Traffic Trace Info
DumpFile: 200903310345.dump
FileSize: 1013.94MB
Id: 200903310345
StartTime: Tue Mar 31 03:45:01 2009
EndTime: Tue Mar 31 04:00:00 2009
TotalTime: 899.33 seconds
TotalCapSize: 792.26MB CapLen: 96 bytes
# of packets: 14527430 (10417.48MB)
AvgRate: 97.20Mbps stddev:19.51M
IP flow (unique src/dst pair) Information
# of flows: 947642 (avg. 15.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 2.9% 2.2% 1.9% 1.8% 1.5% 1.5% 1.3% 1.3% 1.0%
IP address Information
# of IPv4 addresses: 540701
Top 10 bandwidth usage (bytes/total in %):
17.1% 10.8% 9.0% 6.9% 6.9% 6.5% 4.2% 3.0% 2.9% 2.9%
# of IPv6 addresses: 2099
Top 10 bandwidth usage (bytes/total in %):
35.1% 26.0% 13.9% 7.7% 6.4% 6.4% 4.7% 4.3% 4.2% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310345.pktlen.png)
detailed numbers
[ 32- 63]: 3047243
[ 64- 127]: 3016673
[ 128- 255]: 892574
[ 256- 511]: 369521
[ 512- 1023]: 310464
[ 1024- 2047]: 6890955
Protocol Breakdown
![[protocol breakdown chart]](200903310345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14527430 (100.00%) 10923522946 (100.00%) 751.92
ip 14496686 ( 99.79%) 10917856717 ( 99.95%) 753.13
tcp 11268377 ( 77.57%) 10093075866 ( 92.40%) 895.70
http(s) 5672737 ( 39.05%) 7788889034 ( 71.30%) 1373.04
http(c) 2588220 ( 17.82%) 490302966 ( 4.49%) 189.44
squid 339044 ( 2.33%) 167398164 ( 1.53%) 493.74
smtp 296172 ( 2.04%) 46658942 ( 0.43%) 157.54
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 231857 ( 1.60%) 243220906 ( 2.23%) 1049.01
pop3 4622 ( 0.03%) 1822551 ( 0.02%) 394.32
imap 844 ( 0.01%) 73359 ( 0.00%) 86.92
telnet 1336 ( 0.01%) 91506 ( 0.00%) 68.49
ssh 171696 ( 1.18%) 23721890 ( 0.22%) 138.16
dns 96922 ( 0.67%) 125519946 ( 1.15%) 1295.06
bgp 157 ( 0.00%) 57473 ( 0.00%) 366.07
napster 84 ( 0.00%) 5044 ( 0.00%) 60.05
realaud 15 ( 0.00%) 1060 ( 0.00%) 70.67
rtsp 22 ( 0.00%) 2234 ( 0.00%) 101.55
icecast 12167 ( 0.08%) 803214 ( 0.01%) 66.02
hotline 6 ( 0.00%) 765 ( 0.00%) 127.50
other 1852471 ( 12.75%) 1204506512 ( 11.03%) 650.22
udp 2273332 ( 15.65%) 686566894 ( 6.29%) 302.01
dns 1543591 ( 10.63%) 279250408 ( 2.56%) 180.91
realaud 12 ( 0.00%) 2032 ( 0.00%) 169.33
halflif 173 ( 0.00%) 27581 ( 0.00%) 159.43
starcra 29 ( 0.00%) 4964 ( 0.00%) 171.17
everque 52 ( 0.00%) 10655 ( 0.00%) 204.90
unreal 8289 ( 0.06%) 6332193 ( 0.06%) 763.93
quake 38 ( 0.00%) 6693 ( 0.00%) 176.13
cuseeme 5 ( 0.00%) 678 ( 0.00%) 135.60
other 720971 ( 4.96%) 400788923 ( 3.67%) 555.90
icmp 909774 ( 6.26%) 120078840 ( 1.10%) 131.99
ipip 327 ( 0.00%) 41196 ( 0.00%) 125.98
ipsec 114 ( 0.00%) 18044 ( 0.00%) 158.28
ip6 33917 ( 0.23%) 16451705 ( 0.15%) 485.06
other 10845 ( 0.07%) 1624172 ( 0.01%) 149.76
frag 54896 ( 0.38%) 60496180 ( 0.55%) 1102.01
ip6 30744 ( 0.21%) 5666229 ( 0.05%) 184.30
tcp6 15317 ( 0.11%) 2853397 ( 0.03%) 186.29
http(s) 330 ( 0.00%) 124607 ( 0.00%) 377.60
http(c) 8668 ( 0.06%) 673278 ( 0.01%) 77.67
smtp 162 ( 0.00%) 47273 ( 0.00%) 291.81
ftp 2038 ( 0.01%) 215711 ( 0.00%) 105.84
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 9 ( 0.00%) 1100 ( 0.00%) 122.22
bgp 389 ( 0.00%) 34566 ( 0.00%) 88.86
other 3719 ( 0.03%) 1756690 ( 0.02%) 472.36
udp6 11125 ( 0.08%) 1962229 ( 0.02%) 176.38
dns 9165 ( 0.06%) 1465645 ( 0.01%) 159.92
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1959 ( 0.01%) 496476 ( 0.00%) 253.43
icmp6 3918 ( 0.03%) 533764 ( 0.00%) 136.23
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 354 ( 0.00%) 312759 ( 0.00%) 883.50
tcpdump file: 200903310345.dump.gz (353.95 MB)