Traffic Trace Info
DumpFile: 200903310845.dump
FileSize: 800.12MB
Id: 200903310845
StartTime: Tue Mar 31 08:45:01 2009
EndTime: Tue Mar 31 09:00:00 2009
TotalTime: 899.40 seconds
TotalCapSize: 628.15MB CapLen: 96 bytes
# of packets: 11269321 (7403.24MB)
AvgRate: 69.02Mbps stddev:11.53M
IP flow (unique src/dst pair) Information
# of flows: 594964 (avg. 18.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.0% 5.1% 3.1% 2.2% 2.0% 1.9% 1.7% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 387642
Top 10 bandwidth usage (bytes/total in %):
17.2% 11.1% 11.1% 7.9% 7.1% 5.1% 5.0% 4.3% 3.3% 3.2%
# of IPv6 addresses: 1634
Top 10 bandwidth usage (bytes/total in %):
71.7% 64.9% 7.7% 7.6% 6.9% 3.5% 3.3% 1.5% 1.3% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310845.pktlen.png)
detailed numbers
[ 32- 63]: 2086979
[ 64- 127]: 3229935
[ 128- 255]: 521254
[ 256- 511]: 345463
[ 512- 1023]: 325247
[ 1024- 2047]: 4760443
Protocol Breakdown
![[protocol breakdown chart]](200903310845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11269321 (100.00%) 7762855722 (100.00%) 688.85
ip 11220962 ( 99.57%) 7744071797 ( 99.76%) 690.14
tcp 8456196 ( 75.04%) 7067019112 ( 91.04%) 835.72
http(s) 3333058 ( 29.58%) 4449008001 ( 57.31%) 1334.81
http(c) 1969253 ( 17.47%) 218729677 ( 2.82%) 111.07
squid 284726 ( 2.53%) 96294659 ( 1.24%) 338.20
smtp 294306 ( 2.61%) 68323072 ( 0.88%) 232.15
ftp 96186 ( 0.85%) 74302414 ( 0.96%) 772.49
pop3 4508 ( 0.04%) 1571583 ( 0.02%) 348.62
imap 4915 ( 0.04%) 3392745 ( 0.04%) 690.28
telnet 1119 ( 0.01%) 77584 ( 0.00%) 69.33
ssh 656250 ( 5.82%) 867911721 ( 11.18%) 1322.53
dns 12492 ( 0.11%) 1333635 ( 0.02%) 106.76
bgp 128 ( 0.00%) 35195 ( 0.00%) 274.96
napster 21 ( 0.00%) 5475 ( 0.00%) 260.71
realaud 27 ( 0.00%) 2493 ( 0.00%) 92.33
rtsp 45 ( 0.00%) 10350 ( 0.00%) 230.00
icecast 124 ( 0.00%) 13853 ( 0.00%) 111.72
hotline 3 ( 0.00%) 198 ( 0.00%) 66.00
other 1799029 ( 15.96%) 1286006097 ( 16.57%) 714.83
udp 1515971 ( 13.45%) 524054492 ( 6.75%) 345.69
dns 882527 ( 7.83%) 208225295 ( 2.68%) 235.94
realaud 3 ( 0.00%) 393 ( 0.00%) 131.00
halflif 129 ( 0.00%) 21473 ( 0.00%) 166.46
starcra 21 ( 0.00%) 3653 ( 0.00%) 173.95
everque 58 ( 0.00%) 12121 ( 0.00%) 208.98
unreal 14 ( 0.00%) 2135 ( 0.00%) 152.50
quake 17 ( 0.00%) 1546 ( 0.00%) 90.94
cuseeme 2 ( 0.00%) 178 ( 0.00%) 89.00
other 633107 ( 5.62%) 315703663 ( 4.07%) 498.66
icmp 1188167 ( 10.54%) 109718943 ( 1.41%) 92.34
ipip 313 ( 0.00%) 38672 ( 0.00%) 123.55
ipsec 118 ( 0.00%) 18812 ( 0.00%) 159.42
ip6 50346 ( 0.45%) 41913944 ( 0.54%) 832.52
other 9851 ( 0.09%) 1307822 ( 0.02%) 132.76
frag 40523 ( 0.36%) 44409742 ( 0.57%) 1095.91
ip6 48359 ( 0.43%) 18783925 ( 0.24%) 388.43
tcp6 30701 ( 0.27%) 15792436 ( 0.20%) 514.39
http(s) 296 ( 0.00%) 75423 ( 0.00%) 254.81
http(c) 18612 ( 0.17%) 1617177 ( 0.02%) 86.89
smtp 916 ( 0.01%) 376097 ( 0.00%) 410.59
imap 117 ( 0.00%) 98762 ( 0.00%) 844.12
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
bgp 371 ( 0.00%) 31612 ( 0.00%) 85.21
other 10387 ( 0.09%) 13593193 ( 0.18%) 1308.67
udp6 12922 ( 0.11%) 1942922 ( 0.03%) 150.36
dns 11726 ( 0.10%) 1754593 ( 0.02%) 149.63
other 1196 ( 0.01%) 188329 ( 0.00%) 157.47
icmp6 4207 ( 0.04%) 578897 ( 0.01%) 137.60
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 498 ( 0.00%) 465454 ( 0.01%) 934.65
tcpdump file: 200903310845.dump.gz (260.74 MB)