Traffic Trace Info
DumpFile: 200903310000.dump
FileSize: 1285.24MB
Id: 200903310000
StartTime: Tue Mar 31 00:00:01 2009
EndTime: Tue Mar 31 00:15:01 2009
TotalTime: 900.05 seconds
TotalCapSize: 1002.21MB CapLen: 96 bytes
# of packets: 18527798 (14152.58MB)
AvgRate: 131.91Mbps stddev:18.32M
IP flow (unique src/dst pair) Information
# of flows: 962702 (avg. 19.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 3.4% 1.9% 1.5% 1.3% 1.2% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 570712
Top 10 bandwidth usage (bytes/total in %):
13.3% 12.0% 11.5% 6.1% 5.2% 5.2% 4.6% 3.6% 3.6% 3.4%
# of IPv6 addresses: 3445
Top 10 bandwidth usage (bytes/total in %):
56.5% 56.5% 16.7% 13.5% 6.1% 6.1% 5.4% 5.4% 4.0% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310000.pktlen.png)
detailed numbers
[ 32- 63]: 4203733
[ 64- 127]: 3138950
[ 128- 255]: 955061
[ 256- 511]: 447378
[ 512- 1023]: 368462
[ 1024- 2047]: 9414214
Protocol Breakdown
![[protocol breakdown chart]](200903310000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18527798 (100.00%) 14840059271 (100.00%) 800.96
ip 18439991 ( 99.53%) 14798215795 ( 99.72%) 802.51
tcp 15538372 ( 83.87%) 14101303080 ( 95.02%) 907.51
http(s) 8103068 ( 43.73%) 11271957039 ( 75.96%) 1391.07
http(c) 3740707 ( 20.19%) 552711037 ( 3.72%) 147.76
squid 450913 ( 2.43%) 209424781 ( 1.41%) 464.45
smtp 321916 ( 1.74%) 98692343 ( 0.67%) 306.58
ftp 197847 ( 1.07%) 200776031 ( 1.35%) 1014.80
pop3 6088 ( 0.03%) 1710767 ( 0.01%) 281.01
imap 4378 ( 0.02%) 1212795 ( 0.01%) 277.02
telnet 898 ( 0.00%) 100279 ( 0.00%) 111.67
ssh 88139 ( 0.48%) 52857866 ( 0.36%) 599.71
dns 23213 ( 0.13%) 7069910 ( 0.05%) 304.57
bgp 179 ( 0.00%) 80142 ( 0.00%) 447.72
napster 119 ( 0.00%) 7643 ( 0.00%) 64.23
realaud 78 ( 0.00%) 5518 ( 0.00%) 70.74
rtsp 1470 ( 0.01%) 104438 ( 0.00%) 71.05
icecast 12386 ( 0.07%) 832366 ( 0.01%) 67.20
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2586920 ( 13.96%) 1703756945 ( 11.48%) 658.60
udp 2053749 ( 11.08%) 538105780 ( 3.63%) 262.01
dns 1186645 ( 6.40%) 262697845 ( 1.77%) 221.38
realaud 919 ( 0.00%) 55502 ( 0.00%) 60.39
halflif 174 ( 0.00%) 27075 ( 0.00%) 155.60
starcra 22 ( 0.00%) 2789 ( 0.00%) 126.77
everque 256 ( 0.00%) 50775 ( 0.00%) 198.34
unreal 551 ( 0.00%) 273804 ( 0.00%) 496.92
quake 18 ( 0.00%) 1910 ( 0.00%) 106.11
cuseeme 3 ( 0.00%) 305 ( 0.00%) 101.67
other 864905 ( 4.67%) 274853109 ( 1.85%) 317.78
icmp 766110 ( 4.13%) 112374770 ( 0.76%) 146.68
ipip 338 ( 0.00%) 42404 ( 0.00%) 125.46
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 73411 ( 0.40%) 44789444 ( 0.30%) 610.12
other 7899 ( 0.04%) 1582621 ( 0.01%) 200.36
frag 76391 ( 0.41%) 80810138 ( 0.54%) 1057.85
ip6 87807 ( 0.47%) 41843476 ( 0.28%) 476.54
tcp6 64384 ( 0.35%) 37340975 ( 0.25%) 579.97
http(s) 2850 ( 0.02%) 1704257 ( 0.01%) 597.98
http(c) 35614 ( 0.19%) 3416028 ( 0.02%) 95.92
smtp 350 ( 0.00%) 166341 ( 0.00%) 475.26
ftp 38 ( 0.00%) 7395 ( 0.00%) 194.61
bgp 374 ( 0.00%) 32134 ( 0.00%) 85.92
other 25158 ( 0.14%) 32014820 ( 0.22%) 1272.55
udp6 19145 ( 0.10%) 3465948 ( 0.02%) 181.04
dns 14112 ( 0.08%) 2168268 ( 0.01%) 153.65
halflif 3 ( 0.00%) 773 ( 0.00%) 257.67
starcra 3 ( 0.00%) 782 ( 0.00%) 260.67
other 5027 ( 0.03%) 1296125 ( 0.01%) 257.83
icmp6 3697 ( 0.02%) 524624 ( 0.00%) 141.91
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 550 ( 0.00%) 507713 ( 0.00%) 923.11
tcpdump file: 200903310000.dump.gz (449.98 MB)