Traffic Trace Info
DumpFile: 200903312000.dump
FileSize: 1205.11MB
Id: 200903312000
StartTime: Tue Mar 31 20:00:00 2009
EndTime: Tue Mar 31 20:15:00 2009
TotalTime: 900.29 seconds
TotalCapSize: 939.55MB CapLen: 96 bytes
# of packets: 17393601 (11817.00MB)
AvgRate: 110.09Mbps stddev:17.39M
IP flow (unique src/dst pair) Information
# of flows: 782586 (avg. 22.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.1% 2.8% 1.7% 1.7% 1.3% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 505762
Top 10 bandwidth usage (bytes/total in %):
11.2% 10.0% 7.6% 7.6% 4.2% 4.0% 3.3% 3.1% 3.1% 3.1%
# of IPv6 addresses: 2077
Top 10 bandwidth usage (bytes/total in %):
26.8% 26.8% 21.5% 12.6% 12.6% 11.1% 11.0% 6.5% 6.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903312000.pktlen.png)
detailed numbers
[ 32- 63]: 3064901
[ 64- 127]: 4515514
[ 128- 255]: 1150387
[ 256- 511]: 453228
[ 512- 1023]: 374492
[ 1024- 2047]: 7835079
Protocol Breakdown
![[protocol breakdown chart]](200903312000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17393601 (100.00%) 12391027570 (100.00%) 712.39
ip 17301583 ( 99.47%) 12379250860 ( 99.90%) 715.50
tcp 12554234 ( 72.18%) 10921618502 ( 88.14%) 869.95
http(s) 5602344 ( 32.21%) 7513817272 ( 60.64%) 1341.19
http(c) 2604802 ( 14.98%) 262595058 ( 2.12%) 100.81
squid 667190 ( 3.84%) 523941800 ( 4.23%) 785.30
smtp 467763 ( 2.69%) 141646407 ( 1.14%) 302.82
ftp 621726 ( 3.57%) 611500813 ( 4.94%) 983.55
pop3 9562 ( 0.05%) 6645666 ( 0.05%) 695.01
imap 30409 ( 0.17%) 31987898 ( 0.26%) 1051.92
telnet 2811 ( 0.02%) 388896 ( 0.00%) 138.35
ssh 44435 ( 0.26%) 42144395 ( 0.34%) 948.45
dns 20220 ( 0.12%) 6923749 ( 0.06%) 342.42
bgp 157 ( 0.00%) 62137 ( 0.00%) 395.78
napster 143 ( 0.00%) 11339 ( 0.00%) 79.29
realaud 70 ( 0.00%) 13279 ( 0.00%) 189.70
rtsp 173 ( 0.00%) 42687 ( 0.00%) 246.75
icecast 596 ( 0.00%) 164388 ( 0.00%) 275.82
hotline 223 ( 0.00%) 13380 ( 0.00%) 60.00
other 2481594 ( 14.27%) 1779717520 ( 14.36%) 717.17
udp 3622952 ( 20.83%) 1305203272 ( 10.53%) 360.26
dns 1846968 ( 10.62%) 326862391 ( 2.64%) 176.97
realaud 1281 ( 0.01%) 77911 ( 0.00%) 60.82
halflif 33 ( 0.00%) 3057 ( 0.00%) 92.64
starcra 26 ( 0.00%) 5045 ( 0.00%) 194.04
everque 97 ( 0.00%) 17700 ( 0.00%) 182.47
unreal 6 ( 0.00%) 885 ( 0.00%) 147.50
quake 30 ( 0.00%) 3614 ( 0.00%) 120.47
cuseeme 4 ( 0.00%) 364 ( 0.00%) 91.00
other 1774289 ( 10.20%) 978046211 ( 7.89%) 551.23
icmp 1016547 ( 5.84%) 136020833 ( 1.10%) 133.81
ipip 292 ( 0.00%) 36184 ( 0.00%) 123.92
ipsec 178 ( 0.00%) 26852 ( 0.00%) 150.85
ip6 24239 ( 0.14%) 4705565 ( 0.04%) 194.13
other 83141 ( 0.48%) 11639652 ( 0.09%) 140.00
frag 55554 ( 0.32%) 60677110 ( 0.49%) 1092.22
ip6 92018 ( 0.53%) 11776710 ( 0.10%) 127.98
tcp6 68173 ( 0.39%) 7770867 ( 0.06%) 113.99
http(s) 96 ( 0.00%) 72774 ( 0.00%) 758.06
http(c) 22042 ( 0.13%) 1729453 ( 0.01%) 78.46
smtp 341 ( 0.00%) 143550 ( 0.00%) 420.97
ftp 95 ( 0.00%) 8537 ( 0.00%) 89.86
bgp 364 ( 0.00%) 30774 ( 0.00%) 84.54
other 45235 ( 0.26%) 5785779 ( 0.05%) 127.90
udp6 18349 ( 0.11%) 2922396 ( 0.02%) 159.27
dns 16497 ( 0.09%) 2611580 ( 0.02%) 158.31
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1851 ( 0.01%) 310707 ( 0.00%) 167.86
icmp6 4939 ( 0.03%) 616493 ( 0.00%) 124.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 527 ( 0.00%) 462874 ( 0.00%) 878.32
tcpdump file: 200903312000.dump.gz (424.24 MB)