Traffic Trace Info
DumpFile: 200903310545.dump
FileSize: 783.22MB
Id: 200903310545
StartTime: Tue Mar 31 05:45:00 2009
EndTime: Tue Mar 31 06:00:00 2009
TotalTime: 899.74 seconds
TotalCapSize: 610.33MB CapLen: 96 bytes
# of packets: 11329546 (7379.91MB)
AvgRate: 68.81Mbps stddev:13.18M
IP flow (unique src/dst pair) Information
# of flows: 696370 (avg. 16.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.5% 3.0% 2.9% 2.8% 1.5% 1.4% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 455504
Top 10 bandwidth usage (bytes/total in %):
15.7% 12.2% 11.1% 7.0% 4.3% 4.1% 4.0% 3.5% 3.5% 3.2%
# of IPv6 addresses: 1658
Top 10 bandwidth usage (bytes/total in %):
28.1% 28.1% 10.0% 7.2% 6.8% 6.8% 5.5% 5.5% 5.0% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310545.pktlen.png)
detailed numbers
[ 32- 63]: 2252946
[ 64- 127]: 2777788
[ 128- 255]: 868790
[ 256- 511]: 388314
[ 512- 1023]: 260162
[ 1024- 2047]: 4781546
Protocol Breakdown
![[protocol breakdown chart]](200903310545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11329546 (100.00%) 7738392790 (100.00%) 683.03
ip 11303113 ( 99.77%) 7733259888 ( 99.93%) 684.17
tcp 8174922 ( 72.16%) 6860816531 ( 88.66%) 839.25
http(s) 3758563 ( 33.17%) 5062538958 ( 65.42%) 1346.93
http(c) 2007784 ( 17.72%) 455165337 ( 5.88%) 226.70
squid 267945 ( 2.37%) 120399824 ( 1.56%) 449.35
smtp 277647 ( 2.45%) 44343476 ( 0.57%) 159.71
ftp 164573 ( 1.45%) 161656852 ( 2.09%) 982.28
pop3 4184 ( 0.04%) 1233504 ( 0.02%) 294.81
imap 877 ( 0.01%) 152998 ( 0.00%) 174.46
telnet 2009 ( 0.02%) 133353 ( 0.00%) 66.38
ssh 56763 ( 0.50%) 11764483 ( 0.15%) 207.26
dns 14776 ( 0.13%) 2821289 ( 0.04%) 190.94
bgp 193 ( 0.00%) 95004 ( 0.00%) 492.25
napster 74 ( 0.00%) 4446 ( 0.00%) 60.08
realaud 15 ( 0.00%) 1048 ( 0.00%) 69.87
rtsp 241 ( 0.00%) 51382 ( 0.00%) 213.20
icecast 97 ( 0.00%) 7130 ( 0.00%) 73.51
hotline 14 ( 0.00%) 1186 ( 0.00%) 84.71
other 1619162 ( 14.29%) 1000445961 ( 12.93%) 617.88
udp 2634920 ( 23.26%) 784211970 ( 10.13%) 297.62
dns 1696175 ( 14.97%) 275205038 ( 3.56%) 162.25
realaud 2725 ( 0.02%) 163776 ( 0.00%) 60.10
halflif 129 ( 0.00%) 21186 ( 0.00%) 164.23
starcra 13 ( 0.00%) 2783 ( 0.00%) 214.08
everque 64 ( 0.00%) 13375 ( 0.00%) 208.98
unreal 13 ( 0.00%) 1675 ( 0.00%) 128.85
quake 27 ( 0.00%) 2093 ( 0.00%) 77.52
cuseeme 5 ( 0.00%) 421 ( 0.00%) 84.20
other 935630 ( 8.26%) 508678566 ( 6.57%) 543.67
icmp 457712 ( 4.04%) 78171557 ( 1.01%) 170.79
ipip 319 ( 0.00%) 37654 ( 0.00%) 118.04
ipsec 116 ( 0.00%) 18288 ( 0.00%) 157.66
ip6 25152 ( 0.22%) 8488174 ( 0.11%) 337.48
other 9972 ( 0.09%) 1515714 ( 0.02%) 152.00
frag 47583 ( 0.42%) 52262730 ( 0.68%) 1098.35
ip6 26433 ( 0.23%) 5132902 ( 0.07%) 194.19
tcp6 13199 ( 0.12%) 2852187 ( 0.04%) 216.09
http(s) 270 ( 0.00%) 31003 ( 0.00%) 114.83
http(c) 2672 ( 0.02%) 299746 ( 0.00%) 112.18
smtp 577 ( 0.01%) 297450 ( 0.00%) 515.51
ftp 1869 ( 0.02%) 191451 ( 0.00%) 102.43
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 383 ( 0.00%) 33598 ( 0.00%) 87.72
other 7426 ( 0.07%) 1998767 ( 0.03%) 269.16
udp6 9533 ( 0.08%) 1512729 ( 0.02%) 158.68
dns 8283 ( 0.07%) 1310157 ( 0.02%) 158.17
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
other 1249 ( 0.01%) 202462 ( 0.00%) 162.10
icmp6 3328 ( 0.03%) 446047 ( 0.01%) 134.03
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 343 ( 0.00%) 317859 ( 0.00%) 926.70
tcpdump file: 200903310545.dump.gz (281.45 MB)