Traffic Trace Info
DumpFile: 200903310415.dump
FileSize: 990.81MB
Id: 200903310415
StartTime: Tue Mar 31 04:15:00 2009
EndTime: Tue Mar 31 04:30:00 2009
TotalTime: 900.29 seconds
TotalCapSize: 772.05MB CapLen: 96 bytes
# of packets: 14335786 (10508.30MB)
AvgRate: 97.92Mbps stddev:25.94M
IP flow (unique src/dst pair) Information
# of flows: 834907 (avg. 17.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 5.2% 2.7% 2.6% 2.0% 1.6% 1.6% 1.2% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 528185
Top 10 bandwidth usage (bytes/total in %):
16.4% 10.5% 8.6% 8.5% 7.6% 6.3% 5.2% 5.2% 3.7% 2.8%
# of IPv6 addresses: 2298
Top 10 bandwidth usage (bytes/total in %):
22.2% 22.0% 14.8% 8.1% 8.1% 7.3% 6.3% 6.3% 4.2% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310415.pktlen.png)
detailed numbers
[ 32- 63]: 2768878
[ 64- 127]: 2837545
[ 128- 255]: 1036306
[ 256- 511]: 372400
[ 512- 1023]: 396530
[ 1024- 2047]: 6924127
Protocol Breakdown
![[protocol breakdown chart]](200903310415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14335786 (100.00%) 11018748073 (100.00%) 768.62
ip 14310190 ( 99.82%) 11012946144 ( 99.95%) 769.59
tcp 10945672 ( 76.35%) 10140608494 ( 92.03%) 926.45
http(s) 5844173 ( 40.77%) 8081246931 ( 73.34%) 1382.79
http(c) 2357444 ( 16.44%) 446984200 ( 4.06%) 189.61
squid 314961 ( 2.20%) 142676053 ( 1.29%) 453.00
smtp 347546 ( 2.42%) 89026099 ( 0.81%) 256.16
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 207022 ( 1.44%) 207132098 ( 1.88%) 1000.53
pop3 5489 ( 0.04%) 2013233 ( 0.02%) 366.78
imap 813 ( 0.01%) 75954 ( 0.00%) 93.42
telnet 2524 ( 0.02%) 169674 ( 0.00%) 67.22
ssh 147465 ( 1.03%) 22300532 ( 0.20%) 151.23
dns 14491 ( 0.10%) 1497409 ( 0.01%) 103.33
bgp 423 ( 0.00%) 278544 ( 0.00%) 658.50
napster 85 ( 0.00%) 5100 ( 0.00%) 60.00
realaud 20 ( 0.00%) 2634 ( 0.00%) 131.70
rtsp 127 ( 0.00%) 26678 ( 0.00%) 210.06
icecast 314 ( 0.00%) 21242 ( 0.00%) 67.65
hotline 10 ( 0.00%) 669 ( 0.00%) 66.90
other 1702109 ( 11.87%) 1147083932 ( 10.41%) 673.92
udp 2584240 ( 18.03%) 754475452 ( 6.85%) 291.95
dns 1781209 ( 12.42%) 306534867 ( 2.78%) 172.09
realaud 21 ( 0.00%) 5488 ( 0.00%) 261.33
halflif 158 ( 0.00%) 25359 ( 0.00%) 160.50
starcra 28 ( 0.00%) 5511 ( 0.00%) 196.82
everque 50 ( 0.00%) 10329 ( 0.00%) 206.58
unreal 780 ( 0.01%) 445024 ( 0.00%) 570.54
quake 27 ( 0.00%) 3782 ( 0.00%) 140.07
cuseeme 7 ( 0.00%) 849 ( 0.00%) 121.29
other 801819 ( 5.59%) 447319822 ( 4.06%) 557.88
icmp 742109 ( 5.18%) 107489704 ( 0.98%) 144.84
ipip 322 ( 0.00%) 40049 ( 0.00%) 124.38
ipsec 114 ( 0.00%) 17940 ( 0.00%) 157.37
ip6 27168 ( 0.19%) 8704473 ( 0.08%) 320.39
other 10565 ( 0.07%) 1610032 ( 0.01%) 152.39
frag 52252 ( 0.36%) 56742156 ( 0.51%) 1085.93
ip6 25596 ( 0.18%) 5801929 ( 0.05%) 226.67
tcp6 9429 ( 0.07%) 2833781 ( 0.03%) 300.54
http(s) 231 ( 0.00%) 27302 ( 0.00%) 118.19
http(c) 1991 ( 0.01%) 245944 ( 0.00%) 123.53
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 428 ( 0.00%) 168277 ( 0.00%) 393.17
ftp 2043 ( 0.01%) 216785 ( 0.00%) 106.11
imap 471 ( 0.00%) 469068 ( 0.00%) 995.90
bgp 396 ( 0.00%) 35474 ( 0.00%) 89.58
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 3866 ( 0.03%) 1670709 ( 0.02%) 432.15
udp6 11915 ( 0.08%) 2124511 ( 0.02%) 178.31
dns 9636 ( 0.07%) 1562933 ( 0.01%) 162.20
other 2279 ( 0.02%) 561578 ( 0.01%) 246.41
icmp6 3863 ( 0.03%) 510765 ( 0.00%) 132.22
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 359 ( 0.00%) 328792 ( 0.00%) 915.86
tcpdump file: 200903310415.dump.gz (351.09 MB)