Traffic Trace Info
DumpFile: 200903310500.dump
FileSize: 918.17MB
Id: 200903310500
StartTime: Tue Mar 31 05:00:01 2009
EndTime: Tue Mar 31 05:15:01 2009
TotalTime: 900.17 seconds
TotalCapSize: 717.21MB CapLen: 96 bytes
# of packets: 13169522 (8737.62MB)
AvgRate: 81.43Mbps stddev:11.75M
IP flow (unique src/dst pair) Information
# of flows: 748701 (avg. 17.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.9% 2.4% 1.7% 1.6% 1.4% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 486364
Top 10 bandwidth usage (bytes/total in %):
17.7% 8.9% 8.9% 6.6% 5.4% 3.7% 3.5% 3.1% 3.1% 2.9%
# of IPv6 addresses: 1997
Top 10 bandwidth usage (bytes/total in %):
79.9% 40.8% 39.3% 3.0% 2.0% 1.9% 1.9% 1.3% 1.2% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310500.pktlen.png)
detailed numbers
[ 32- 63]: 2281842
[ 64- 127]: 3512407
[ 128- 255]: 981160
[ 256- 511]: 361511
[ 512- 1023]: 276592
[ 1024- 2047]: 5756010
Protocol Breakdown
![[protocol breakdown chart]](200903310500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13169522 (100.00%) 9162063290 (100.00%) 695.70
ip 13132166 ( 99.72%) 9141963636 ( 99.78%) 696.15
tcp 9137534 ( 69.38%) 8033698098 ( 87.68%) 879.20
http(s) 4427383 ( 33.62%) 6017605249 ( 65.68%) 1359.18
http(c) 2093308 ( 15.90%) 431930983 ( 4.71%) 206.34
squid 358183 ( 2.72%) 164034231 ( 1.79%) 457.96
smtp 256648 ( 1.95%) 35169008 ( 0.38%) 137.03
ftp 172930 ( 1.31%) 177715378 ( 1.94%) 1027.67
pop3 4522 ( 0.03%) 1911212 ( 0.02%) 422.65
imap 1167 ( 0.01%) 255427 ( 0.00%) 218.87
telnet 2886 ( 0.02%) 189828 ( 0.00%) 65.78
ssh 201610 ( 1.53%) 29873591 ( 0.33%) 148.18
dns 16279 ( 0.12%) 3008827 ( 0.03%) 184.83
bgp 772 ( 0.01%) 556101 ( 0.01%) 720.34
napster 85 ( 0.00%) 5140 ( 0.00%) 60.47
realaud 31 ( 0.00%) 2062 ( 0.00%) 66.52
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 119 ( 0.00%) 9022 ( 0.00%) 75.82
hotline 4 ( 0.00%) 258 ( 0.00%) 64.50
other 1601600 ( 12.16%) 1171431361 ( 12.79%) 731.41
udp 2836300 ( 21.54%) 951415112 ( 10.38%) 335.44
dns 1810836 ( 13.75%) 308575740 ( 3.37%) 170.41
realaud 10 ( 0.00%) 1388 ( 0.00%) 138.80
halflif 126 ( 0.00%) 21363 ( 0.00%) 169.55
starcra 24 ( 0.00%) 4384 ( 0.00%) 182.67
everque 59 ( 0.00%) 11855 ( 0.00%) 200.93
unreal 563 ( 0.00%) 250805 ( 0.00%) 445.48
quake 43 ( 0.00%) 3727 ( 0.00%) 86.67
cuseeme 9 ( 0.00%) 1986 ( 0.00%) 220.67
other 1024495 ( 7.78%) 642429034 ( 7.01%) 627.07
icmp 1112812 ( 8.45%) 138086020 ( 1.51%) 124.09
ipip 315 ( 0.00%) 38298 ( 0.00%) 121.58
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 34036 ( 0.26%) 17022891 ( 0.19%) 500.14
other 11059 ( 0.08%) 1685837 ( 0.02%) 152.44
frag 52162 ( 0.40%) 57305651 ( 0.63%) 1098.61
ip6 37356 ( 0.28%) 20099654 ( 0.22%) 538.06
tcp6 21657 ( 0.16%) 17359800 ( 0.19%) 801.58
http(s) 223 ( 0.00%) 25540 ( 0.00%) 114.53
http(c) 4501 ( 0.03%) 405761 ( 0.00%) 90.15
smtp 441 ( 0.00%) 316749 ( 0.00%) 718.25
ftp 1253 ( 0.01%) 128071 ( 0.00%) 102.21
ssh 3 ( 0.00%) 246 ( 0.00%) 82.00
bgp 391 ( 0.00%) 35076 ( 0.00%) 89.71
other 14845 ( 0.11%) 16448357 ( 0.18%) 1108.01
udp6 11669 ( 0.09%) 1935612 ( 0.02%) 165.88
dns 9942 ( 0.08%) 1623886 ( 0.02%) 163.34
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
other 1726 ( 0.01%) 311615 ( 0.00%) 180.54
icmp6 3659 ( 0.03%) 488156 ( 0.01%) 133.41
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 341 ( 0.00%) 312006 ( 0.00%) 914.97
tcpdump file: 200903310500.dump.gz (325.01 MB)