Traffic Trace Info
DumpFile: 200903310815.dump
FileSize: 680.33MB
Id: 200903310815
StartTime: Tue Mar 31 08:15:00 2009
EndTime: Tue Mar 31 08:30:01 2009
TotalTime: 900.10 seconds
TotalCapSize: 531.88MB CapLen: 96 bytes
# of packets: 9727501 (6818.20MB)
AvgRate: 63.55Mbps stddev:11.23M
IP flow (unique src/dst pair) Information
# of flows: 584120 (avg. 16.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 4.5% 3.4% 3.0% 3.0% 2.7% 2.3% 1.8% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 385110
Top 10 bandwidth usage (bytes/total in %):
17.4% 9.0% 8.8% 6.4% 6.1% 4.6% 4.5% 4.3% 3.5% 3.5%
# of IPv6 addresses: 1581
Top 10 bandwidth usage (bytes/total in %):
33.8% 33.6% 14.3% 10.2% 4.6% 3.6% 3.6% 3.5% 3.3% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310815.pktlen.png)
detailed numbers
[ 32- 63]: 2030634
[ 64- 127]: 2223340
[ 128- 255]: 432978
[ 256- 511]: 332998
[ 512- 1023]: 269869
[ 1024- 2047]: 4437682
Protocol Breakdown
![[protocol breakdown chart]](200903310815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9727501 (100.00%) 7149396533 (100.00%) 734.97
ip 9704805 ( 99.77%) 7144182027 ( 99.93%) 736.15
tcp 7590479 ( 78.03%) 6537191082 ( 91.44%) 861.24
http(s) 3368728 ( 34.63%) 4544183017 ( 63.56%) 1348.93
http(c) 1867586 ( 19.20%) 462442084 ( 6.47%) 247.61
squid 397267 ( 4.08%) 139319827 ( 1.95%) 350.70
smtp 228656 ( 2.35%) 47777065 ( 0.67%) 208.95
nntp 1 ( 0.00%) 74 ( 0.00%) 74.00
ftp 97563 ( 1.00%) 78609357 ( 1.10%) 805.73
pop3 5711 ( 0.06%) 1965794 ( 0.03%) 344.21
imap 2295 ( 0.02%) 560106 ( 0.01%) 244.05
telnet 1152 ( 0.01%) 82506 ( 0.00%) 71.62
ssh 37784 ( 0.39%) 8614867 ( 0.12%) 228.00
dns 20346 ( 0.21%) 13737800 ( 0.19%) 675.21
bgp 174 ( 0.00%) 72646 ( 0.00%) 417.51
napster 77 ( 0.00%) 4620 ( 0.00%) 60.00
realaud 20 ( 0.00%) 1657 ( 0.00%) 82.85
rtsp 17 ( 0.00%) 2974 ( 0.00%) 174.94
icecast 129 ( 0.00%) 9094 ( 0.00%) 70.50
other 1562967 ( 16.07%) 1239807234 ( 17.34%) 793.24
udp 1467358 ( 15.08%) 509330616 ( 7.12%) 347.11
dns 812615 ( 8.35%) 185971999 ( 2.60%) 228.86
realaud 9 ( 0.00%) 1489 ( 0.00%) 165.44
halflif 136 ( 0.00%) 25039 ( 0.00%) 184.11
starcra 19 ( 0.00%) 2960 ( 0.00%) 155.79
everque 57 ( 0.00%) 11458 ( 0.00%) 201.02
unreal 8 ( 0.00%) 1142 ( 0.00%) 142.75
quake 11 ( 0.00%) 1272 ( 0.00%) 115.64
cuseeme 8 ( 0.00%) 744 ( 0.00%) 93.00
other 654367 ( 6.73%) 323203604 ( 4.52%) 493.92
icmp 609609 ( 6.27%) 88821363 ( 1.24%) 145.70
ipip 300 ( 0.00%) 36204 ( 0.00%) 120.68
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 27153 ( 0.28%) 7442771 ( 0.10%) 274.10
other 9796 ( 0.10%) 1342611 ( 0.02%) 137.06
frag 45953 ( 0.47%) 48953616 ( 0.68%) 1065.30
ip6 22696 ( 0.23%) 5214506 ( 0.07%) 229.75
tcp6 6417 ( 0.07%) 2382183 ( 0.03%) 371.23
http(s) 199 ( 0.00%) 22610 ( 0.00%) 113.62
http(c) 3270 ( 0.03%) 286658 ( 0.00%) 87.66
smtp 290 ( 0.00%) 119861 ( 0.00%) 413.31
imap 99 ( 0.00%) 46536 ( 0.00%) 470.06
bgp 401 ( 0.00%) 48285 ( 0.00%) 120.41
other 2158 ( 0.02%) 1858233 ( 0.03%) 861.09
udp6 11873 ( 0.12%) 1770674 ( 0.02%) 149.13
dns 10721 ( 0.11%) 1584062 ( 0.02%) 147.75
cuseeme 1 ( 0.00%) 112 ( 0.00%) 112.00
other 1151 ( 0.01%) 186500 ( 0.00%) 162.03
icmp6 3759 ( 0.04%) 496091 ( 0.01%) 131.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 617 ( 0.01%) 561478 ( 0.01%) 910.01
tcpdump file: 200903310815.dump.gz (232.76 MB)