Traffic Trace Info
DumpFile: 200903310245.dump
FileSize: 1211.47MB
Id: 200903310245
StartTime: Tue Mar 31 02:45:01 2009
EndTime: Tue Mar 31 03:00:01 2009
TotalTime: 900.14 seconds
TotalCapSize: 947.20MB CapLen: 96 bytes
# of packets: 17318254 (11552.16MB)
AvgRate: 107.64Mbps stddev:13.52M
IP flow (unique src/dst pair) Information
# of flows: 916545 (avg. 18.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 3.5% 2.0% 1.8% 1.7% 1.6% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 574728
Top 10 bandwidth usage (bytes/total in %):
15.8% 10.5% 9.1% 6.9% 6.9% 5.9% 5.6% 3.6% 3.6% 2.8%
# of IPv6 addresses: 2468
Top 10 bandwidth usage (bytes/total in %):
25.8% 25.5% 16.0% 9.2% 5.7% 5.6% 5.6% 4.4% 3.3% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310245.pktlen.png)
detailed numbers
[ 32- 63]: 3401582
[ 64- 127]: 4357655
[ 128- 255]: 1131399
[ 256- 511]: 374912
[ 512- 1023]: 507098
[ 1024- 2047]: 7545608
Protocol Breakdown
![[protocol breakdown chart]](200903310245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17318254 (100.00%) 12113319334 (100.00%) 699.45
ip 17296334 ( 99.87%) 12108311690 ( 99.96%) 700.05
tcp 14089244 ( 81.35%) 11184692794 ( 92.33%) 793.85
http(s) 6144626 ( 35.48%) 8409957173 ( 69.43%) 1368.67
http(c) 2894380 ( 16.71%) 216675016 ( 1.79%) 74.86
squid 315125 ( 1.82%) 133064285 ( 1.10%) 422.26
smtp 327712 ( 1.89%) 46979023 ( 0.39%) 143.35
ftp 227310 ( 1.31%) 256666863 ( 2.12%) 1129.15
pop3 5566 ( 0.03%) 2495569 ( 0.02%) 448.36
imap 1266 ( 0.01%) 403788 ( 0.00%) 318.95
telnet 3431 ( 0.02%) 229780 ( 0.00%) 66.97
ssh 2505760 ( 14.47%) 1125455919 ( 9.29%) 449.15
dns 16856 ( 0.10%) 1859150 ( 0.02%) 110.30
bgp 138 ( 0.00%) 47316 ( 0.00%) 342.87
napster 74 ( 0.00%) 4446 ( 0.00%) 60.08
realaud 22 ( 0.00%) 1528 ( 0.00%) 69.45
rtsp 110 ( 0.00%) 26862 ( 0.00%) 244.20
icecast 12193 ( 0.07%) 805249 ( 0.01%) 66.04
other 1634674 ( 9.44%) 990020767 ( 8.17%) 605.64
udp 2277800 ( 13.15%) 794328801 ( 6.56%) 348.73
dns 1460895 ( 8.44%) 269815693 ( 2.23%) 184.69
realaud 18025 ( 0.10%) 8265923 ( 0.07%) 458.58
halflif 212 ( 0.00%) 35399 ( 0.00%) 166.98
starcra 24 ( 0.00%) 4465 ( 0.00%) 186.04
everque 62 ( 0.00%) 12743 ( 0.00%) 205.53
unreal 447 ( 0.00%) 214916 ( 0.00%) 480.80
quake 30 ( 0.00%) 3097 ( 0.00%) 103.23
cuseeme 4 ( 0.00%) 333 ( 0.00%) 83.25
other 797971 ( 4.61%) 515870167 ( 4.26%) 646.48
icmp 894430 ( 5.16%) 118988207 ( 0.98%) 133.03
ipip 319 ( 0.00%) 39594 ( 0.00%) 124.12
ipsec 114 ( 0.00%) 18044 ( 0.00%) 158.28
ip6 27498 ( 0.16%) 9127215 ( 0.08%) 331.92
other 6929 ( 0.04%) 1117035 ( 0.01%) 161.21
frag 52996 ( 0.31%) 58215562 ( 0.48%) 1098.49
ip6 21920 ( 0.13%) 5007644 ( 0.04%) 228.45
tcp6 5603 ( 0.03%) 2094321 ( 0.02%) 373.79
http(s) 227 ( 0.00%) 26498 ( 0.00%) 116.73
http(c) 2529 ( 0.01%) 231474 ( 0.00%) 91.53
smtp 269 ( 0.00%) 122498 ( 0.00%) 455.38
imap 280 ( 0.00%) 281525 ( 0.00%) 1005.45
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 381 ( 0.00%) 33374 ( 0.00%) 87.60
other 1915 ( 0.01%) 1398780 ( 0.01%) 730.43
udp6 11751 ( 0.07%) 2035507 ( 0.02%) 173.22
dns 9252 ( 0.05%) 1462055 ( 0.01%) 158.03
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2498 ( 0.01%) 573346 ( 0.00%) 229.52
icmp6 4206 ( 0.02%) 560541 ( 0.00%) 133.27
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 330 ( 0.00%) 313195 ( 0.00%) 949.08
tcpdump file: 200903310245.dump.gz (442.41 MB)