Traffic Trace Info
DumpFile: 200903310830.dump
FileSize: 679.80MB
Id: 200903310830
StartTime: Tue Mar 31 08:30:01 2009
EndTime: Tue Mar 31 08:45:01 2009
TotalTime: 900.05 seconds
TotalCapSize: 531.62MB CapLen: 96 bytes
# of packets: 9710991 (6548.59MB)
AvgRate: 61.03Mbps stddev:11.89M
IP flow (unique src/dst pair) Information
# of flows: 618243 (avg. 15.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 3.7% 3.3% 3.0% 2.4% 1.7% 1.6% 1.5% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 409251
Top 10 bandwidth usage (bytes/total in %):
15.2% 9.1% 7.3% 6.0% 5.5% 4.5% 3.8% 3.7% 3.7% 3.3%
# of IPv6 addresses: 1882
Top 10 bandwidth usage (bytes/total in %):
23.2% 23.2% 11.3% 9.0% 8.7% 8.4% 6.1% 6.1% 5.0% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310830.pktlen.png)
detailed numbers
[ 32- 63]: 2063987
[ 64- 127]: 2318360
[ 128- 255]: 468716
[ 256- 511]: 339724
[ 512- 1023]: 253376
[ 1024- 2047]: 4266828
Protocol Breakdown
![[protocol breakdown chart]](200903310830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9710991 (100.00%) 6866696555 (100.00%) 707.11
ip 9686783 ( 99.75%) 6861194193 ( 99.92%) 708.30
tcp 7555687 ( 77.81%) 6169535657 ( 89.85%) 816.54
http(s) 3188665 ( 32.84%) 4259806458 ( 62.04%) 1335.92
http(c) 2011516 ( 20.71%) 387573262 ( 5.64%) 192.68
squid 317502 ( 3.27%) 120552562 ( 1.76%) 379.69
smtp 245216 ( 2.53%) 51739998 ( 0.75%) 211.00
ftp 92499 ( 0.95%) 75544931 ( 1.10%) 816.71
pop3 5077 ( 0.05%) 2150385 ( 0.03%) 423.55
imap 9916 ( 0.10%) 8254955 ( 0.12%) 832.49
telnet 1039 ( 0.01%) 72555 ( 0.00%) 69.83
ssh 224877 ( 2.32%) 266715078 ( 3.88%) 1186.05
dns 13992 ( 0.14%) 3499913 ( 0.05%) 250.14
bgp 170 ( 0.00%) 67365 ( 0.00%) 396.26
napster 73 ( 0.00%) 4660 ( 0.00%) 63.84
realaud 32 ( 0.00%) 3431 ( 0.00%) 107.22
rtsp 43 ( 0.00%) 10371 ( 0.00%) 241.19
icecast 103 ( 0.00%) 6903 ( 0.00%) 67.02
other 1444961 ( 14.88%) 993532470 ( 14.47%) 687.58
udp 1566839 ( 16.13%) 605329130 ( 8.82%) 386.34
dns 841518 ( 8.67%) 193117018 ( 2.81%) 229.49
realaud 17 ( 0.00%) 2042 ( 0.00%) 120.12
halflif 130 ( 0.00%) 21333 ( 0.00%) 164.10
starcra 15 ( 0.00%) 2569 ( 0.00%) 171.27
everque 51 ( 0.00%) 12742 ( 0.00%) 249.84
unreal 8 ( 0.00%) 974 ( 0.00%) 121.75
quake 12 ( 0.00%) 1852 ( 0.00%) 154.33
cuseeme 6 ( 0.00%) 791 ( 0.00%) 131.83
other 724980 ( 7.47%) 412086764 ( 6.00%) 568.41
icmp 527907 ( 5.44%) 79196741 ( 1.15%) 150.02
ipip 330 ( 0.00%) 40332 ( 0.00%) 122.22
ipsec 112 ( 0.00%) 17624 ( 0.00%) 157.36
ip6 26126 ( 0.27%) 5722588 ( 0.08%) 219.04
other 9782 ( 0.10%) 1352121 ( 0.02%) 138.23
frag 42632 ( 0.44%) 46059653 ( 0.67%) 1080.40
ip6 24208 ( 0.25%) 5502362 ( 0.08%) 227.30
tcp6 6746 ( 0.07%) 2602209 ( 0.04%) 385.74
http(s) 225 ( 0.00%) 26514 ( 0.00%) 117.84
http(c) 2597 ( 0.03%) 230510 ( 0.00%) 88.76
smtp 1126 ( 0.01%) 405706 ( 0.01%) 360.31
imap 32 ( 0.00%) 25696 ( 0.00%) 803.00
bgp 392 ( 0.00%) 47001 ( 0.00%) 119.90
other 2374 ( 0.02%) 1866782 ( 0.03%) 786.34
udp6 13562 ( 0.14%) 2280135 ( 0.03%) 168.13
dns 12014 ( 0.12%) 1876481 ( 0.03%) 156.19
realaud 3 ( 0.00%) 333 ( 0.00%) 111.00
everque 1 ( 0.00%) 576 ( 0.00%) 576.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1543 ( 0.02%) 402637 ( 0.01%) 260.94
icmp6 3762 ( 0.04%) 524661 ( 0.01%) 139.46
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 108 ( 0.00%) 91277 ( 0.00%) 845.16
tcpdump file: 200903310830.dump.gz (233.94 MB)