Traffic Trace Info
DumpFile: 200903310615.dump
FileSize: 736.36MB
Id: 200903310615
StartTime: Tue Mar 31 06:15:00 2009
EndTime: Tue Mar 31 06:30:01 2009
TotalTime: 900.44 seconds
TotalCapSize: 575.56MB CapLen: 96 bytes
# of packets: 10537427 (7697.80MB)
AvgRate: 71.71Mbps stddev:12.42M
IP flow (unique src/dst pair) Information
# of flows: 709695 (avg. 14.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.8% 2.7% 2.2% 2.2% 2.1% 2.0% 1.8% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 479057
Top 10 bandwidth usage (bytes/total in %):
13.7% 12.0% 9.0% 7.7% 5.7% 3.4% 3.4% 3.4% 2.9% 2.8%
# of IPv6 addresses: 1617
Top 10 bandwidth usage (bytes/total in %):
29.2% 29.2% 7.9% 7.7% 7.6% 7.6% 5.8% 5.8% 4.7% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310615.pktlen.png)
detailed numbers
[ 32- 63]: 2103526
[ 64- 127]: 2312861
[ 128- 255]: 445292
[ 256- 511]: 342544
[ 512- 1023]: 232772
[ 1024- 2047]: 5100432
Protocol Breakdown
![[protocol breakdown chart]](200903310615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10537427 (100.00%) 8071725742 (100.00%) 766.01
ip 10510420 ( 99.74%) 8066039413 ( 99.93%) 767.43
tcp 8310385 ( 78.87%) 7350969923 ( 91.07%) 884.55
http(s) 3867267 ( 36.70%) 5241744092 ( 64.94%) 1355.41
http(c) 1794023 ( 17.03%) 354073538 ( 4.39%) 197.36
squid 251975 ( 2.39%) 102300649 ( 1.27%) 406.00
smtp 284775 ( 2.70%) 49685151 ( 0.62%) 174.47
ftp 171275 ( 1.63%) 182278283 ( 2.26%) 1064.24
pop3 4238 ( 0.04%) 2010430 ( 0.02%) 474.38
imap 1041 ( 0.01%) 96328 ( 0.00%) 92.53
telnet 10541 ( 0.10%) 7020219 ( 0.09%) 665.99
ssh 86287 ( 0.82%) 14103707 ( 0.17%) 163.45
dns 21471 ( 0.20%) 13434542 ( 0.17%) 625.71
bgp 158 ( 0.00%) 53782 ( 0.00%) 340.39
napster 90 ( 0.00%) 6368 ( 0.00%) 70.76
realaud 15 ( 0.00%) 1060 ( 0.00%) 70.67
rtsp 263 ( 0.00%) 54569 ( 0.00%) 207.49
icecast 191 ( 0.00%) 12741 ( 0.00%) 66.71
hotline 3 ( 0.00%) 184 ( 0.00%) 61.33
other 1816727 ( 17.24%) 1384091580 ( 17.15%) 761.86
udp 1554860 ( 14.76%) 617968423 ( 7.66%) 397.44
dns 820537 ( 7.79%) 188611800 ( 2.34%) 229.86
realaud 2735 ( 0.03%) 164491 ( 0.00%) 60.14
halflif 115 ( 0.00%) 24091 ( 0.00%) 209.49
starcra 26 ( 0.00%) 4790 ( 0.00%) 184.23
everque 54 ( 0.00%) 11135 ( 0.00%) 206.20
unreal 12 ( 0.00%) 2480 ( 0.00%) 206.67
quake 18 ( 0.00%) 1404 ( 0.00%) 78.00
cuseeme 3 ( 0.00%) 359 ( 0.00%) 119.67
other 731234 ( 6.94%) 429042983 ( 5.32%) 586.74
icmp 607164 ( 5.76%) 87988575 ( 1.09%) 144.92
ipip 318 ( 0.00%) 37338 ( 0.00%) 117.42
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 27222 ( 0.26%) 7534364 ( 0.09%) 276.77
other 10363 ( 0.10%) 1523726 ( 0.02%) 147.04
frag 45128 ( 0.43%) 49589637 ( 0.61%) 1098.87
ip6 27007 ( 0.26%) 5686329 ( 0.07%) 210.55
tcp6 12846 ( 0.12%) 3387445 ( 0.04%) 263.70
http(s) 249 ( 0.00%) 28888 ( 0.00%) 116.02
http(c) 2376 ( 0.02%) 222082 ( 0.00%) 93.47
smtp 488 ( 0.00%) 319443 ( 0.00%) 654.60
ftp 1937 ( 0.02%) 189184 ( 0.00%) 97.67
bgp 378 ( 0.00%) 33225 ( 0.00%) 87.90
other 7418 ( 0.07%) 2594623 ( 0.03%) 349.77
udp6 9955 ( 0.09%) 1509384 ( 0.02%) 151.62
dns 8797 ( 0.08%) 1323567 ( 0.02%) 150.46
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1156 ( 0.01%) 185590 ( 0.00%) 160.54
icmp6 3881 ( 0.04%) 520658 ( 0.01%) 134.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 295 ( 0.00%) 264762 ( 0.00%) 897.50
tcpdump file: 200903310615.dump.gz (253.89 MB)