Traffic Trace Info
DumpFile: 200903310030.dump
FileSize: 1266.32MB
Id: 200903310030
StartTime: Tue Mar 31 00:30:00 2009
EndTime: Tue Mar 31 00:45:00 2009
TotalTime: 900.27 seconds
TotalCapSize: 989.93MB CapLen: 96 bytes
# of packets: 18111639 (13709.87MB)
AvgRate: 127.76Mbps stddev:14.96M
IP flow (unique src/dst pair) Information
# of flows: 918396 (avg. 19.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 5.3% 1.9% 1.3% 1.1% 1.1% 1.0% 1.0% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 604931
Top 10 bandwidth usage (bytes/total in %):
12.7% 10.4% 9.1% 5.7% 5.6% 5.5% 5.5% 4.9% 3.0% 2.8%
# of IPv6 addresses: 3008
Top 10 bandwidth usage (bytes/total in %):
47.7% 32.3% 15.4% 11.2% 10.7% 9.4% 5.6% 3.7% 2.9% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310030.pktlen.png)
detailed numbers
[ 32- 63]: 3817290
[ 64- 127]: 3562158
[ 128- 255]: 783441
[ 256- 511]: 430688
[ 512- 1023]: 407457
[ 1024- 2047]: 9110605
Protocol Breakdown
![[protocol breakdown chart]](200903310030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18111639 (100.00%) 14375842285 (100.00%) 793.74
ip 18070025 ( 99.77%) 14364027700 ( 99.92%) 794.91
tcp 15036157 ( 83.02%) 13540259897 ( 94.19%) 900.51
http(s) 6788919 ( 37.48%) 9381032268 ( 65.26%) 1381.82
http(c) 3283518 ( 18.13%) 509045840 ( 3.54%) 155.03
squid 448161 ( 2.47%) 216853470 ( 1.51%) 483.87
smtp 327299 ( 1.81%) 72110344 ( 0.50%) 220.32
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 398084 ( 2.20%) 412990414 ( 2.87%) 1037.45
pop3 18716 ( 0.10%) 15047250 ( 0.10%) 803.98
imap 2646 ( 0.01%) 903090 ( 0.01%) 341.30
telnet 1151 ( 0.01%) 341701 ( 0.00%) 296.87
ssh 232366 ( 1.28%) 209921430 ( 1.46%) 903.41
dns 19786 ( 0.11%) 7216673 ( 0.05%) 364.74
bgp 148 ( 0.00%) 58416 ( 0.00%) 394.70
napster 1244 ( 0.01%) 972504 ( 0.01%) 781.76
realaud 40 ( 0.00%) 5658 ( 0.00%) 141.45
rtsp 147 ( 0.00%) 31025 ( 0.00%) 211.05
icecast 12457 ( 0.07%) 841017 ( 0.01%) 67.51
hotline 3 ( 0.00%) 190 ( 0.00%) 63.33
other 3501311 ( 19.33%) 2712878947 ( 18.87%) 774.82
udp 2095047 ( 11.57%) 657504539 ( 4.57%) 313.84
dns 1148204 ( 6.34%) 247530995 ( 1.72%) 215.58
realaud 4402 ( 0.02%) 1659285 ( 0.01%) 376.94
halflif 44530 ( 0.25%) 10641182 ( 0.07%) 238.97
starcra 35 ( 0.00%) 6157 ( 0.00%) 175.91
everque 94 ( 0.00%) 15240 ( 0.00%) 162.13
unreal 485 ( 0.00%) 234175 ( 0.00%) 482.84
quake 19 ( 0.00%) 1749 ( 0.00%) 92.05
cuseeme 8 ( 0.00%) 1483 ( 0.00%) 185.38
other 896957 ( 4.95%) 397294348 ( 2.76%) 442.94
icmp 858682 ( 4.74%) 118802162 ( 0.83%) 138.35
ipip 332 ( 0.00%) 40986 ( 0.00%) 123.45
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 71200 ( 0.39%) 45420091 ( 0.32%) 637.92
other 8495 ( 0.05%) 1982329 ( 0.01%) 233.35
frag 76529 ( 0.42%) 77453863 ( 0.54%) 1012.09
ip6 41614 ( 0.23%) 11814585 ( 0.08%) 283.91
tcp6 19311 ( 0.11%) 7687752 ( 0.05%) 398.10
http(s) 6142 ( 0.03%) 3845343 ( 0.03%) 626.07
http(c) 9620 ( 0.05%) 2160103 ( 0.02%) 224.54
smtp 250 ( 0.00%) 105348 ( 0.00%) 421.39
bgp 370 ( 0.00%) 31237 ( 0.00%) 84.42
other 2929 ( 0.02%) 1545721 ( 0.01%) 527.73
udp6 17231 ( 0.10%) 2910743 ( 0.02%) 168.92
dns 13192 ( 0.07%) 2006260 ( 0.01%) 152.08
starcra 1 ( 0.00%) 105 ( 0.00%) 105.00
other 4038 ( 0.02%) 904378 ( 0.01%) 223.97
icmp6 4399 ( 0.02%) 612816 ( 0.00%) 139.31
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 643 ( 0.00%) 599194 ( 0.00%) 931.87
tcpdump file: 200903310030.dump.gz (441.07 MB)