Traffic Trace Info
DumpFile: 200903310430.dump
FileSize: 975.77MB
Id: 200903310430
StartTime: Tue Mar 31 04:30:00 2009
EndTime: Tue Mar 31 04:45:01 2009
TotalTime: 900.33 seconds
TotalCapSize: 760.47MB CapLen: 96 bytes
# of packets: 14109586 (10280.74MB)
AvgRate: 96.90Mbps stddev:17.15M
IP flow (unique src/dst pair) Information
# of flows: 758817 (avg. 18.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.4% 2.9% 2.5% 2.0% 1.7% 1.5% 1.5% 1.4% 1.3% 1.0%
IP address Information
# of IPv4 addresses: 488221
Top 10 bandwidth usage (bytes/total in %):
16.3% 12.1% 10.4% 8.6% 7.0% 6.1% 4.1% 2.9% 2.9% 2.5%
# of IPv6 addresses: 1859
Top 10 bandwidth usage (bytes/total in %):
24.5% 24.1% 10.0% 7.7% 6.9% 6.9% 6.9% 4.6% 4.2% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310430.pktlen.png)
detailed numbers
[ 32- 63]: 2419960
[ 64- 127]: 3235641
[ 128- 255]: 930046
[ 256- 511]: 370949
[ 512- 1023]: 329982
[ 1024- 2047]: 6823008
Protocol Breakdown
![[protocol breakdown chart]](200903310430.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14109586 (100.00%) 10780133134 (100.00%) 764.03
ip 14082478 ( 99.81%) 10775049249 ( 99.95%) 765.14
tcp 10323553 ( 73.17%) 9609104258 ( 89.14%) 930.79
http(s) 5436683 ( 38.53%) 7531571599 ( 69.87%) 1385.32
http(c) 2162946 ( 15.33%) 461577133 ( 4.28%) 213.40
squid 318187 ( 2.26%) 145100590 ( 1.35%) 456.02
smtp 285869 ( 2.03%) 41640095 ( 0.39%) 145.66
ftp 185739 ( 1.32%) 184502528 ( 1.71%) 993.34
pop3 4025 ( 0.03%) 1370194 ( 0.01%) 340.42
imap 1062 ( 0.01%) 251391 ( 0.00%) 236.71
telnet 2996 ( 0.02%) 199855 ( 0.00%) 66.71
ssh 248742 ( 1.76%) 24326109 ( 0.23%) 97.80
dns 24861 ( 0.18%) 17676000 ( 0.16%) 710.99
bgp 143 ( 0.00%) 48405 ( 0.00%) 338.50
napster 94 ( 0.00%) 5642 ( 0.00%) 60.02
realaud 18 ( 0.00%) 2474 ( 0.00%) 137.44
rtsp 92 ( 0.00%) 13154 ( 0.00%) 142.98
icecast 97 ( 0.00%) 6373 ( 0.00%) 65.70
hotline 16 ( 0.00%) 1560 ( 0.00%) 97.50
other 1651669 ( 11.71%) 1200778056 ( 11.14%) 727.01
udp 2709891 ( 19.21%) 1023172572 ( 9.49%) 377.57
dns 1663514 ( 11.79%) 283901304 ( 2.63%) 170.66
realaud 12 ( 0.00%) 1396 ( 0.00%) 116.33
halflif 156 ( 0.00%) 25151 ( 0.00%) 161.22
starcra 33 ( 0.00%) 4709 ( 0.00%) 142.70
everque 78 ( 0.00%) 14673 ( 0.00%) 188.12
unreal 430 ( 0.00%) 197440 ( 0.00%) 459.16
quake 37 ( 0.00%) 3869 ( 0.00%) 104.57
cuseeme 10 ( 0.00%) 1437 ( 0.00%) 143.70
other 1045493 ( 7.41%) 738909963 ( 6.85%) 706.76
icmp 1006796 ( 7.14%) 126045887 ( 1.17%) 125.20
ipip 311 ( 0.00%) 36912 ( 0.00%) 118.69
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 31233 ( 0.22%) 15048109 ( 0.14%) 481.80
other 10584 ( 0.08%) 1624131 ( 0.02%) 153.45
frag 48548 ( 0.34%) 53042076 ( 0.49%) 1092.57
ip6 27108 ( 0.19%) 5083885 ( 0.05%) 187.54
tcp6 11455 ( 0.08%) 2368021 ( 0.02%) 206.72
http(s) 204 ( 0.00%) 23470 ( 0.00%) 115.05
http(c) 4993 ( 0.04%) 509230 ( 0.00%) 101.99
smtp 237 ( 0.00%) 97038 ( 0.00%) 409.44
ftp 1964 ( 0.01%) 208460 ( 0.00%) 106.14
dns 4 ( 0.00%) 459 ( 0.00%) 114.75
bgp 374 ( 0.00%) 32135 ( 0.00%) 85.92
other 3679 ( 0.03%) 1497229 ( 0.01%) 406.97
udp6 11507 ( 0.08%) 1907923 ( 0.02%) 165.81
dns 9929 ( 0.07%) 1664524 ( 0.02%) 167.64
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1577 ( 0.01%) 243291 ( 0.00%) 154.27
icmp6 3782 ( 0.03%) 495765 ( 0.00%) 131.09
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 333 ( 0.00%) 307960 ( 0.00%) 924.80
tcpdump file: 200903310430.dump.gz (340.93 MB)