Traffic Trace Info
DumpFile: 200903311930.dump
FileSize: 1253.20MB
Id: 200903311930
StartTime: Tue Mar 31 19:30:01 2009
EndTime: Tue Mar 31 19:45:00 2009
TotalTime: 899.15 seconds
TotalCapSize: 974.41MB CapLen: 96 bytes
# of packets: 18259226 (12337.10MB)
AvgRate: 115.12Mbps stddev:15.29M
IP flow (unique src/dst pair) Information
# of flows: 784417 (avg. 23.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 2.9% 1.9% 1.8% 1.8% 1.5% 1.3% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 513942
Top 10 bandwidth usage (bytes/total in %):
11.1% 7.4% 7.4% 7.2% 6.9% 6.7% 3.4% 3.4% 3.0% 3.0%
# of IPv6 addresses: 1971
Top 10 bandwidth usage (bytes/total in %):
22.0% 22.0% 17.9% 17.9% 11.6% 9.2% 5.2% 4.3% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311930.pktlen.png)
detailed numbers
[ 32- 63]: 3376014
[ 64- 127]: 4638476
[ 128- 255]: 1182257
[ 256- 511]: 491981
[ 512- 1023]: 447325
[ 1024- 2047]: 8123173
Protocol Breakdown
![[protocol breakdown chart]](200903311930.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18259226 (100.00%) 12936385657 (100.00%) 708.48
ip 18210768 ( 99.73%) 12929041584 ( 99.94%) 709.97
tcp 12628744 ( 69.16%) 10405851191 ( 80.44%) 823.98
http(s) 5774715 ( 31.63%) 7659073082 ( 59.21%) 1326.31
http(c) 3237283 ( 17.73%) 437559584 ( 3.38%) 135.16
squid 717372 ( 3.93%) 542721258 ( 4.20%) 756.54
smtp 394835 ( 2.16%) 114130972 ( 0.88%) 289.06
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 367000 ( 2.01%) 353352779 ( 2.73%) 962.81
pop3 7802 ( 0.04%) 4533221 ( 0.04%) 581.03
imap 5569 ( 0.03%) 2458400 ( 0.02%) 441.44
telnet 12554 ( 0.07%) 2935971 ( 0.02%) 233.87
ssh 16737 ( 0.09%) 2272837 ( 0.02%) 135.80
dns 17256 ( 0.09%) 5024665 ( 0.04%) 291.18
bgp 156 ( 0.00%) 61688 ( 0.00%) 395.44
napster 9 ( 0.00%) 880 ( 0.00%) 97.78
realaud 22 ( 0.00%) 1869 ( 0.00%) 84.95
rtsp 17637 ( 0.10%) 1295788 ( 0.01%) 73.47
icecast 341 ( 0.00%) 23345 ( 0.00%) 68.46
hotline 3 ( 0.00%) 198 ( 0.00%) 66.00
other 2059447 ( 11.28%) 1280404290 ( 9.90%) 621.72
udp 4455294 ( 24.40%) 2368510495 ( 18.31%) 531.62
dns 1672747 ( 9.16%) 302988018 ( 2.34%) 181.13
realaud 1862 ( 0.01%) 112971 ( 0.00%) 60.67
halflif 27 ( 0.00%) 2498 ( 0.00%) 92.52
starcra 47 ( 0.00%) 9255 ( 0.00%) 196.91
everque 81 ( 0.00%) 18319 ( 0.00%) 226.16
unreal 14 ( 0.00%) 2763 ( 0.00%) 197.36
quake 35 ( 0.00%) 3480 ( 0.00%) 99.43
cuseeme 3 ( 0.00%) 244 ( 0.00%) 81.33
other 2780299 ( 15.23%) 2065215843 ( 15.96%) 742.80
icmp 972562 ( 5.33%) 132113449 ( 1.02%) 135.84
ipip 286 ( 0.00%) 35204 ( 0.00%) 123.09
ipsec 1074 ( 0.01%) 218988 ( 0.00%) 203.90
ip6 25099 ( 0.14%) 4851661 ( 0.04%) 193.30
other 127709 ( 0.70%) 17460596 ( 0.13%) 136.72
frag 48013 ( 0.26%) 52700782 ( 0.41%) 1097.64
ip6 48458 ( 0.27%) 7344073 ( 0.06%) 151.56
tcp6 27022 ( 0.15%) 3657406 ( 0.03%) 135.35
http(s) 122 ( 0.00%) 162416 ( 0.00%) 1331.28
http(c) 23764 ( 0.13%) 1874893 ( 0.01%) 78.90
smtp 888 ( 0.00%) 167213 ( 0.00%) 188.30
ssh 4 ( 0.00%) 344 ( 0.00%) 86.00
bgp 368 ( 0.00%) 30857 ( 0.00%) 83.85
other 1876 ( 0.01%) 1421683 ( 0.01%) 757.83
udp6 16184 ( 0.09%) 2526866 ( 0.02%) 156.13
dns 14433 ( 0.08%) 2256582 ( 0.02%) 156.35
starcra 2 ( 0.00%) 330 ( 0.00%) 165.00
quake 1 ( 0.00%) 99 ( 0.00%) 99.00
other 1748 ( 0.01%) 269855 ( 0.00%) 154.38
icmp6 4561 ( 0.02%) 565057 ( 0.00%) 123.89
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 660 ( 0.00%) 590528 ( 0.00%) 894.74
tcpdump file: 200903311930.dump.gz (437.35 MB)