Traffic Trace Info
DumpFile: 200903310715.dump
FileSize: 663.78MB
Id: 200903310715
StartTime: Tue Mar 31 07:15:00 2009
EndTime: Tue Mar 31 07:30:00 2009
TotalTime: 899.97 seconds
TotalCapSize: 517.22MB CapLen: 96 bytes
# of packets: 9604430 (6504.09MB)
AvgRate: 60.60Mbps stddev:10.04M
IP flow (unique src/dst pair) Information
# of flows: 646286 (avg. 14.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 4.6% 3.1% 2.2% 2.0% 1.6% 1.4% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 430215
Top 10 bandwidth usage (bytes/total in %):
10.9% 9.9% 8.1% 6.4% 6.0% 5.0% 4.9% 4.6% 4.6% 4.5%
# of IPv6 addresses: 1690
Top 10 bandwidth usage (bytes/total in %):
26.4% 26.2% 14.3% 11.7% 11.2% 9.2% 5.5% 3.4% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310715.pktlen.png)
detailed numbers
[ 32- 63]: 2170294
[ 64- 127]: 2111670
[ 128- 255]: 445313
[ 256- 511]: 344506
[ 512- 1023]: 220421
[ 1024- 2047]: 4312226
Protocol Breakdown
![[protocol breakdown chart]](200903310715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9604430 (100.00%) 6820032617 (100.00%) 710.09
ip 9583563 ( 99.78%) 6815133669 ( 99.93%) 711.13
tcp 7458250 ( 77.65%) 6030726174 ( 88.43%) 808.60
http(s) 3418722 ( 35.60%) 4529199442 ( 66.41%) 1324.82
http(c) 1627511 ( 16.95%) 130182711 ( 1.91%) 79.99
squid 403144 ( 4.20%) 129688775 ( 1.90%) 321.69
smtp 312173 ( 3.25%) 64306975 ( 0.94%) 206.00
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 117709 ( 1.23%) 109493394 ( 1.61%) 930.20
pop3 4758 ( 0.05%) 1631717 ( 0.02%) 342.94
imap 3301 ( 0.03%) 3167639 ( 0.05%) 959.60
telnet 1261 ( 0.01%) 85342 ( 0.00%) 67.68
ssh 47595 ( 0.50%) 12405164 ( 0.18%) 260.64
dns 13861 ( 0.14%) 1519328 ( 0.02%) 109.61
bgp 295 ( 0.00%) 158310 ( 0.00%) 536.64
napster 100 ( 0.00%) 6008 ( 0.00%) 60.08
realaud 14 ( 0.00%) 986 ( 0.00%) 70.43
rtsp 69 ( 0.00%) 28635 ( 0.00%) 415.00
icecast 104 ( 0.00%) 6950 ( 0.00%) 66.83
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1507629 ( 15.70%) 1048844558 ( 15.38%) 695.69
udp 1595156 ( 16.61%) 694987450 ( 10.19%) 435.69
dns 848898 ( 8.84%) 182016170 ( 2.67%) 214.41
realaud 904 ( 0.01%) 54310 ( 0.00%) 60.08
halflif 105 ( 0.00%) 18344 ( 0.00%) 174.70
starcra 14 ( 0.00%) 2554 ( 0.00%) 182.43
everque 45 ( 0.00%) 9794 ( 0.00%) 217.64
unreal 13 ( 0.00%) 4342 ( 0.00%) 334.00
quake 21 ( 0.00%) 2459 ( 0.00%) 117.10
cuseeme 6 ( 0.00%) 476 ( 0.00%) 79.33
other 745008 ( 7.76%) 512751303 ( 7.52%) 688.25
icmp 493825 ( 5.14%) 80576704 ( 1.18%) 163.17
ipip 300 ( 0.00%) 35986 ( 0.00%) 119.95
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 26228 ( 0.27%) 7481422 ( 0.11%) 285.25
other 9694 ( 0.10%) 1308553 ( 0.02%) 134.99
frag 43610 ( 0.45%) 47885281 ( 0.70%) 1098.03
ip6 20865 ( 0.22%) 4898828 ( 0.07%) 234.79
tcp6 6657 ( 0.07%) 2371990 ( 0.03%) 356.32
http(s) 218 ( 0.00%) 24741 ( 0.00%) 113.49
http(c) 3287 ( 0.03%) 297638 ( 0.00%) 90.55
smtp 190 ( 0.00%) 77439 ( 0.00%) 407.57
bgp 395 ( 0.00%) 37900 ( 0.00%) 95.95
other 2567 ( 0.03%) 1934272 ( 0.03%) 753.51
udp6 10104 ( 0.11%) 1544624 ( 0.02%) 152.87
dns 8829 ( 0.09%) 1342544 ( 0.02%) 152.06
starcra 2 ( 0.00%) 326 ( 0.00%) 163.00
other 1273 ( 0.01%) 201754 ( 0.00%) 158.49
icmp6 3534 ( 0.04%) 475924 ( 0.01%) 134.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 540 ( 0.01%) 502210 ( 0.01%) 930.02
tcpdump file: 200903310715.dump.gz (234.65 MB)