Traffic Trace Info
DumpFile: 200903310200.dump
FileSize: 1146.41MB
Id: 200903310200
StartTime: Tue Mar 31 02:00:00 2009
EndTime: Tue Mar 31 02:15:00 2009
TotalTime: 899.86 seconds
TotalCapSize: 893.73MB CapLen: 96 bytes
# of packets: 16558819 (11991.91MB)
AvgRate: 111.78Mbps stddev:11.57M
IP flow (unique src/dst pair) Information
# of flows: 954659 (avg. 17.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 4.1% 4.0% 2.5% 1.7% 1.6% 1.5% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 615891
Top 10 bandwidth usage (bytes/total in %):
16.1% 10.7% 10.6% 10.5% 6.5% 5.7% 5.3% 4.2% 4.1% 4.0%
# of IPv6 addresses: 2961
Top 10 bandwidth usage (bytes/total in %):
35.8% 31.2% 20.6% 15.3% 8.1% 5.9% 5.4% 3.2% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310200.pktlen.png)
detailed numbers
[ 32- 63]: 3566556
[ 64- 127]: 3473550
[ 128- 255]: 813873
[ 256- 511]: 391091
[ 512- 1023]: 391063
[ 1024- 2047]: 7922686
Protocol Breakdown
![[protocol breakdown chart]](200903310200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16558819 (100.00%) 12574429845 (100.00%) 759.38
ip 16509100 ( 99.70%) 12566182819 ( 99.93%) 761.17
tcp 13352795 ( 80.64%) 11745782608 ( 93.41%) 879.65
http(s) 5797068 ( 35.01%) 7961842616 ( 63.32%) 1373.43
http(c) 2981947 ( 18.01%) 314133881 ( 2.50%) 105.35
squid 315268 ( 1.90%) 129492692 ( 1.03%) 410.74
smtp 375935 ( 2.27%) 75969185 ( 0.60%) 202.08
ftp 146901 ( 0.89%) 153129297 ( 1.22%) 1042.40
pop3 4231 ( 0.03%) 1825392 ( 0.01%) 431.43
imap 2021 ( 0.01%) 839258 ( 0.01%) 415.27
telnet 2395 ( 0.01%) 173866 ( 0.00%) 72.60
ssh 956896 ( 5.78%) 872070606 ( 6.94%) 911.35
dns 19969 ( 0.12%) 6816436 ( 0.05%) 341.35
bgp 178 ( 0.00%) 75393 ( 0.00%) 423.56
napster 13 ( 0.00%) 1247 ( 0.00%) 95.92
realaud 9 ( 0.00%) 666 ( 0.00%) 74.00
rtsp 218 ( 0.00%) 45172 ( 0.00%) 207.21
icecast 12233 ( 0.07%) 809032 ( 0.01%) 66.14
hotline 18 ( 0.00%) 4933 ( 0.00%) 274.06
other 2737400 ( 16.53%) 2228547236 ( 17.72%) 814.11
udp 2278022 ( 13.76%) 694042856 ( 5.52%) 304.67
dns 1277171 ( 7.71%) 265070949 ( 2.11%) 207.55
realaud 20947 ( 0.13%) 9568923 ( 0.08%) 456.82
halflif 7560 ( 0.05%) 1952915 ( 0.02%) 258.32
starcra 43 ( 0.00%) 7759 ( 0.00%) 180.44
everque 76 ( 0.00%) 14408 ( 0.00%) 189.58
unreal 610 ( 0.00%) 289811 ( 0.00%) 475.10
quake 19 ( 0.00%) 2564 ( 0.00%) 134.95
cuseeme 9 ( 0.00%) 707 ( 0.00%) 78.56
other 971285 ( 5.87%) 416986859 ( 3.32%) 429.31
icmp 840952 ( 5.08%) 116958895 ( 0.93%) 139.08
ipip 312 ( 0.00%) 37390 ( 0.00%) 119.84
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 28399 ( 0.17%) 7426651 ( 0.06%) 261.51
other 8508 ( 0.05%) 1916723 ( 0.02%) 225.28
frag 91382 ( 0.55%) 89491101 ( 0.71%) 979.31
ip6 49719 ( 0.30%) 8247026 ( 0.07%) 165.87
tcp6 30900 ( 0.19%) 4940492 ( 0.04%) 159.89
http(s) 301 ( 0.00%) 123628 ( 0.00%) 410.72
http(c) 25124 ( 0.15%) 1917087 ( 0.02%) 76.31
smtp 173 ( 0.00%) 79757 ( 0.00%) 461.02
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
bgp 377 ( 0.00%) 32522 ( 0.00%) 86.27
other 4923 ( 0.03%) 2787273 ( 0.02%) 566.17
udp6 14252 ( 0.09%) 2324193 ( 0.02%) 163.08
dns 10592 ( 0.06%) 1639990 ( 0.01%) 154.83
other 3660 ( 0.02%) 684203 ( 0.01%) 186.94
icmp6 4055 ( 0.02%) 542903 ( 0.00%) 133.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 482 ( 0.00%) 435358 ( 0.00%) 903.23
tcpdump file: 200903310200.dump.gz (406.73 MB)