Traffic Trace Info
DumpFile: 200903310400.dump
FileSize: 916.19MB
Id: 200903310400
StartTime: Tue Mar 31 04:00:00 2009
EndTime: Tue Mar 31 04:15:00 2009
TotalTime: 900.01 seconds
TotalCapSize: 714.86MB CapLen: 96 bytes
# of packets: 13193649 (8999.20MB)
AvgRate: 83.89Mbps stddev:12.14M
IP flow (unique src/dst pair) Information
# of flows: 764397 (avg. 17.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 3.2% 2.0% 1.8% 1.7% 1.2% 1.2% 1.2% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 483720
Top 10 bandwidth usage (bytes/total in %):
19.2% 11.6% 9.4% 7.1% 4.9% 3.6% 3.3% 3.2% 3.2% 2.4%
# of IPv6 addresses: 1946
Top 10 bandwidth usage (bytes/total in %):
37.9% 20.2% 17.8% 9.6% 6.0% 5.0% 5.0% 3.8% 3.7% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310400.pktlen.png)
detailed numbers
[ 32- 63]: 2687417
[ 64- 127]: 2928378
[ 128- 255]: 1006888
[ 256- 511]: 376615
[ 512- 1023]: 339573
[ 1024- 2047]: 5854778
Protocol Breakdown
![[protocol breakdown chart]](200903310400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13193649 (100.00%) 9436340820 (100.00%) 715.22
ip 13164863 ( 99.78%) 9429121289 ( 99.92%) 716.23
tcp 10053599 ( 76.20%) 8742714025 ( 92.65%) 869.61
http(s) 4905669 ( 37.18%) 6669632774 ( 70.68%) 1359.58
http(c) 2443478 ( 18.52%) 476197231 ( 5.05%) 194.89
squid 325723 ( 2.47%) 141861457 ( 1.50%) 435.53
smtp 362065 ( 2.74%) 76059230 ( 0.81%) 210.07
ftp 211161 ( 1.60%) 225362218 ( 2.39%) 1067.25
pop3 4125 ( 0.03%) 1656110 ( 0.02%) 401.48
imap 885 ( 0.01%) 75778 ( 0.00%) 85.62
telnet 1920 ( 0.01%) 125772 ( 0.00%) 65.51
ssh 128735 ( 0.98%) 30821121 ( 0.33%) 239.42
dns 17933 ( 0.14%) 6594068 ( 0.07%) 367.71
bgp 870 ( 0.01%) 620916 ( 0.01%) 713.70
napster 105 ( 0.00%) 12246 ( 0.00%) 116.63
realaud 13 ( 0.00%) 898 ( 0.00%) 69.08
icecast 10241 ( 0.08%) 677183 ( 0.01%) 66.12
hotline 171 ( 0.00%) 10834 ( 0.00%) 63.36
other 1640503 ( 12.43%) 1113006069 ( 11.79%) 678.45
udp 2353451 ( 17.84%) 569066383 ( 6.03%) 241.80
dns 1762564 ( 13.36%) 303557107 ( 3.22%) 172.22
realaud 11 ( 0.00%) 1192 ( 0.00%) 108.36
halflif 177 ( 0.00%) 31658 ( 0.00%) 178.86
starcra 29 ( 0.00%) 5603 ( 0.00%) 193.21
everque 62 ( 0.00%) 12961 ( 0.00%) 209.05
unreal 1960 ( 0.01%) 1288451 ( 0.01%) 657.37
quake 18 ( 0.00%) 1743 ( 0.00%) 96.83
cuseeme 12 ( 0.00%) 1399 ( 0.00%) 116.58
other 588461 ( 4.46%) 264029505 ( 2.80%) 448.68
icmp 719647 ( 5.45%) 107341068 ( 1.14%) 149.16
ipip 325 ( 0.00%) 38308 ( 0.00%) 117.87
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 27244 ( 0.21%) 8335971 ( 0.09%) 305.97
other 10487 ( 0.08%) 1608154 ( 0.02%) 153.35
frag 52378 ( 0.40%) 57673099 ( 0.61%) 1101.09
ip6 28786 ( 0.22%) 7219531 ( 0.08%) 250.80
tcp6 10349 ( 0.08%) 3835351 ( 0.04%) 370.60
http(s) 334 ( 0.00%) 122184 ( 0.00%) 365.82
http(c) 2627 ( 0.02%) 297921 ( 0.00%) 113.41
smtp 331 ( 0.00%) 148744 ( 0.00%) 449.38
ftp 2044 ( 0.02%) 216646 ( 0.00%) 105.99
bgp 399 ( 0.00%) 35737 ( 0.00%) 89.57
other 4614 ( 0.03%) 3014119 ( 0.03%) 653.26
udp6 13603 ( 0.10%) 2369441 ( 0.03%) 174.19
dns 12020 ( 0.09%) 2096029 ( 0.02%) 174.38
starcra 1 ( 0.00%) 109 ( 0.00%) 109.00
unreal 3 ( 0.00%) 377 ( 0.00%) 125.67
other 1579 ( 0.01%) 272926 ( 0.00%) 172.85
icmp6 4331 ( 0.03%) 575271 ( 0.01%) 132.83
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 473 ( 0.00%) 435388 ( 0.00%) 920.48
tcpdump file: 200903310400.dump.gz (332.38 MB)