Traffic Trace Info
DumpFile: 200903310115.dump
FileSize: 1235.06MB
Id: 200903310115
StartTime: Tue Mar 31 01:15:00 2009
EndTime: Tue Mar 31 01:30:00 2009
TotalTime: 900.12 seconds
TotalCapSize: 964.21MB CapLen: 96 bytes
# of packets: 17749873 (14280.60MB)
AvgRate: 133.09Mbps stddev:17.64M
IP flow (unique src/dst pair) Information
# of flows: 825342 (avg. 21.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 5.2% 4.9% 4.7% 3.3% 2.1% 1.4% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 528140
Top 10 bandwidth usage (bytes/total in %):
12.2% 11.8% 10.1% 9.5% 8.7% 5.4% 5.2% 5.1% 4.9% 4.9%
# of IPv6 addresses: 3482
Top 10 bandwidth usage (bytes/total in %):
42.3% 28.3% 14.1% 11.1% 10.0% 9.2% 7.8% 7.8% 5.7% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310115.pktlen.png)
detailed numbers
[ 32- 63]: 3260493
[ 64- 127]: 3324769
[ 128- 255]: 851180
[ 256- 511]: 427168
[ 512- 1023]: 337163
[ 1024- 2047]: 9549100
Protocol Breakdown
![[protocol breakdown chart]](200903310115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17749873 (100.00%) 14974297770 (100.00%) 843.63
ip 17708959 ( 99.77%) 14961442842 ( 99.91%) 844.85
tcp 14736223 ( 83.02%) 14153267480 ( 94.52%) 960.44
http(s) 7567601 ( 42.63%) 10516279167 ( 70.23%) 1389.65
http(c) 2802966 ( 15.79%) 227638751 ( 1.52%) 81.21
squid 333697 ( 1.88%) 166232844 ( 1.11%) 498.16
smtp 371656 ( 2.09%) 108498977 ( 0.72%) 291.93
ftp 170044 ( 0.96%) 163331997 ( 1.09%) 960.53
pop3 26541 ( 0.15%) 27623465 ( 0.18%) 1040.78
imap 3556 ( 0.02%) 1352539 ( 0.01%) 380.35
telnet 2313 ( 0.01%) 197489 ( 0.00%) 85.38
ssh 962410 ( 5.42%) 857723708 ( 5.73%) 891.22
dns 16809 ( 0.09%) 1894720 ( 0.01%) 112.72
bgp 145 ( 0.00%) 53175 ( 0.00%) 366.72
napster 39 ( 0.00%) 4144 ( 0.00%) 106.26
realaud 35 ( 0.00%) 4122 ( 0.00%) 117.77
rtsp 108 ( 0.00%) 18236 ( 0.00%) 168.85
icecast 12469 ( 0.07%) 846833 ( 0.01%) 67.92
other 2465830 ( 13.89%) 2081567073 ( 13.90%) 844.16
udp 1934686 ( 10.90%) 630899925 ( 4.21%) 326.10
dns 1110069 ( 6.25%) 244815255 ( 1.63%) 220.54
realaud 914 ( 0.01%) 55727 ( 0.00%) 60.97
halflif 27207 ( 0.15%) 2757534 ( 0.02%) 101.35
starcra 28 ( 0.00%) 4945 ( 0.00%) 176.61
everque 89 ( 0.00%) 16060 ( 0.00%) 180.45
unreal 429 ( 0.00%) 201327 ( 0.00%) 469.29
quake 18 ( 0.00%) 2061 ( 0.00%) 114.50
cuseeme 5 ( 0.00%) 448 ( 0.00%) 89.60
other 795491 ( 4.48%) 382887860 ( 2.56%) 481.32
icmp 949819 ( 5.35%) 121245893 ( 0.81%) 127.65
ipip 305 ( 0.00%) 37250 ( 0.00%) 122.13
ipsec 118 ( 0.00%) 18572 ( 0.00%) 157.39
ip6 78163 ( 0.44%) 53938969 ( 0.36%) 690.08
other 9645 ( 0.05%) 2034753 ( 0.01%) 210.96
frag 113905 ( 0.64%) 106710633 ( 0.71%) 936.84
ip6 40914 ( 0.23%) 12854928 ( 0.09%) 314.19
tcp6 19504 ( 0.11%) 8642797 ( 0.06%) 443.13
http(s) 6217 ( 0.04%) 3803637 ( 0.03%) 611.81
http(c) 9133 ( 0.05%) 2099407 ( 0.01%) 229.87
smtp 605 ( 0.00%) 266729 ( 0.00%) 440.87
imap 926 ( 0.01%) 1007410 ( 0.01%) 1087.92
dns 5 ( 0.00%) 561 ( 0.00%) 112.20
bgp 373 ( 0.00%) 32046 ( 0.00%) 85.91
other 2245 ( 0.01%) 1433007 ( 0.01%) 638.31
udp6 16514 ( 0.09%) 2990228 ( 0.02%) 181.07
dns 11462 ( 0.06%) 1726570 ( 0.01%) 150.63
cuseeme 1 ( 0.00%) 115 ( 0.00%) 115.00
other 5051 ( 0.03%) 1263543 ( 0.01%) 250.16
icmp6 4201 ( 0.02%) 596190 ( 0.00%) 141.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 665 ( 0.00%) 621633 ( 0.00%) 934.79
tcpdump file: 200903310115.dump.gz (425.87 MB)