Traffic Trace Info
DumpFile: 200903312030.dump
FileSize: 1287.20MB
Id: 200903312030
StartTime: Tue Mar 31 20:30:01 2009
EndTime: Tue Mar 31 20:45:00 2009
TotalTime: 899.45 seconds
TotalCapSize: 1003.16MB CapLen: 96 bytes
# of packets: 18600280 (12162.18MB)
AvgRate: 113.42Mbps stddev:11.64M
IP flow (unique src/dst pair) Information
# of flows: 886127 (avg. 20.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 4.2% 2.5% 1.6% 1.5% 1.4% 1.2% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 585829
Top 10 bandwidth usage (bytes/total in %):
11.5% 9.2% 8.5% 7.1% 6.9% 6.9% 5.1% 4.3% 3.7% 2.5%
# of IPv6 addresses: 2034
Top 10 bandwidth usage (bytes/total in %):
43.8% 43.6% 15.8% 15.8% 8.9% 8.8% 5.2% 4.9% 2.6% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903312030.pktlen.png)
detailed numbers
[ 32- 63]: 3362743
[ 64- 127]: 5095697
[ 128- 255]: 1205552
[ 256- 511]: 440042
[ 512- 1023]: 339707
[ 1024- 2047]: 8156539
Protocol Breakdown
![[protocol breakdown chart]](200903312030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18600280 (100.00%) 12752972996 (100.00%) 685.63
ip 18458425 ( 99.24%) 12738571056 ( 99.89%) 690.12
tcp 12801153 ( 68.82%) 10799215369 ( 84.68%) 843.61
http(s) 5116554 ( 27.51%) 6902319082 ( 54.12%) 1349.02
http(c) 2821741 ( 15.17%) 327252118 ( 2.57%) 115.98
squid 668170 ( 3.59%) 526913778 ( 4.13%) 788.59
smtp 312994 ( 1.68%) 63944449 ( 0.50%) 204.30
ftp 721676 ( 3.88%) 624650467 ( 4.90%) 865.56
pop3 14249 ( 0.08%) 5080639 ( 0.04%) 356.56
imap 4187 ( 0.02%) 685348 ( 0.01%) 163.68
telnet 1580 ( 0.01%) 206488 ( 0.00%) 130.69
ssh 32486 ( 0.17%) 30062440 ( 0.24%) 925.40
dns 20964 ( 0.11%) 4622544 ( 0.04%) 220.50
bgp 152 ( 0.00%) 54783 ( 0.00%) 360.41
napster 27 ( 0.00%) 2681 ( 0.00%) 99.30
realaud 23 ( 0.00%) 1648 ( 0.00%) 71.65
rtsp 60 ( 0.00%) 8580 ( 0.00%) 143.00
icecast 434 ( 0.00%) 47311 ( 0.00%) 109.01
hotline 10 ( 0.00%) 1357 ( 0.00%) 135.70
other 3085842 ( 16.59%) 2313361416 ( 18.14%) 749.67
udp 4411763 ( 23.72%) 1783084299 ( 13.98%) 404.17
dns 2001621 ( 10.76%) 336911605 ( 2.64%) 168.32
realaud 888 ( 0.00%) 54914 ( 0.00%) 61.84
halflif 34 ( 0.00%) 3474 ( 0.00%) 102.18
starcra 47 ( 0.00%) 7890 ( 0.00%) 167.87
everque 84 ( 0.00%) 15569 ( 0.00%) 185.35
unreal 12 ( 0.00%) 2039 ( 0.00%) 169.92
quake 33 ( 0.00%) 3514 ( 0.00%) 106.48
cuseeme 7 ( 0.00%) 605 ( 0.00%) 86.43
other 2408785 ( 12.95%) 1445929601 ( 11.34%) 600.27
icmp 1185365 ( 6.37%) 145740547 ( 1.14%) 122.95
ipip 306 ( 0.00%) 37178 ( 0.00%) 121.50
ipsec 152 ( 0.00%) 23552 ( 0.00%) 154.95
ip6 25556 ( 0.14%) 5737741 ( 0.04%) 224.52
other 34130 ( 0.18%) 4732370 ( 0.04%) 138.66
frag 54422 ( 0.29%) 59567477 ( 0.47%) 1094.55
ip6 141855 ( 0.76%) 14401940 ( 0.11%) 101.53
tcp6 120313 ( 0.65%) 10895266 ( 0.09%) 90.56
http(s) 304 ( 0.00%) 325153 ( 0.00%) 1069.58
http(c) 31959 ( 0.17%) 2519217 ( 0.02%) 78.83
smtp 942 ( 0.01%) 351238 ( 0.00%) 372.86
ftp 12 ( 0.00%) 1039 ( 0.00%) 86.58
ssh 4 ( 0.00%) 344 ( 0.00%) 86.00
bgp 387 ( 0.00%) 34488 ( 0.00%) 89.12
other 86705 ( 0.47%) 7663787 ( 0.06%) 88.39
udp6 16438 ( 0.09%) 2517006 ( 0.02%) 153.12
dns 14602 ( 0.08%) 2231287 ( 0.02%) 152.81
starcra 3 ( 0.00%) 433 ( 0.00%) 144.33
other 1833 ( 0.01%) 285286 ( 0.00%) 155.64
icmp6 4597 ( 0.02%) 565738 ( 0.00%) 123.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 477 ( 0.00%) 419850 ( 0.00%) 880.19
tcpdump file: 200903312030.dump.gz (446.31 MB)