Traffic Trace Info
DumpFile: 200903310330.dump
FileSize: 955.49MB
Id: 200903310330
StartTime: Tue Mar 31 03:30:00 2009
EndTime: Tue Mar 31 03:45:01 2009
TotalTime: 900.81 seconds
TotalCapSize: 744.50MB CapLen: 96 bytes
# of packets: 13827080 (9834.66MB)
AvgRate: 91.58Mbps stddev:12.05M
IP flow (unique src/dst pair) Information
# of flows: 769581 (avg. 17.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.6% 1.9% 1.7% 1.4% 1.3% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 485467
Top 10 bandwidth usage (bytes/total in %):
17.5% 13.2% 11.4% 6.9% 5.7% 2.7% 2.7% 2.7% 2.6% 2.6%
# of IPv6 addresses: 1826
Top 10 bandwidth usage (bytes/total in %):
26.6% 26.1% 10.3% 9.4% 6.4% 6.4% 5.5% 3.4% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310330.pktlen.png)
detailed numbers
[ 32- 63]: 2930682
[ 64- 127]: 2844855
[ 128- 255]: 905689
[ 256- 511]: 363542
[ 512- 1023]: 304792
[ 1024- 2047]: 6477520
Protocol Breakdown
![[protocol breakdown chart]](200903310330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13827080 (100.00%) 10312387633 (100.00%) 745.81
ip 13802202 ( 99.82%) 10307474177 ( 99.95%) 746.80
tcp 10867891 ( 78.60%) 9565416354 ( 92.76%) 880.15
http(s) 5457374 ( 39.47%) 7530125684 ( 73.02%) 1379.81
http(c) 2565448 ( 18.55%) 444770794 ( 4.31%) 173.37
squid 353839 ( 2.56%) 175325529 ( 1.70%) 495.50
smtp 298670 ( 2.16%) 57089469 ( 0.55%) 191.15
ftp 178361 ( 1.29%) 175529001 ( 1.70%) 984.12
pop3 4496 ( 0.03%) 1635554 ( 0.02%) 363.78
imap 1105 ( 0.01%) 99909 ( 0.00%) 90.42
telnet 2062 ( 0.01%) 139696 ( 0.00%) 67.75
ssh 398604 ( 2.88%) 65159194 ( 0.63%) 163.47
dns 18988 ( 0.14%) 5957422 ( 0.06%) 313.75
bgp 160 ( 0.00%) 72101 ( 0.00%) 450.63
napster 36 ( 0.00%) 2160 ( 0.00%) 60.00
realaud 17 ( 0.00%) 2382 ( 0.00%) 140.12
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 12143 ( 0.09%) 801279 ( 0.01%) 65.99
hotline 5 ( 0.00%) 304 ( 0.00%) 60.80
other 1576479 ( 11.40%) 1108699636 ( 10.75%) 703.28
udp 2186827 ( 15.82%) 627986596 ( 6.09%) 287.17
dns 1532055 ( 11.08%) 276845937 ( 2.68%) 180.70
realaud 4 ( 0.00%) 324 ( 0.00%) 81.00
halflif 239 ( 0.00%) 36147 ( 0.00%) 151.24
starcra 32 ( 0.00%) 4960 ( 0.00%) 155.00
everque 61 ( 0.00%) 11866 ( 0.00%) 194.52
unreal 1921 ( 0.01%) 1420283 ( 0.01%) 739.35
quake 68 ( 0.00%) 10640 ( 0.00%) 156.47
cuseeme 9 ( 0.00%) 1648 ( 0.00%) 183.11
other 652263 ( 4.72%) 349486885 ( 3.39%) 535.81
icmp 713697 ( 5.16%) 107330432 ( 1.04%) 150.39
ipip 317 ( 0.00%) 36817 ( 0.00%) 116.14
ipsec 112 ( 0.00%) 17696 ( 0.00%) 158.00
ip6 24021 ( 0.17%) 5216266 ( 0.05%) 217.15
other 9337 ( 0.07%) 1470016 ( 0.01%) 157.44
frag 52343 ( 0.38%) 57746536 ( 0.56%) 1103.23
ip6 24878 ( 0.18%) 4913456 ( 0.05%) 197.50
tcp6 9730 ( 0.07%) 2402933 ( 0.02%) 246.96
http(s) 324 ( 0.00%) 121673 ( 0.00%) 375.53
http(c) 3511 ( 0.03%) 396455 ( 0.00%) 112.92
smtp 219 ( 0.00%) 96646 ( 0.00%) 441.31
ftp 1763 ( 0.01%) 186104 ( 0.00%) 105.56
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 5 ( 0.00%) 2213 ( 0.00%) 442.60
bgp 383 ( 0.00%) 33811 ( 0.00%) 88.28
other 3523 ( 0.03%) 1565859 ( 0.02%) 444.47
udp6 10629 ( 0.08%) 1678070 ( 0.02%) 157.88
dns 9069 ( 0.07%) 1427530 ( 0.01%) 157.41
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1559 ( 0.01%) 250435 ( 0.00%) 160.64
icmp6 4193 ( 0.03%) 561294 ( 0.01%) 133.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 296 ( 0.00%) 267079 ( 0.00%) 902.29
tcpdump file: 200903310330.dump.gz (347.44 MB)