Traffic Trace Info
DumpFile: 200903310800.dump
FileSize: 652.61MB
Id: 200903310800
StartTime: Tue Mar 31 08:00:00 2009
EndTime: Tue Mar 31 08:15:00 2009
TotalTime: 900.66 seconds
TotalCapSize: 510.55MB CapLen: 96 bytes
# of packets: 9307305 (5941.42MB)
AvgRate: 55.34Mbps stddev:9.66M
IP flow (unique src/dst pair) Information
# of flows: 593157 (avg. 15.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.6% 3.1% 2.9% 2.6% 2.4% 2.3% 1.5% 1.5% 1.2%
IP address Information
# of IPv4 addresses: 355191
Top 10 bandwidth usage (bytes/total in %):
11.6% 10.5% 9.9% 7.1% 6.0% 4.8% 4.0% 4.0% 3.6% 3.2%
# of IPv6 addresses: 2031
Top 10 bandwidth usage (bytes/total in %):
43.2% 23.9% 20.7% 12.6% 7.9% 3.2% 3.0% 2.9% 2.8% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310800.pktlen.png)
detailed numbers
[ 32- 63]: 1879584
[ 64- 127]: 2532097
[ 128- 255]: 464158
[ 256- 511]: 324996
[ 512- 1023]: 241660
[ 1024- 2047]: 3864810
Protocol Breakdown
![[protocol breakdown chart]](200903310800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9307305 (100.00%) 6230027816 (100.00%) 669.37
ip 9282812 ( 99.74%) 6223294910 ( 99.89%) 670.41
tcp 6739601 ( 72.41%) 5442675153 ( 87.36%) 807.57
http(s) 2976019 ( 31.98%) 3973042755 ( 63.77%) 1335.02
http(c) 1503103 ( 16.15%) 175521988 ( 2.82%) 116.77
squid 335372 ( 3.60%) 146486395 ( 2.35%) 436.79
smtp 285081 ( 3.06%) 65300721 ( 1.05%) 229.06
ftp 86552 ( 0.93%) 61755434 ( 0.99%) 713.51
pop3 4376 ( 0.05%) 1761554 ( 0.03%) 402.55
imap 1201 ( 0.01%) 100245 ( 0.00%) 83.47
telnet 609 ( 0.01%) 47127 ( 0.00%) 77.38
ssh 51999 ( 0.56%) 21379988 ( 0.34%) 411.16
dns 14750 ( 0.16%) 5011722 ( 0.08%) 339.78
bgp 170 ( 0.00%) 65669 ( 0.00%) 386.29
napster 83 ( 0.00%) 4980 ( 0.00%) 60.00
realaud 14 ( 0.00%) 1337 ( 0.00%) 95.50
rtsp 73 ( 0.00%) 28060 ( 0.00%) 384.38
icecast 101 ( 0.00%) 6757 ( 0.00%) 66.90
other 1480073 ( 15.90%) 992158921 ( 15.93%) 670.34
udp 1694084 ( 18.20%) 669140755 ( 10.74%) 394.99
dns 856971 ( 9.21%) 196109529 ( 3.15%) 228.84
realaud 526 ( 0.01%) 31957 ( 0.00%) 60.75
halflif 141 ( 0.00%) 23871 ( 0.00%) 169.30
starcra 21 ( 0.00%) 3570 ( 0.00%) 170.00
everque 41 ( 0.00%) 8804 ( 0.00%) 214.73
unreal 11 ( 0.00%) 1760 ( 0.00%) 160.00
quake 11 ( 0.00%) 1290 ( 0.00%) 117.27
cuseeme 6 ( 0.00%) 624 ( 0.00%) 104.00
other 836222 ( 8.98%) 472841134 ( 7.59%) 565.45
icmp 813508 ( 8.74%) 103837650 ( 1.67%) 127.64
ipip 326 ( 0.00%) 39488 ( 0.00%) 121.13
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 24445 ( 0.26%) 6016861 ( 0.10%) 246.14
other 10740 ( 0.12%) 1567939 ( 0.03%) 145.99
frag 43154 ( 0.46%) 47322227 ( 0.76%) 1096.59
ip6 24493 ( 0.26%) 6732906 ( 0.11%) 274.89
tcp6 7119 ( 0.08%) 3556898 ( 0.06%) 499.63
http(s) 240 ( 0.00%) 30555 ( 0.00%) 127.31
http(c) 3228 ( 0.03%) 323252 ( 0.01%) 100.14
smtp 298 ( 0.00%) 164125 ( 0.00%) 550.76
bgp 400 ( 0.00%) 36060 ( 0.00%) 90.15
other 2953 ( 0.03%) 3002906 ( 0.05%) 1016.90
udp6 13282 ( 0.14%) 2320577 ( 0.04%) 174.72
dns 11577 ( 0.12%) 1838569 ( 0.03%) 158.81
everque 1 ( 0.00%) 145 ( 0.00%) 145.00
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1702 ( 0.02%) 481640 ( 0.01%) 282.98
icmp6 3670 ( 0.04%) 488066 ( 0.01%) 132.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 392 ( 0.00%) 363285 ( 0.01%) 926.75
tcpdump file: 200903310800.dump.gz (221.51 MB)