Traffic Trace Info
DumpFile: 200903310915.dump
FileSize: 755.20MB
Id: 200903310915
StartTime: Tue Mar 31 09:15:00 2009
EndTime: Tue Mar 31 09:30:00 2009
TotalTime: 900.22 seconds
TotalCapSize: 589.20MB CapLen: 96 bytes
# of packets: 10878310 (7664.30MB)
AvgRate: 71.42Mbps stddev:10.23M
IP flow (unique src/dst pair) Information
# of flows: 640699 (avg. 16.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.4% 3.4% 3.1% 2.6% 2.1% 1.4% 1.4% 1.4% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 413435
Top 10 bandwidth usage (bytes/total in %):
13.4% 10.4% 9.0% 8.2% 6.9% 4.9% 4.1% 3.4% 3.4% 3.4%
# of IPv6 addresses: 2562
Top 10 bandwidth usage (bytes/total in %):
22.3% 21.9% 15.5% 11.0% 10.5% 5.0% 4.5% 3.7% 3.3% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903310915.pktlen.png)
detailed numbers
[ 32- 63]: 2267158
[ 64- 127]: 2355454
[ 128- 255]: 559417
[ 256- 511]: 353747
[ 512- 1023]: 395254
[ 1024- 2047]: 4947280
Protocol Breakdown
![[protocol breakdown chart]](200903310915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10878310 (100.00%) 8036603685 (100.00%) 738.77
ip 10850271 ( 99.74%) 8030769576 ( 99.93%) 740.14
tcp 8730380 ( 80.25%) 7404434899 ( 92.13%) 848.12
http(s) 3364505 ( 30.93%) 4416933371 ( 54.96%) 1312.80
http(c) 1940069 ( 17.83%) 206311491 ( 2.57%) 106.34
squid 187030 ( 1.72%) 48149627 ( 0.60%) 257.44
smtp 338849 ( 3.11%) 94973708 ( 1.18%) 280.28
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 95662 ( 0.88%) 75588880 ( 0.94%) 790.17
pop3 4654 ( 0.04%) 1838619 ( 0.02%) 395.06
imap 1869 ( 0.02%) 526137 ( 0.01%) 281.51
telnet 925 ( 0.01%) 80741 ( 0.00%) 87.29
ssh 819401 ( 7.53%) 1084936104 ( 13.50%) 1324.06
dns 11823 ( 0.11%) 1383316 ( 0.02%) 117.00
bgp 126 ( 0.00%) 33858 ( 0.00%) 268.71
napster 35 ( 0.00%) 2104 ( 0.00%) 60.11
realaud 11 ( 0.00%) 814 ( 0.00%) 74.00
rtsp 30 ( 0.00%) 7500 ( 0.00%) 250.00
icecast 174 ( 0.00%) 14670 ( 0.00%) 84.31
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 1965204 ( 18.07%) 1473653173 ( 18.34%) 749.87
udp 1600463 ( 14.71%) 575318967 ( 7.16%) 359.47
dns 887511 ( 8.16%) 224648804 ( 2.80%) 253.12
realaud 11 ( 0.00%) 1119 ( 0.00%) 101.73
halflif 153 ( 0.00%) 24846 ( 0.00%) 162.39
starcra 25 ( 0.00%) 3284 ( 0.00%) 131.36
everque 50 ( 0.00%) 10477 ( 0.00%) 209.54
unreal 13 ( 0.00%) 1875 ( 0.00%) 144.23
quake 15 ( 0.00%) 1661 ( 0.00%) 110.73
cuseeme 6 ( 0.00%) 561 ( 0.00%) 93.50
other 707646 ( 6.51%) 350240881 ( 4.36%) 494.94
icmp 478176 ( 4.40%) 41607013 ( 0.52%) 87.01
ipip 321 ( 0.00%) 39966 ( 0.00%) 124.50
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 30908 ( 0.28%) 7996415 ( 0.10%) 258.72
other 9913 ( 0.09%) 1354936 ( 0.02%) 136.68
frag 65036 ( 0.60%) 63423068 ( 0.79%) 975.20
ip6 28039 ( 0.26%) 5834109 ( 0.07%) 208.07
tcp6 8133 ( 0.07%) 1954186 ( 0.02%) 240.28
http(s) 200 ( 0.00%) 22505 ( 0.00%) 112.53
http(c) 4846 ( 0.04%) 407635 ( 0.01%) 84.12
smtp 43 ( 0.00%) 10530 ( 0.00%) 244.88
ftp 18 ( 0.00%) 1726 ( 0.00%) 95.89
imap 105 ( 0.00%) 28564 ( 0.00%) 272.04
bgp 368 ( 0.00%) 31162 ( 0.00%) 84.68
other 2553 ( 0.02%) 1452064 ( 0.02%) 568.77
udp6 15374 ( 0.14%) 2514926 ( 0.03%) 163.58
dns 12316 ( 0.11%) 1866955 ( 0.02%) 151.59
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
other 3057 ( 0.03%) 647863 ( 0.01%) 211.93
icmp6 3573 ( 0.03%) 487586 ( 0.01%) 136.46
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 929 ( 0.01%) 873331 ( 0.01%) 940.08
tcpdump file: 200903310915.dump.gz (261.26 MB)