Traffic Trace Info
DumpFile: 200903310445.dump
FileSize: 900.64MB
Id: 200903310445
StartTime: Tue Mar 31 04:45:01 2009
EndTime: Tue Mar 31 05:00:01 2009
TotalTime: 899.97 seconds
TotalCapSize: 701.89MB CapLen: 96 bytes
# of packets: 13024470 (8831.48MB)
AvgRate: 82.32Mbps stddev:13.57M
IP flow (unique src/dst pair) Information
# of flows: 715846 (avg. 18.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.2% 2.4% 1.9% 1.7% 1.6% 1.4% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 457167
Top 10 bandwidth usage (bytes/total in %):
18.4% 8.8% 8.4% 7.6% 5.9% 4.3% 4.3% 3.5% 3.2% 2.9%
# of IPv6 addresses: 2219
Top 10 bandwidth usage (bytes/total in %):
41.7% 22.3% 19.5% 12.6% 9.4% 7.7% 4.7% 4.4% 4.4% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310445.pktlen.png)
detailed numbers
[ 32- 63]: 2400351
[ 64- 127]: 3090334
[ 128- 255]: 1033718
[ 256- 511]: 378013
[ 512- 1023]: 287251
[ 1024- 2047]: 5834803
Protocol Breakdown
![[protocol breakdown chart]](200903310445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13024470 (100.00%) 9260473728 (100.00%) 711.01
ip 12989702 ( 99.73%) 9252436904 ( 99.91%) 712.29
tcp 9130398 ( 70.10%) 8066394667 ( 87.11%) 883.47
http(s) 4650271 ( 35.70%) 6335604122 ( 68.42%) 1362.42
http(c) 1950076 ( 14.97%) 151680408 ( 1.64%) 77.78
squid 320425 ( 2.46%) 138901751 ( 1.50%) 433.49
smtp 252132 ( 1.94%) 36224868 ( 0.39%) 143.67
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 165353 ( 1.27%) 170672483 ( 1.84%) 1032.17
pop3 4029 ( 0.03%) 1556380 ( 0.02%) 386.29
imap 832 ( 0.01%) 98666 ( 0.00%) 118.59
telnet 2677 ( 0.02%) 177475 ( 0.00%) 66.30
ssh 135283 ( 1.04%) 18306568 ( 0.20%) 135.32
dns 15507 ( 0.12%) 2875053 ( 0.03%) 185.40
bgp 619 ( 0.00%) 425210 ( 0.00%) 686.93
napster 81 ( 0.00%) 5740 ( 0.00%) 70.86
realaud 67 ( 0.00%) 4232 ( 0.00%) 63.16
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 87 ( 0.00%) 5738 ( 0.00%) 65.95
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 1632950 ( 12.54%) 1209855433 ( 13.06%) 740.90
udp 2857457 ( 21.94%) 1037349717 ( 11.20%) 363.03
dns 1843420 ( 14.15%) 313628048 ( 3.39%) 170.13
realaud 12 ( 0.00%) 1528 ( 0.00%) 127.33
halflif 174 ( 0.00%) 34333 ( 0.00%) 197.32
starcra 21 ( 0.00%) 3775 ( 0.00%) 179.76
everque 56 ( 0.00%) 11347 ( 0.00%) 202.62
unreal 392 ( 0.00%) 183042 ( 0.00%) 466.94
quake 29 ( 0.00%) 2343 ( 0.00%) 80.79
cuseeme 6 ( 0.00%) 830 ( 0.00%) 138.33
other 1013219 ( 7.78%) 723376321 ( 7.81%) 713.94
icmp 953984 ( 7.32%) 123800045 ( 1.34%) 129.77
ipip 331 ( 0.00%) 40750 ( 0.00%) 123.11
ipsec 112 ( 0.00%) 17728 ( 0.00%) 158.29
ip6 37042 ( 0.28%) 23255081 ( 0.25%) 627.80
other 10378 ( 0.08%) 1578916 ( 0.02%) 152.14
frag 51367 ( 0.39%) 56474130 ( 0.61%) 1099.42
ip6 34768 ( 0.27%) 8036824 ( 0.09%) 231.16
tcp6 18441 ( 0.14%) 4896878 ( 0.05%) 265.54
http(s) 220 ( 0.00%) 25238 ( 0.00%) 114.72
http(c) 10729 ( 0.08%) 934381 ( 0.01%) 87.09
smtp 154 ( 0.00%) 74349 ( 0.00%) 482.79
ftp 1994 ( 0.02%) 212061 ( 0.00%) 106.35
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 382 ( 0.00%) 32963 ( 0.00%) 86.29
other 4958 ( 0.04%) 3617489 ( 0.04%) 729.63
udp6 11714 ( 0.09%) 2074832 ( 0.02%) 177.12
dns 9501 ( 0.07%) 1553028 ( 0.02%) 163.46
other 2213 ( 0.02%) 521804 ( 0.01%) 235.79
icmp6 4029 ( 0.03%) 545948 ( 0.01%) 135.50
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 554 ( 0.00%) 515086 ( 0.01%) 929.76
tcpdump file: 200903310445.dump.gz (320.84 MB)