Traffic Trace Info
DumpFile: 200903310515.dump
FileSize: 808.39MB
Id: 200903310515
StartTime: Tue Mar 31 05:15:01 2009
EndTime: Tue Mar 31 05:30:01 2009
TotalTime: 899.67 seconds
TotalCapSize: 630.22MB CapLen: 96 bytes
# of packets: 11675632 (8290.08MB)
AvgRate: 77.31Mbps stddev:11.49M
IP flow (unique src/dst pair) Information
# of flows: 722740 (avg. 16.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.0% 2.5% 2.1% 1.4% 1.1% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 476819
Top 10 bandwidth usage (bytes/total in %):
17.3% 12.5% 10.4% 6.9% 4.0% 3.6% 3.4% 3.4% 3.0% 2.6%
# of IPv6 addresses: 2076
Top 10 bandwidth usage (bytes/total in %):
24.4% 24.1% 13.9% 7.5% 6.8% 6.8% 5.4% 3.3% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310515.pktlen.png)
detailed numbers
[ 32- 63]: 2313751
[ 64- 127]: 2554354
[ 128- 255]: 673039
[ 256- 511]: 350402
[ 512- 1023]: 303032
[ 1024- 2047]: 5481054
Protocol Breakdown
![[protocol breakdown chart]](200903310515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11675632 (100.00%) 8692778927 (100.00%) 744.52
ip 11650051 ( 99.78%) 8687481112 ( 99.94%) 745.70
tcp 8739019 ( 74.85%) 7797988176 ( 89.71%) 892.32
http(s) 4477601 ( 38.35%) 6068081162 ( 69.81%) 1355.21
http(c) 2068978 ( 17.72%) 436504979 ( 5.02%) 210.98
squid 258385 ( 2.21%) 99178082 ( 1.14%) 383.84
smtp 347263 ( 2.97%) 44272018 ( 0.51%) 127.49
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 126224 ( 1.08%) 111678288 ( 1.28%) 884.76
pop3 4181 ( 0.04%) 1706651 ( 0.02%) 408.19
imap 822 ( 0.01%) 76313 ( 0.00%) 92.84
telnet 3222 ( 0.03%) 210412 ( 0.00%) 65.30
ssh 61885 ( 0.53%) 10467178 ( 0.12%) 169.14
dns 14511 ( 0.12%) 1638646 ( 0.02%) 112.92
bgp 419 ( 0.00%) 280193 ( 0.00%) 668.72
napster 92 ( 0.00%) 5849 ( 0.00%) 63.58
realaud 14 ( 0.00%) 986 ( 0.00%) 70.43
rtsp 67 ( 0.00%) 27348 ( 0.00%) 408.18
icecast 122 ( 0.00%) 8088 ( 0.00%) 66.30
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1375130 ( 11.78%) 1023838493 ( 11.78%) 744.54
udp 2168982 ( 18.58%) 774082132 ( 8.90%) 356.89
dns 1300581 ( 11.14%) 241106562 ( 2.77%) 185.38
realaud 491 ( 0.00%) 33040 ( 0.00%) 67.29
halflif 143 ( 0.00%) 23532 ( 0.00%) 164.56
starcra 14 ( 0.00%) 2698 ( 0.00%) 192.71
everque 55 ( 0.00%) 10562 ( 0.00%) 192.04
unreal 421 ( 0.00%) 194991 ( 0.00%) 463.16
quake 23 ( 0.00%) 2193 ( 0.00%) 95.35
cuseeme 9 ( 0.00%) 1317 ( 0.00%) 146.33
other 867085 ( 7.43%) 532567608 ( 6.13%) 614.20
icmp 706102 ( 6.05%) 107583927 ( 1.24%) 152.36
ipip 310 ( 0.00%) 36716 ( 0.00%) 118.44
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 24986 ( 0.21%) 6137659 ( 0.07%) 245.64
other 10542 ( 0.09%) 1635122 ( 0.02%) 155.11
frag 50981 ( 0.44%) 56093469 ( 0.65%) 1100.28
ip6 25581 ( 0.22%) 5297815 ( 0.06%) 207.10
tcp6 10336 ( 0.09%) 2501418 ( 0.03%) 242.01
http(s) 235 ( 0.00%) 27338 ( 0.00%) 116.33
http(c) 2569 ( 0.02%) 240559 ( 0.00%) 93.64
smtp 734 ( 0.01%) 375469 ( 0.00%) 511.54
ftp 1624 ( 0.01%) 169592 ( 0.00%) 104.43
bgp 379 ( 0.00%) 32908 ( 0.00%) 86.83
other 4795 ( 0.04%) 1655552 ( 0.02%) 345.27
udp6 11338 ( 0.10%) 2046153 ( 0.02%) 180.47
dns 9534 ( 0.08%) 1558907 ( 0.02%) 163.51
other 1804 ( 0.02%) 487246 ( 0.01%) 270.09
icmp6 3603 ( 0.03%) 493632 ( 0.01%) 137.01
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 274 ( 0.00%) 252532 ( 0.00%) 921.65
tcpdump file: 200903310515.dump.gz (289.33 MB)