Traffic Trace Info
DumpFile: 200903311945.dump
FileSize: 1162.33MB
Id: 200903311945
StartTime: Tue Mar 31 19:45:00 2009
EndTime: Tue Mar 31 20:00:00 2009
TotalTime: 899.98 seconds
TotalCapSize: 903.54MB CapLen: 96 bytes
# of packets: 16945854 (11263.11MB)
AvgRate: 104.99Mbps stddev:13.93M
IP flow (unique src/dst pair) Information
# of flows: 804219 (avg. 21.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.5% 1.7% 1.4% 1.3% 1.2% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 525733
Top 10 bandwidth usage (bytes/total in %):
13.5% 9.1% 7.1% 5.8% 4.5% 3.7% 3.2% 2.6% 2.6% 2.5%
# of IPv6 addresses: 2239
Top 10 bandwidth usage (bytes/total in %):
22.8% 22.8% 17.5% 17.3% 14.1% 9.3% 4.9% 4.7% 3.4% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903311945.pktlen.png)
detailed numbers
[ 32- 63]: 3150425
[ 64- 127]: 4211540
[ 128- 255]: 1173400
[ 256- 511]: 493759
[ 512- 1023]: 471238
[ 1024- 2047]: 7445492
Protocol Breakdown
![[protocol breakdown chart]](200903311945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16945854 (100.00%) 11810224842 (100.00%) 696.94
ip 16897176 ( 99.71%) 11802925554 ( 99.94%) 698.51
tcp 11876580 ( 70.09%) 9859785329 ( 83.49%) 830.19
http(s) 5623482 ( 33.19%) 7405462929 ( 62.70%) 1316.88
http(c) 2916983 ( 17.21%) 487285311 ( 4.13%) 167.05
squid 618529 ( 3.65%) 463339623 ( 3.92%) 749.10
smtp 423131 ( 2.50%) 108896508 ( 0.92%) 257.36
ftp 151314 ( 0.89%) 132041965 ( 1.12%) 872.64
pop3 8958 ( 0.05%) 5803412 ( 0.05%) 647.85
imap 6196 ( 0.04%) 1737205 ( 0.01%) 280.38
telnet 3121 ( 0.02%) 465962 ( 0.00%) 149.30
ssh 61187 ( 0.36%) 5402805 ( 0.05%) 88.30
dns 17009 ( 0.10%) 3008528 ( 0.03%) 176.88
bgp 180 ( 0.00%) 80893 ( 0.00%) 449.41
napster 3 ( 0.00%) 182 ( 0.00%) 60.67
realaud 116 ( 0.00%) 8008 ( 0.00%) 69.03
rtsp 3127 ( 0.02%) 270530 ( 0.00%) 86.51
icecast 662 ( 0.00%) 415596 ( 0.00%) 627.79
hotline 514 ( 0.00%) 31327 ( 0.00%) 60.95
other 2042063 ( 12.05%) 1245534245 ( 10.55%) 609.94
udp 4004083 ( 23.63%) 1797894978 ( 15.22%) 449.02
dns 1733208 ( 10.23%) 316287046 ( 2.68%) 182.49
realaud 1661 ( 0.01%) 105787 ( 0.00%) 63.69
halflif 31 ( 0.00%) 3209 ( 0.00%) 103.52
starcra 50 ( 0.00%) 9363 ( 0.00%) 187.26
everque 70 ( 0.00%) 13429 ( 0.00%) 191.84
unreal 16 ( 0.00%) 2445 ( 0.00%) 152.81
quake 23 ( 0.00%) 1891 ( 0.00%) 82.22
cuseeme 3 ( 0.00%) 244 ( 0.00%) 81.33
other 2268852 ( 13.39%) 1481342097 ( 12.54%) 652.90
icmp 880020 ( 5.19%) 125138622 ( 1.06%) 142.20
ipip 344 ( 0.00%) 41402 ( 0.00%) 120.35
ipsec 419 ( 0.00%) 91922 ( 0.00%) 219.38
ip6 27074 ( 0.16%) 4545474 ( 0.04%) 167.89
other 108656 ( 0.64%) 15427827 ( 0.13%) 141.99
frag 50256 ( 0.30%) 55076184 ( 0.47%) 1095.91
ip6 48678 ( 0.29%) 7299288 ( 0.06%) 149.95
tcp6 25856 ( 0.15%) 3323782 ( 0.03%) 128.55
http(s) 15 ( 0.00%) 12868 ( 0.00%) 857.87
http(c) 23476 ( 0.14%) 1848524 ( 0.02%) 78.74
smtp 177 ( 0.00%) 57689 ( 0.00%) 325.93
ftp 22 ( 0.00%) 2107 ( 0.00%) 95.77
dns 9 ( 0.00%) 1005 ( 0.00%) 111.67
bgp 368 ( 0.00%) 30921 ( 0.00%) 84.02
other 1789 ( 0.01%) 1370668 ( 0.01%) 766.16
udp6 16858 ( 0.10%) 2812768 ( 0.02%) 166.85
dns 14570 ( 0.09%) 2264199 ( 0.02%) 155.40
quake 2 ( 0.00%) 669 ( 0.00%) 334.50
other 2286 ( 0.01%) 547900 ( 0.00%) 239.68
icmp6 5379 ( 0.03%) 666471 ( 0.01%) 123.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 555 ( 0.00%) 492187 ( 0.00%) 886.82
tcpdump file: 200903311945.dump.gz (416.13 MB)