Traffic Trace Info
DumpFile: 200903310100.dump
FileSize: 1199.90MB
Id: 200903310100
StartTime: Tue Mar 31 01:00:00 2009
EndTime: Tue Mar 31 01:15:00 2009
TotalTime: 900.04 seconds
TotalCapSize: 936.76MB CapLen: 96 bytes
# of packets: 17243125 (13426.61MB)
AvgRate: 125.14Mbps stddev:13.42M
IP flow (unique src/dst pair) Information
# of flows: 896748 (avg. 19.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 5.5% 3.0% 1.8% 1.4% 1.0% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 581173
Top 10 bandwidth usage (bytes/total in %):
14.3% 12.0% 8.4% 7.7% 5.9% 5.5% 5.5% 5.4% 4.0% 3.6%
# of IPv6 addresses: 2999
Top 10 bandwidth usage (bytes/total in %):
41.3% 27.5% 21.0% 13.8% 10.8% 10.5% 6.2% 5.4% 3.9% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310100.pktlen.png)
detailed numbers
[ 32- 63]: 3475853
[ 64- 127]: 3204760
[ 128- 255]: 843641
[ 256- 511]: 405241
[ 512- 1023]: 379446
[ 1024- 2047]: 8934184
Protocol Breakdown
![[protocol breakdown chart]](200903310100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17243125 (100.00%) 14078824594 (100.00%) 816.49
ip 17203582 ( 99.77%) 14066819062 ( 99.91%) 817.67
tcp 14413004 ( 83.59%) 13328489289 ( 94.67%) 924.75
http(s) 6919314 ( 40.13%) 9608304533 ( 68.25%) 1388.62
http(c) 2984570 ( 17.31%) 295215124 ( 2.10%) 98.91
squid 375244 ( 2.18%) 169690298 ( 1.21%) 452.21
smtp 324854 ( 1.88%) 69436255 ( 0.49%) 213.75
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 291277 ( 1.69%) 303822135 ( 2.16%) 1043.07
pop3 5344 ( 0.03%) 2346803 ( 0.02%) 439.15
imap 2223 ( 0.01%) 950852 ( 0.01%) 427.73
telnet 1503 ( 0.01%) 134562 ( 0.00%) 89.53
ssh 1113212 ( 6.46%) 1127193957 ( 8.01%) 1012.56
dns 18830 ( 0.11%) 3295369 ( 0.02%) 175.01
bgp 155 ( 0.00%) 56284 ( 0.00%) 363.12
napster 18 ( 0.00%) 1422 ( 0.00%) 79.00
realaud 11 ( 0.00%) 778 ( 0.00%) 70.73
rtsp 165 ( 0.00%) 31328 ( 0.00%) 189.87
icecast 12303 ( 0.07%) 818524 ( 0.01%) 66.53
hotline 12 ( 0.00%) 1066 ( 0.00%) 88.83
other 2363903 ( 13.71%) 1747186039 ( 12.41%) 739.11
udp 1888845 ( 10.95%) 578397263 ( 4.11%) 306.22
dns 1124965 ( 6.52%) 250135543 ( 1.78%) 222.35
realaud 12863 ( 0.07%) 5546999 ( 0.04%) 431.24
halflif 31275 ( 0.18%) 5090914 ( 0.04%) 162.78
starcra 35 ( 0.00%) 6600 ( 0.00%) 188.57
everque 77 ( 0.00%) 19623 ( 0.00%) 254.84
unreal 657 ( 0.00%) 324836 ( 0.00%) 494.42
quake 19 ( 0.00%) 1734 ( 0.00%) 91.26
cuseeme 6 ( 0.00%) 515 ( 0.00%) 85.83
other 718609 ( 4.17%) 317132733 ( 2.25%) 441.31
icmp 822739 ( 4.77%) 114336189 ( 0.81%) 138.97
ipip 338 ( 0.00%) 40714 ( 0.00%) 120.46
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 68671 ( 0.40%) 43595024 ( 0.31%) 634.84
other 9873 ( 0.06%) 1942887 ( 0.01%) 196.79
frag 85900 ( 0.50%) 85271640 ( 0.61%) 992.68
ip6 39543 ( 0.23%) 12005532 ( 0.09%) 303.61
tcp6 18870 ( 0.11%) 8310053 ( 0.06%) 440.38
http(s) 5551 ( 0.03%) 3330721 ( 0.02%) 600.02
http(c) 9116 ( 0.05%) 1960609 ( 0.01%) 215.07
smtp 534 ( 0.00%) 207059 ( 0.00%) 387.75
imap 315 ( 0.00%) 90232 ( 0.00%) 286.45
ssh 3 ( 0.00%) 246 ( 0.00%) 82.00
bgp 351 ( 0.00%) 29080 ( 0.00%) 82.85
other 3000 ( 0.02%) 2692106 ( 0.02%) 897.37
udp6 15948 ( 0.09%) 2628498 ( 0.02%) 164.82
dns 12532 ( 0.07%) 1917203 ( 0.01%) 152.98
unreal 1 ( 0.00%) 118 ( 0.00%) 118.00
other 3415 ( 0.02%) 711177 ( 0.01%) 208.25
icmp6 4168 ( 0.02%) 570153 ( 0.00%) 136.79
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 526 ( 0.00%) 492612 ( 0.00%) 936.52
tcpdump file: 200903310100.dump.gz (423.97 MB)