Traffic Trace Info
DumpFile: 200903310045.dump
FileSize: 1170.70MB
Id: 200903310045
StartTime: Tue Mar 31 00:45:00 2009
EndTime: Tue Mar 31 01:00:00 2009
TotalTime: 899.84 seconds
TotalCapSize: 913.31MB CapLen: 96 bytes
# of packets: 16867052 (12341.32MB)
AvgRate: 115.04Mbps stddev:13.05M
IP flow (unique src/dst pair) Information
# of flows: 923022 (avg. 18.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 3.2% 2.0% 1.9% 1.4% 1.1% 1.1% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 583891
Top 10 bandwidth usage (bytes/total in %):
14.6% 10.8% 9.0% 6.2% 6.1% 5.7% 5.2% 3.3% 3.2% 2.6%
# of IPv6 addresses: 3248
Top 10 bandwidth usage (bytes/total in %):
40.5% 26.9% 21.9% 13.5% 11.2% 10.6% 6.2% 5.9% 5.6% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310045.pktlen.png)
detailed numbers
[ 32- 63]: 3763511
[ 64- 127]: 3278685
[ 128- 255]: 889136
[ 256- 511]: 392853
[ 512- 1023]: 426281
[ 1024- 2047]: 8116586
Protocol Breakdown
![[protocol breakdown chart]](200903310045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16867052 (100.00%) 12940811834 (100.00%) 767.22
ip 16828376 ( 99.77%) 12928845864 ( 99.91%) 768.28
tcp 13656937 ( 80.97%) 12136078041 ( 93.78%) 888.64
http(s) 6219936 ( 36.88%) 8611847655 ( 66.55%) 1384.56
http(c) 3034331 ( 17.99%) 463721190 ( 3.58%) 152.82
squid 463127 ( 2.75%) 234144630 ( 1.81%) 505.57
smtp 296461 ( 1.76%) 58831292 ( 0.45%) 198.45
ftp 367537 ( 2.18%) 395199658 ( 3.05%) 1075.26
pop3 7189 ( 0.04%) 3395893 ( 0.03%) 472.37
imap 2295 ( 0.01%) 523701 ( 0.00%) 228.19
telnet 963 ( 0.01%) 106515 ( 0.00%) 110.61
ssh 538951 ( 3.20%) 688216285 ( 5.32%) 1276.96
dns 17719 ( 0.11%) 3187924 ( 0.02%) 179.92
bgp 194 ( 0.00%) 84955 ( 0.00%) 437.91
napster 81 ( 0.00%) 4996 ( 0.00%) 61.68
realaud 30 ( 0.00%) 1970 ( 0.00%) 65.67
rtsp 178 ( 0.00%) 36120 ( 0.00%) 202.92
icecast 12347 ( 0.07%) 830079 ( 0.01%) 67.23
other 2695463 ( 15.98%) 1675937078 ( 12.95%) 621.76
udp 2122843 ( 12.59%) 624727067 ( 4.83%) 294.29
dns 1132120 ( 6.71%) 246612805 ( 1.91%) 217.83
realaud 18877 ( 0.11%) 8310188 ( 0.06%) 440.23
halflif 44907 ( 0.27%) 11007675 ( 0.09%) 245.12
starcra 27 ( 0.00%) 4440 ( 0.00%) 164.44
everque 265 ( 0.00%) 116472 ( 0.00%) 439.52
unreal 536 ( 0.00%) 256665 ( 0.00%) 478.85
quake 23 ( 0.00%) 4545 ( 0.00%) 197.61
cuseeme 2 ( 0.00%) 218 ( 0.00%) 109.00
other 925867 ( 5.49%) 358290633 ( 2.77%) 386.98
icmp 970455 ( 5.75%) 122900661 ( 0.95%) 126.64
ipip 308 ( 0.00%) 36992 ( 0.00%) 120.10
ipsec 114 ( 0.00%) 18044 ( 0.00%) 158.28
ip6 69119 ( 0.41%) 43093210 ( 0.33%) 623.46
other 8600 ( 0.05%) 1991849 ( 0.02%) 231.61
frag 71811 ( 0.43%) 73618649 ( 0.57%) 1025.17
ip6 38676 ( 0.23%) 11965970 ( 0.09%) 309.39
tcp6 17709 ( 0.10%) 8156284 ( 0.06%) 460.57
http(s) 5412 ( 0.03%) 3268813 ( 0.03%) 603.99
http(c) 8358 ( 0.05%) 1856633 ( 0.01%) 222.14
smtp 435 ( 0.00%) 231862 ( 0.00%) 533.02
imap 1 ( 0.00%) 74 ( 0.00%) 74.00
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 397 ( 0.00%) 35559 ( 0.00%) 89.57
other 3104 ( 0.02%) 2763171 ( 0.02%) 890.20
udp6 16509 ( 0.10%) 2789449 ( 0.02%) 168.97
dns 12550 ( 0.07%) 1834487 ( 0.01%) 146.17
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
halflif 2 ( 0.00%) 261 ( 0.00%) 130.50
starcra 2 ( 0.00%) 222 ( 0.00%) 111.00
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
other 3953 ( 0.02%) 954256 ( 0.01%) 241.40
icmp6 3910 ( 0.02%) 529971 ( 0.00%) 135.54
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 518 ( 0.00%) 486186 ( 0.00%) 938.58
tcpdump file: 200903310045.dump.gz (412.11 MB)