Traffic Trace Info
DumpFile: 200903310745.dump
FileSize: 629.76MB
Id: 200903310745
StartTime: Tue Mar 31 07:45:00 2009
EndTime: Tue Mar 31 08:00:00 2009
TotalTime: 900.06 seconds
TotalCapSize: 491.90MB CapLen: 96 bytes
# of packets: 9034034 (5962.41MB)
AvgRate: 55.58Mbps stddev:9.05M
IP flow (unique src/dst pair) Information
# of flows: 529134 (avg. 17.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.8% 3.4% 2.4% 1.9% 1.5% 1.4% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 339983
Top 10 bandwidth usage (bytes/total in %):
12.0% 11.1% 10.3% 6.7% 5.4% 4.3% 3.8% 3.8% 3.4% 3.4%
# of IPv6 addresses: 1623
Top 10 bandwidth usage (bytes/total in %):
28.9% 28.9% 13.7% 9.3% 8.6% 8.6% 4.7% 3.5% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310745.pktlen.png)
detailed numbers
[ 32- 63]: 1807250
[ 64- 127]: 2365303
[ 128- 255]: 433051
[ 256- 511]: 325570
[ 512- 1023]: 219882
[ 1024- 2047]: 3882978
Protocol Breakdown
![[protocol breakdown chart]](200903310745.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9034034 (100.00%) 6252044452 (100.00%) 692.05
ip 9013441 ( 99.77%) 6247146535 ( 99.92%) 693.09
tcp 6777211 ( 75.02%) 5499583357 ( 87.96%) 811.48
http(s) 3097748 ( 34.29%) 4143289754 ( 66.27%) 1337.52
http(c) 1486843 ( 16.46%) 122842997 ( 1.96%) 82.62
squid 282701 ( 3.13%) 108251111 ( 1.73%) 382.92
smtp 245078 ( 2.71%) 70761522 ( 1.13%) 288.73
ftp 130317 ( 1.44%) 130610613 ( 2.09%) 1002.25
pop3 4090 ( 0.05%) 1692941 ( 0.03%) 413.92
imap 1263 ( 0.01%) 129579 ( 0.00%) 102.60
telnet 447 ( 0.00%) 34970 ( 0.00%) 78.23
ssh 40916 ( 0.45%) 7722522 ( 0.12%) 188.74
dns 11938 ( 0.13%) 2528091 ( 0.04%) 211.77
bgp 195 ( 0.00%) 96165 ( 0.00%) 493.15
napster 83 ( 0.00%) 4998 ( 0.00%) 60.22
realaud 22 ( 0.00%) 2088 ( 0.00%) 94.91
rtsp 114 ( 0.00%) 46477 ( 0.00%) 407.69
icecast 92 ( 0.00%) 6088 ( 0.00%) 66.17
hotline 5 ( 0.00%) 631 ( 0.00%) 126.20
other 1475359 ( 16.33%) 911562810 ( 14.58%) 617.86
udp 1621426 ( 17.95%) 583231519 ( 9.33%) 359.70
dns 767920 ( 8.50%) 175031119 ( 2.80%) 227.93
realaud 923 ( 0.01%) 58818 ( 0.00%) 63.72
halflif 118 ( 0.00%) 19793 ( 0.00%) 167.74
starcra 20 ( 0.00%) 3903 ( 0.00%) 195.15
everque 53 ( 0.00%) 11420 ( 0.00%) 215.47
unreal 7 ( 0.00%) 1795 ( 0.00%) 256.43
quake 13 ( 0.00%) 1114 ( 0.00%) 85.69
cuseeme 5 ( 0.00%) 431 ( 0.00%) 86.20
other 852266 ( 9.43%) 408011791 ( 6.53%) 478.74
icmp 530070 ( 5.87%) 81895930 ( 1.31%) 154.50
ipip 308 ( 0.00%) 37658 ( 0.00%) 122.27
ipsec 112 ( 0.00%) 17728 ( 0.00%) 158.29
ip6 74615 ( 0.83%) 81058444 ( 1.30%) 1086.36
other 9699 ( 0.11%) 1321899 ( 0.02%) 136.29
frag 40265 ( 0.45%) 44232469 ( 0.71%) 1098.53
ip6 20593 ( 0.23%) 4897917 ( 0.08%) 237.84
tcp6 5941 ( 0.07%) 2362428 ( 0.04%) 397.65
http(s) 225 ( 0.00%) 25540 ( 0.00%) 113.51
http(c) 2709 ( 0.03%) 245830 ( 0.00%) 90.75
smtp 227 ( 0.00%) 98826 ( 0.00%) 435.36
imap 454 ( 0.01%) 419910 ( 0.01%) 924.91
ssh 12 ( 0.00%) 2032 ( 0.00%) 169.33
bgp 389 ( 0.00%) 47846 ( 0.00%) 123.00
other 1925 ( 0.02%) 1522444 ( 0.02%) 790.88
udp6 10664 ( 0.12%) 1598721 ( 0.03%) 149.92
dns 9408 ( 0.10%) 1406599 ( 0.02%) 149.51
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1255 ( 0.01%) 192016 ( 0.00%) 153.00
icmp6 3426 ( 0.04%) 450357 ( 0.01%) 131.45
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 531 ( 0.01%) 482195 ( 0.01%) 908.09
tcpdump file: 200903310745.dump.gz (216.99 MB)