Traffic Trace Info
DumpFile: 200903311015.dump
FileSize: 999.91MB
Id: 200903311015
StartTime: Tue Mar 31 10:15:00 2009
EndTime: Tue Mar 31 10:30:01 2009
TotalTime: 900.16 seconds
TotalCapSize: 784.31MB CapLen: 96 bytes
# of packets: 14129148 (9600.63MB)
AvgRate: 89.47Mbps stddev:14.63M
IP flow (unique src/dst pair) Information
# of flows: 671724 (avg. 21.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.0% 2.2% 1.8% 1.7% 1.6% 1.3% 1.3% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 435043
Top 10 bandwidth usage (bytes/total in %):
17.8% 11.1% 8.8% 7.7% 6.8% 6.5% 4.1% 3.1% 2.4% 2.2%
# of IPv6 addresses: 2628
Top 10 bandwidth usage (bytes/total in %):
83.3% 83.3% 3.1% 3.1% 2.7% 1.6% 1.6% 1.6% 1.4% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311015.pktlen.png)
detailed numbers
[ 32- 63]: 3321512
[ 64- 127]: 3277216
[ 128- 255]: 532171
[ 256- 511]: 380853
[ 512- 1023]: 387145
[ 1024- 2047]: 6230251
Protocol Breakdown
![[protocol breakdown chart]](200903311015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14129148 (100.00%) 10066992537 (100.00%) 712.50
ip 14075041 ( 99.62%) 10025724169 ( 99.59%) 712.31
tcp 11694588 ( 82.77%) 9429657748 ( 93.67%) 806.33
http(s) 4462224 ( 31.58%) 5936667059 ( 58.97%) 1330.43
http(c) 2906551 ( 20.57%) 275888246 ( 2.74%) 94.92
squid 235468 ( 1.67%) 87695834 ( 0.87%) 372.43
smtp 352897 ( 2.50%) 74266748 ( 0.74%) 210.45
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 105847 ( 0.75%) 85025098 ( 0.84%) 803.28
pop3 9379 ( 0.07%) 3220338 ( 0.03%) 343.36
imap 2983 ( 0.02%) 567499 ( 0.01%) 190.24
telnet 2159 ( 0.02%) 306650 ( 0.00%) 142.03
ssh 230055 ( 1.63%) 38806051 ( 0.39%) 168.68
dns 30028 ( 0.21%) 25073609 ( 0.25%) 835.01
bgp 131 ( 0.00%) 34640 ( 0.00%) 264.43
napster 19 ( 0.00%) 1915 ( 0.00%) 100.79
realaud 178 ( 0.00%) 11037 ( 0.00%) 62.01
rtsp 102118 ( 0.72%) 77925372 ( 0.77%) 763.09
icecast 442 ( 0.00%) 32270 ( 0.00%) 73.01
hotline 28 ( 0.00%) 1716 ( 0.00%) 61.29
other 3253908 ( 23.03%) 2824123282 ( 28.05%) 867.92
udp 1588093 ( 11.24%) 527995961 ( 5.24%) 332.47
dns 932828 ( 6.60%) 232720860 ( 2.31%) 249.48
realaud 13 ( 0.00%) 1346 ( 0.00%) 103.54
halflif 120 ( 0.00%) 24886 ( 0.00%) 207.38
starcra 23 ( 0.00%) 3625 ( 0.00%) 157.61
everque 62 ( 0.00%) 12847 ( 0.00%) 207.21
unreal 9 ( 0.00%) 928 ( 0.00%) 103.11
quake 13 ( 0.00%) 1007 ( 0.00%) 77.46
cuseeme 3 ( 0.00%) 310 ( 0.00%) 103.33
other 654929 ( 4.64%) 295154167 ( 2.93%) 450.67
icmp 754642 ( 5.34%) 60368433 ( 0.60%) 80.00
ipip 317 ( 0.00%) 38506 ( 0.00%) 121.47
ipsec 163 ( 0.00%) 25946 ( 0.00%) 159.18
ip6 27304 ( 0.19%) 6231799 ( 0.06%) 228.24
other 9934 ( 0.07%) 1405776 ( 0.01%) 141.51
frag 39428 ( 0.28%) 42954439 ( 0.43%) 1089.44
ip6 54107 ( 0.38%) 41268368 ( 0.41%) 762.72
tcp6 32447 ( 0.23%) 36998396 ( 0.37%) 1140.27
http(s) 802 ( 0.01%) 865923 ( 0.01%) 1079.70
http(c) 2392 ( 0.02%) 209369 ( 0.00%) 87.53
smtp 308 ( 0.00%) 155191 ( 0.00%) 503.87
ssh 15 ( 0.00%) 4474 ( 0.00%) 298.27
bgp 365 ( 0.00%) 30802 ( 0.00%) 84.39
other 28565 ( 0.20%) 35732637 ( 0.35%) 1250.92
udp6 16332 ( 0.12%) 2768433 ( 0.03%) 169.51
dns 13302 ( 0.09%) 2012558 ( 0.02%) 151.30
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 3029 ( 0.02%) 755768 ( 0.01%) 249.51
icmp6 4351 ( 0.03%) 605798 ( 0.01%) 139.23
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 947 ( 0.01%) 891661 ( 0.01%) 941.56
tcpdump file: 200903311015.dump.gz (336.27 MB)