Traffic Trace Info
DumpFile: 200903310700.dump
FileSize: 620.77MB
Id: 200903310700
StartTime: Tue Mar 31 07:00:00 2009
EndTime: Tue Mar 31 07:15:00 2009
TotalTime: 899.58 seconds
TotalCapSize: 484.69MB CapLen: 96 bytes
# of packets: 8917383 (6072.81MB)
AvgRate: 56.61Mbps stddev:10.25M
IP flow (unique src/dst pair) Information
# of flows: 581954 (avg. 15.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 3.5% 2.4% 2.4% 1.8% 1.6% 1.4% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 361327
Top 10 bandwidth usage (bytes/total in %):
12.4% 9.9% 7.0% 6.5% 6.1% 5.2% 4.9% 4.9% 3.6% 3.6%
# of IPv6 addresses: 2101
Top 10 bandwidth usage (bytes/total in %):
70.8% 37.7% 33.6% 7.6% 3.6% 2.0% 1.3% 1.3% 1.2% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310700.pktlen.png)
detailed numbers
[ 32- 63]: 1810990
[ 64- 127]: 2075951
[ 128- 255]: 468118
[ 256- 511]: 353819
[ 512- 1023]: 250523
[ 1024- 2047]: 3957982
Protocol Breakdown
![[protocol breakdown chart]](200903310700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 8917383 (100.00%) 6367801680 (100.00%) 714.09
ip 8889937 ( 99.69%) 6355218082 ( 99.80%) 714.88
tcp 6830665 ( 76.60%) 5692879298 ( 89.40%) 833.43
http(s) 3030919 ( 33.99%) 3992548123 ( 62.70%) 1317.27
http(c) 1315564 ( 14.75%) 107948842 ( 1.70%) 82.06
squid 372183 ( 4.17%) 164693801 ( 2.59%) 442.51
smtp 276336 ( 3.10%) 61657891 ( 0.97%) 223.13
ftp 158736 ( 1.78%) 159508595 ( 2.50%) 1004.87
pop3 4093 ( 0.05%) 1630374 ( 0.03%) 398.33
imap 1138 ( 0.01%) 137090 ( 0.00%) 120.47
telnet 1633 ( 0.02%) 114687 ( 0.00%) 70.23
ssh 75370 ( 0.85%) 18192470 ( 0.29%) 241.38
dns 13399 ( 0.15%) 1431405 ( 0.02%) 106.83
bgp 774 ( 0.01%) 546779 ( 0.01%) 706.43
napster 90 ( 0.00%) 5522 ( 0.00%) 61.36
realaud 13 ( 0.00%) 898 ( 0.00%) 69.08
rtsp 73 ( 0.00%) 27834 ( 0.00%) 381.29
icecast 138 ( 0.00%) 9260 ( 0.00%) 67.10
hotline 94 ( 0.00%) 5818 ( 0.00%) 61.89
other 1580100 ( 17.72%) 1184419101 ( 18.60%) 749.58
udp 1570443 ( 17.61%) 574455376 ( 9.02%) 365.79
dns 955613 ( 10.72%) 205816283 ( 3.23%) 215.38
realaud 904 ( 0.01%) 54551 ( 0.00%) 60.34
halflif 105 ( 0.00%) 17333 ( 0.00%) 165.08
starcra 24 ( 0.00%) 3976 ( 0.00%) 165.67
everque 46 ( 0.00%) 10216 ( 0.00%) 222.09
unreal 9 ( 0.00%) 2644 ( 0.00%) 293.78
quake 21 ( 0.00%) 2775 ( 0.00%) 132.14
cuseeme 6 ( 0.00%) 793 ( 0.00%) 132.17
other 613559 ( 6.88%) 368411809 ( 5.79%) 600.45
icmp 452203 ( 5.07%) 78787472 ( 1.24%) 174.23
ipip 334 ( 0.00%) 41082 ( 0.00%) 123.00
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 26510 ( 0.30%) 7675728 ( 0.12%) 289.54
other 9674 ( 0.11%) 1362062 ( 0.02%) 140.80
frag 45125 ( 0.51%) 49492445 ( 0.78%) 1096.79
ip6 27446 ( 0.31%) 12583598 ( 0.20%) 458.49
tcp6 12291 ( 0.14%) 9706631 ( 0.15%) 789.73
http(s) 220 ( 0.00%) 25200 ( 0.00%) 114.55
http(c) 3125 ( 0.04%) 320502 ( 0.01%) 102.56
smtp 662 ( 0.01%) 212926 ( 0.00%) 321.64
ftp 468 ( 0.01%) 45124 ( 0.00%) 96.42
imap 2 ( 0.00%) 225 ( 0.00%) 112.50
ssh 3 ( 0.00%) 246 ( 0.00%) 82.00
dns 4 ( 0.00%) 630 ( 0.00%) 157.50
bgp 419 ( 0.00%) 60223 ( 0.00%) 143.73
other 7388 ( 0.08%) 9041555 ( 0.14%) 1223.82
udp6 11552 ( 0.13%) 2029701 ( 0.03%) 175.70
dns 9649 ( 0.11%) 1491406 ( 0.02%) 154.57
halflif 2 ( 0.00%) 214 ( 0.00%) 107.00
everque 1 ( 0.00%) 145 ( 0.00%) 145.00
unreal 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 1898 ( 0.02%) 537726 ( 0.01%) 283.31
icmp6 3125 ( 0.04%) 418102 ( 0.01%) 133.79
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 448 ( 0.01%) 425084 ( 0.01%) 948.85
tcpdump file: 200903310700.dump.gz (222.88 MB)