Traffic Trace Info
DumpFile: 200903311745.dump
FileSize: 1618.09MB
Id: 200903311745
StartTime: Tue Mar 31 17:45:00 2009
EndTime: Tue Mar 31 18:00:00 2009
TotalTime: 900.02 seconds
TotalCapSize: 1269.41MB CapLen: 96 bytes
# of packets: 22837164 (13345.21MB)
AvgRate: 124.39Mbps stddev:13.74M
IP flow (unique src/dst pair) Information
# of flows: 1099556 (avg. 20.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.8% 3.1% 2.3% 1.9% 1.6% 1.5% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 566721
Top 10 bandwidth usage (bytes/total in %):
15.8% 10.0% 8.0% 8.0% 7.8% 3.2% 3.2% 2.4% 2.4% 2.0%
# of IPv6 addresses: 2208
Top 10 bandwidth usage (bytes/total in %):
17.5% 17.4% 11.0% 10.5% 8.7% 8.7% 6.7% 5.7% 5.7% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311745.pktlen.png)
detailed numbers
[ 32- 63]: 4779403
[ 64- 127]: 7529862
[ 128- 255]: 861516
[ 256- 511]: 499096
[ 512- 1023]: 552577
[ 1024- 2047]: 8614710
Protocol Breakdown
![[protocol breakdown chart]](200903311745.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22837164 (100.00%) 13993471220 (100.00%) 612.75
ip 22805724 ( 99.86%) 13986180899 ( 99.95%) 613.28
tcp 15739547 ( 68.92%) 12290361153 ( 87.83%) 780.86
http(s) 6721671 ( 29.43%) 9110979332 ( 65.11%) 1355.46
http(c) 4684004 ( 20.51%) 490833708 ( 3.51%) 104.79
squid 536857 ( 2.35%) 338221113 ( 2.42%) 630.00
smtp 395446 ( 1.73%) 140893726 ( 1.01%) 356.29
ftp 511480 ( 2.24%) 499264995 ( 3.57%) 976.12
pop3 13346 ( 0.06%) 11039022 ( 0.08%) 827.14
imap 5809 ( 0.03%) 2756139 ( 0.02%) 474.46
telnet 6069 ( 0.03%) 762528 ( 0.01%) 125.64
ssh 27025 ( 0.12%) 10665559 ( 0.08%) 394.66
dns 15417 ( 0.07%) 2924297 ( 0.02%) 189.68
bgp 177 ( 0.00%) 81121 ( 0.00%) 458.31
napster 6493 ( 0.03%) 9287522 ( 0.07%) 1430.39
realaud 12 ( 0.00%) 864 ( 0.00%) 72.00
rtsp 108672 ( 0.48%) 42164483 ( 0.30%) 388.00
icecast 489 ( 0.00%) 46352 ( 0.00%) 94.79
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 2706563 ( 11.85%) 1630439370 ( 11.65%) 602.40
udp 3009915 ( 13.18%) 1380101030 ( 9.86%) 458.52
dns 1201578 ( 5.26%) 291467615 ( 2.08%) 242.57
realaud 45914 ( 0.20%) 21334477 ( 0.15%) 464.66
halflif 34 ( 0.00%) 3535 ( 0.00%) 103.97
starcra 47 ( 0.00%) 7861 ( 0.00%) 167.26
everque 78 ( 0.00%) 15912 ( 0.00%) 204.00
unreal 17 ( 0.00%) 2686 ( 0.00%) 158.00
quake 40 ( 0.00%) 4774 ( 0.00%) 119.35
cuseeme 5 ( 0.00%) 1010 ( 0.00%) 202.00
other 1762035 ( 7.72%) 1067119485 ( 7.63%) 605.62
icmp 3939610 ( 17.25%) 297349705 ( 2.12%) 75.48
ipip 326 ( 0.00%) 40184 ( 0.00%) 123.26
ipsec 112 ( 0.00%) 17728 ( 0.00%) 158.29
ip6 31587 ( 0.14%) 5253479 ( 0.04%) 166.32
other 84627 ( 0.37%) 13057620 ( 0.09%) 154.30
frag 50379 ( 0.22%) 55360102 ( 0.40%) 1098.87
ip6 31440 ( 0.14%) 7290321 ( 0.05%) 231.88
tcp6 7193 ( 0.03%) 3246029 ( 0.02%) 451.28
http(s) 1029 ( 0.00%) 844705 ( 0.01%) 820.90
http(c) 1937 ( 0.01%) 178511 ( 0.00%) 92.16
smtp 269 ( 0.00%) 145906 ( 0.00%) 542.40
ssh 1610 ( 0.01%) 417020 ( 0.00%) 259.02
dns 4 ( 0.00%) 459 ( 0.00%) 114.75
bgp 378 ( 0.00%) 38812 ( 0.00%) 102.68
other 1966 ( 0.01%) 1620616 ( 0.01%) 824.32
udp6 18258 ( 0.08%) 3038305 ( 0.02%) 166.41
dns 16223 ( 0.07%) 2539765 ( 0.02%) 156.55
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
other 2034 ( 0.01%) 498439 ( 0.00%) 245.05
icmp6 5578 ( 0.02%) 700478 ( 0.01%) 125.58
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 381 ( 0.00%) 301429 ( 0.00%) 791.15
tcpdump file: 200903311745.dump.gz (515.79 MB)