Traffic Trace Info
DumpFile: 200903310215.dump
FileSize: 1228.59MB
Id: 200903310215
StartTime: Tue Mar 31 02:15:00 2009
EndTime: Tue Mar 31 02:30:00 2009
TotalTime: 900.18 seconds
TotalCapSize: 960.94MB CapLen: 96 bytes
# of packets: 17540077 (12059.09MB)
AvgRate: 112.38Mbps stddev:11.90M
IP flow (unique src/dst pair) Information
# of flows: 771090 (avg. 22.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 6.1% 3.9% 2.8% 1.8% 1.6% 1.5% 1.5% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 486732
Top 10 bandwidth usage (bytes/total in %):
15.0% 12.8% 10.4% 9.8% 6.9% 6.4% 6.1% 6.0% 3.9% 3.9%
# of IPv6 addresses: 2877
Top 10 bandwidth usage (bytes/total in %):
20.0% 19.3% 17.7% 17.7% 12.6% 8.6% 4.4% 3.9% 3.8% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310215.pktlen.png)
detailed numbers
[ 32- 63]: 3247467
[ 64- 127]: 4557648
[ 128- 255]: 1013905
[ 256- 511]: 371340
[ 512- 1023]: 499816
[ 1024- 2047]: 7849901
Protocol Breakdown
![[protocol breakdown chart]](200903310215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17540077 (100.00%) 12644867536 (100.00%) 720.91
ip 17513122 ( 99.85%) 12638351449 ( 99.95%) 721.65
tcp 14148664 ( 80.66%) 11832541658 ( 93.58%) 836.30
http(s) 5892054 ( 33.59%) 8149663727 ( 64.45%) 1383.16
http(c) 2773352 ( 15.81%) 225598788 ( 1.78%) 81.35
squid 334261 ( 1.91%) 165569288 ( 1.31%) 495.33
smtp 400794 ( 2.29%) 83920530 ( 0.66%) 209.39
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 153052 ( 0.87%) 149103285 ( 1.18%) 974.20
pop3 6310 ( 0.04%) 4828815 ( 0.04%) 765.26
imap 1542 ( 0.01%) 413873 ( 0.00%) 268.40
telnet 3194 ( 0.02%) 215444 ( 0.00%) 67.45
ssh 2340249 ( 13.34%) 1053768138 ( 8.33%) 450.28
dns 25047 ( 0.14%) 14146073 ( 0.11%) 564.78
bgp 156 ( 0.00%) 62142 ( 0.00%) 398.35
napster 52 ( 0.00%) 3120 ( 0.00%) 60.00
realaud 44 ( 0.00%) 6654 ( 0.00%) 151.23
rtsp 227 ( 0.00%) 47531 ( 0.00%) 209.39
icecast 12312 ( 0.07%) 813601 ( 0.01%) 66.08
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 2205752 ( 12.58%) 1984364685 ( 15.69%) 899.63
udp 2265802 ( 12.92%) 665983692 ( 5.27%) 293.93
dns 1288722 ( 7.35%) 261045135 ( 2.06%) 202.56
realaud 21050 ( 0.12%) 9765962 ( 0.08%) 463.94
halflif 224 ( 0.00%) 35840 ( 0.00%) 160.00
starcra 26 ( 0.00%) 4273 ( 0.00%) 164.35
everque 65 ( 0.00%) 12559 ( 0.00%) 193.22
unreal 431 ( 0.00%) 204322 ( 0.00%) 474.06
quake 26 ( 0.00%) 2509 ( 0.00%) 96.50
cuseeme 4 ( 0.00%) 331 ( 0.00%) 82.75
other 955129 ( 5.45%) 394823037 ( 3.12%) 413.37
icmp 1064335 ( 6.07%) 132976512 ( 1.05%) 124.94
ipip 317 ( 0.00%) 39394 ( 0.00%) 124.27
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 26081 ( 0.15%) 5117184 ( 0.04%) 196.20
other 7811 ( 0.04%) 1675313 ( 0.01%) 214.48
frag 55117 ( 0.31%) 60264489 ( 0.48%) 1093.39
ip6 26955 ( 0.15%) 6516087 ( 0.05%) 241.74
tcp6 7649 ( 0.04%) 3158141 ( 0.02%) 412.88
http(s) 1003 ( 0.01%) 1177784 ( 0.01%) 1174.26
http(c) 2236 ( 0.01%) 209876 ( 0.00%) 93.86
smtp 661 ( 0.00%) 124938 ( 0.00%) 189.01
ssh 454 ( 0.00%) 91796 ( 0.00%) 202.19
bgp 403 ( 0.00%) 37103 ( 0.00%) 92.07
other 2892 ( 0.02%) 1516644 ( 0.01%) 524.43
udp6 14573 ( 0.08%) 2371321 ( 0.02%) 162.72
dns 10420 ( 0.06%) 1621912 ( 0.01%) 155.65
other 4153 ( 0.02%) 749409 ( 0.01%) 180.45
icmp6 4294 ( 0.02%) 599073 ( 0.00%) 139.51
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 408 ( 0.00%) 383336 ( 0.00%) 939.55
tcpdump file: 200903310215.dump.gz (442.78 MB)