Traffic Trace Info
DumpFile: 200903311845.dump
FileSize: 1545.85MB
Id: 200903311845
StartTime: Tue Mar 31 18:45:00 2009
EndTime: Tue Mar 31 19:00:01 2009
TotalTime: 900.55 seconds
TotalCapSize: 1207.47MB CapLen: 96 bytes
# of packets: 22162297 (13771.73MB)
AvgRate: 128.30Mbps stddev:21.46M
IP flow (unique src/dst pair) Information
# of flows: 848349 (avg. 26.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.2% 2.3% 1.8% 1.7% 1.4% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 546820
Top 10 bandwidth usage (bytes/total in %):
11.2% 8.9% 6.5% 6.4% 5.2% 5.2% 3.5% 3.5% 3.3% 2.7%
# of IPv6 addresses: 2308
Top 10 bandwidth usage (bytes/total in %):
24.2% 16.0% 15.9% 11.6% 11.5% 11.4% 8.8% 4.9% 3.9% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311845.pktlen.png)
detailed numbers
[ 32- 63]: 4092982
[ 64- 127]: 6967568
[ 128- 255]: 1072673
[ 256- 511]: 487943
[ 512- 1023]: 501364
[ 1024- 2047]: 9039767
Protocol Breakdown
![[protocol breakdown chart]](200903311845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22162297 (100.00%) 14440700423 (100.00%) 651.59
ip 22133103 ( 99.87%) 14432731586 ( 99.94%) 652.09
tcp 14009741 ( 63.21%) 11499569497 ( 79.63%) 820.83
http(s) 6439217 ( 29.05%) 8614179377 ( 59.65%) 1337.77
http(c) 3475749 ( 15.68%) 312549950 ( 2.16%) 89.92
squid 588765 ( 2.66%) 445576874 ( 3.09%) 756.80
smtp 309563 ( 1.40%) 79325662 ( 0.55%) 256.25
ftp 535048 ( 2.41%) 524203703 ( 3.63%) 979.73
pop3 178305 ( 0.80%) 248368183 ( 1.72%) 1392.94
imap 22584 ( 0.10%) 27739463 ( 0.19%) 1228.28
telnet 4988 ( 0.02%) 618595 ( 0.00%) 124.02
ssh 121593 ( 0.55%) 13207774 ( 0.09%) 108.62
dns 15850 ( 0.07%) 1657643 ( 0.01%) 104.58
bgp 153 ( 0.00%) 53073 ( 0.00%) 346.88
napster 733 ( 0.00%) 520245 ( 0.00%) 709.75
realaud 19 ( 0.00%) 1346 ( 0.00%) 70.84
rtsp 71727 ( 0.32%) 4665286 ( 0.03%) 65.04
icecast 782 ( 0.00%) 64454 ( 0.00%) 82.42
hotline 13 ( 0.00%) 1201 ( 0.00%) 92.38
other 2244650 ( 10.13%) 1226836548 ( 8.50%) 546.56
udp 4494454 ( 20.28%) 2647456450 ( 18.33%) 589.05
dns 1421922 ( 6.42%) 293936942 ( 2.04%) 206.72
realaud 2039 ( 0.01%) 124609 ( 0.00%) 61.11
halflif 403 ( 0.00%) 27140 ( 0.00%) 67.34
starcra 53 ( 0.00%) 10563 ( 0.00%) 199.30
everque 120 ( 0.00%) 20876 ( 0.00%) 173.97
unreal 26 ( 0.00%) 3858 ( 0.00%) 148.38
quake 27 ( 0.00%) 4453 ( 0.00%) 164.93
cuseeme 4 ( 0.00%) 429 ( 0.00%) 107.25
other 3069674 ( 13.85%) 2353174221 ( 16.30%) 766.59
icmp 3526038 ( 15.91%) 268640004 ( 1.86%) 76.19
ipip 342 ( 0.00%) 41225 ( 0.00%) 120.54
ipsec 112 ( 0.00%) 17728 ( 0.00%) 158.29
ip6 27377 ( 0.12%) 4914596 ( 0.03%) 179.52
other 75039 ( 0.34%) 12092086 ( 0.08%) 161.14
frag 49083 ( 0.22%) 53949419 ( 0.37%) 1099.15
ip6 29194 ( 0.13%) 7968837 ( 0.06%) 272.96
tcp6 6291 ( 0.03%) 4037534 ( 0.03%) 641.80
http(s) 1581 ( 0.01%) 2174617 ( 0.02%) 1375.47
http(c) 1908 ( 0.01%) 175014 ( 0.00%) 91.73
smtp 814 ( 0.00%) 296641 ( 0.00%) 364.42
ssh 8 ( 0.00%) 688 ( 0.00%) 86.00
dns 5 ( 0.00%) 545 ( 0.00%) 109.00
bgp 361 ( 0.00%) 29996 ( 0.00%) 83.09
other 1614 ( 0.01%) 1360033 ( 0.01%) 842.65
udp6 17494 ( 0.08%) 2931022 ( 0.02%) 167.54
dns 15169 ( 0.07%) 2393345 ( 0.02%) 157.78
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2324 ( 0.01%) 537570 ( 0.00%) 231.31
icmp6 4925 ( 0.02%) 606542 ( 0.00%) 123.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 454 ( 0.00%) 389659 ( 0.00%) 858.28
tcpdump file: 200903311845.dump.gz (493.17 MB)