Traffic Trace Info
DumpFile: 200903310130.dump
FileSize: 1220.18MB
Id: 200903310130
StartTime: Tue Mar 31 01:30:00 2009
EndTime: Tue Mar 31 01:45:00 2009
TotalTime: 900.03 seconds
TotalCapSize: 950.79MB CapLen: 96 bytes
# of packets: 17652552 (13725.43MB)
AvgRate: 127.94Mbps stddev:16.05M
IP flow (unique src/dst pair) Information
# of flows: 835481 (avg. 21.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 5.0% 2.3% 2.1% 1.3% 1.1% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 499640
Top 10 bandwidth usage (bytes/total in %):
14.8% 10.0% 9.2% 6.3% 5.8% 5.0% 5.0% 5.0% 3.8% 3.8%
# of IPv6 addresses: 2935
Top 10 bandwidth usage (bytes/total in %):
20.0% 19.3% 11.4% 8.6% 8.5% 7.8% 7.8% 6.5% 4.2% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310130.pktlen.png)
detailed numbers
[ 32- 63]: 3380979
[ 64- 127]: 3470070
[ 128- 255]: 765156
[ 256- 511]: 416823
[ 512- 1023]: 415492
[ 1024- 2047]: 9204032
Protocol Breakdown
![[protocol breakdown chart]](200903310130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17652552 (100.00%) 14392157713 (100.00%) 815.30
ip 17624305 ( 99.84%) 14385524764 ( 99.95%) 816.23
tcp 14168166 ( 80.26%) 13134278862 ( 91.26%) 927.03
http(s) 7021576 ( 39.78%) 9704104591 ( 67.43%) 1382.04
http(c) 3025858 ( 17.14%) 380930656 ( 2.65%) 125.89
squid 347963 ( 1.97%) 164724661 ( 1.14%) 473.40
smtp 414468 ( 2.35%) 89944464 ( 0.62%) 217.01
ftp 214543 ( 1.22%) 218272361 ( 1.52%) 1017.38
pop3 4842 ( 0.03%) 2279734 ( 0.02%) 470.82
imap 4924 ( 0.03%) 4708607 ( 0.03%) 956.26
telnet 1639 ( 0.01%) 126863 ( 0.00%) 77.40
ssh 985441 ( 5.58%) 967965578 ( 6.73%) 982.27
dns 19237 ( 0.11%) 4005726 ( 0.03%) 208.23
bgp 159 ( 0.00%) 72811 ( 0.00%) 457.93
napster 10 ( 0.00%) 618 ( 0.00%) 61.80
realaud 30 ( 0.00%) 5098 ( 0.00%) 169.93
rtsp 186 ( 0.00%) 42180 ( 0.00%) 226.77
icecast 12243 ( 0.07%) 823705 ( 0.01%) 67.28
other 2114992 ( 11.98%) 1596267909 ( 11.09%) 754.74
udp 2567184 ( 14.54%) 1104274949 ( 7.67%) 430.15
dns 1100562 ( 6.23%) 240930309 ( 1.67%) 218.92
realaud 15527 ( 0.09%) 6792709 ( 0.05%) 437.48
halflif 57933 ( 0.33%) 17250939 ( 0.12%) 297.77
starcra 45 ( 0.00%) 9122 ( 0.00%) 202.71
everque 80 ( 0.00%) 15677 ( 0.00%) 195.96
unreal 423 ( 0.00%) 196108 ( 0.00%) 463.61
quake 19 ( 0.00%) 2493 ( 0.00%) 131.21
cuseeme 7 ( 0.00%) 851 ( 0.00%) 121.57
other 1391877 ( 7.88%) 838907659 ( 5.83%) 602.72
icmp 825786 ( 4.68%) 113459026 ( 0.79%) 137.40
ipip 330 ( 0.00%) 39670 ( 0.00%) 120.21
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 52531 ( 0.30%) 29110244 ( 0.20%) 554.15
other 10196 ( 0.06%) 4344317 ( 0.03%) 426.08
frag 115526 ( 0.65%) 107757692 ( 0.75%) 932.76
ip6 28247 ( 0.16%) 6632949 ( 0.05%) 234.82
tcp6 9338 ( 0.05%) 3094018 ( 0.02%) 331.34
http(s) 683 ( 0.00%) 308285 ( 0.00%) 451.37
http(c) 3103 ( 0.02%) 396457 ( 0.00%) 127.77
smtp 414 ( 0.00%) 213774 ( 0.00%) 516.36
imap 540 ( 0.00%) 517549 ( 0.00%) 958.42
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 379 ( 0.00%) 33110 ( 0.00%) 87.36
other 4217 ( 0.02%) 1624671 ( 0.01%) 385.27
udp6 14630 ( 0.08%) 2391727 ( 0.02%) 163.48
dns 11233 ( 0.06%) 1739013 ( 0.01%) 154.81
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
cuseeme 1 ( 0.00%) 119 ( 0.00%) 119.00
other 3394 ( 0.02%) 652371 ( 0.00%) 192.21
icmp6 3522 ( 0.02%) 473860 ( 0.00%) 134.54
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 727 ( 0.00%) 669264 ( 0.00%) 920.58
tcpdump file: 200903310130.dump.gz (426.90 MB)