00%) 142.50
cuseeme 13 ( 0.00%) 1585 ( 0.00%) 121.92
other 794119 ( 5.84%) 394170099 ( 4.05%) 496.36
icmp 542587 ( 3.99%) 45729450 ( 0.47%) 84.28
ipip 306 ( 0.00%) 36156 ( 0.00%) 118.16
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 27902 ( 0.21%) 6993038 ( 0.07%) 250.63
other 18891 ( 0.14%) 3287605 ( 0.03%) 174.03
frag 43304 ( 0.32%) 48516055 ( 0.50%) 1120.36
ip6 27046 ( 0.20%) 5599417 ( 0.06%) 207.03
tcp6 5777 ( 0.04%) 1889877 ( 0.02%) 327.14
http(s) 165 ( 0.00%) 18363 ( 0.00%) 111.29
http(c) 2863 ( 0.02%) 259635 ( 0.00%) 90.69
smtp 274 ( 0.00%) 111947 ( 0.00%) 408.57
ssh 110 ( 0.00%) 23748 ( 0.00%) 215.89
bgp 373 ( 0.00%) 31563 ( 0.00%) 84.62
other 1992 ( 0.01%) 1444621 ( 0.01%) 725.21
udp6 16945 ( 0.12%) 2824917 ( 0.03%) 166.71
dns 14765 ( 0.11%) 2297348 ( 0.02%) 155.59
other 2180 ( 0.02%) 527569 ( 0.01%) 242.00
icmp6 3919 ( 0.03%) 555885 ( 0.01%) 141.84
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 375 ( 0.00%) 324658 ( 0.00%) 865.75
tcpdump file: 200903311130.dump.gz (335.09 MB)