Traffic Trace Info
DumpFile: 200903312045.dump
FileSize: 1331.91MB
Id: 200903312045
StartTime: Tue Mar 31 20:45:00 2009
EndTime: Tue Mar 31 21:00:01 2009
TotalTime: 900.57 seconds
TotalCapSize: 1032.81MB CapLen: 96 bytes
# of packets: 19590791 (13626.21MB)
AvgRate: 126.91Mbps stddev:16.07M
IP flow (unique src/dst pair) Information
# of flows: 900806 (avg. 21.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 5.4% 3.8% 2.7% 2.0% 1.5% 1.3% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 561064
Top 10 bandwidth usage (bytes/total in %):
10.4% 8.7% 7.7% 6.7% 6.7% 6.5% 6.1% 5.6% 5.6% 3.9%
# of IPv6 addresses: 2224
Top 10 bandwidth usage (bytes/total in %):
36.7% 36.7% 16.4% 16.4% 14.8% 7.7% 7.4% 7.4% 4.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903312045.pktlen.png)
detailed numbers
[ 32- 63]: 3385794
[ 64- 127]: 4806081
[ 128- 255]: 1388594
[ 256- 511]: 434540
[ 512- 1023]: 341535
[ 1024- 2047]: 9234247
Protocol Breakdown
![[protocol breakdown chart]](200903312045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19590791 (100.00%) 14288118901 (100.00%) 729.33
ip 19434733 ( 99.20%) 14270940616 ( 99.88%) 734.30
tcp 13023501 ( 66.48%) 11314503137 ( 79.19%) 868.78
http(s) 5302925 ( 27.07%) 7213386681 ( 50.49%) 1360.27
http(c) 2909686 ( 14.85%) 416888186 ( 2.92%) 143.28
squid 618296 ( 3.16%) 475763948 ( 3.33%) 769.48
smtp 367072 ( 1.87%) 80678134 ( 0.56%) 219.79
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 634600 ( 3.24%) 625778407 ( 4.38%) 986.10
pop3 9677 ( 0.05%) 7671331 ( 0.05%) 792.74
imap 4379 ( 0.02%) 1208460 ( 0.01%) 275.97
telnet 10038 ( 0.05%) 2444080 ( 0.02%) 243.48
ssh 16968 ( 0.09%) 12608284 ( 0.09%) 743.06
dns 19456 ( 0.10%) 3314601 ( 0.02%) 170.36
bgp 143 ( 0.00%) 52760 ( 0.00%) 368.95
napster 123 ( 0.00%) 65694 ( 0.00%) 534.10
realaud 19 ( 0.00%) 2507 ( 0.00%) 131.95
rtsp 974 ( 0.00%) 87900 ( 0.00%) 90.25
icecast 397 ( 0.00%) 45204 ( 0.00%) 113.86
hotline 22 ( 0.00%) 1892 ( 0.00%) 86.00
other 3128670 ( 15.97%) 2474499368 ( 17.32%) 790.91
udp 5570732 ( 28.44%) 2820151892 ( 19.74%) 506.24
dns 2125588 ( 10.85%) 354949958 ( 2.48%) 166.99
realaud 920 ( 0.00%) 56463 ( 0.00%) 61.37
halflif 47 ( 0.00%) 4474 ( 0.00%) 95.19
starcra 47 ( 0.00%) 7868 ( 0.00%) 167.40
everque 109 ( 0.00%) 21699 ( 0.00%) 199.07
unreal 20 ( 0.00%) 3140 ( 0.00%) 157.00
quake 19 ( 0.00%) 2100 ( 0.00%) 110.53
cuseeme 5 ( 0.00%) 725 ( 0.00%) 145.00
other 3443759 ( 17.58%) 2464914251 ( 17.25%) 715.76
icmp 788055 ( 4.02%) 119735273 ( 0.84%) 151.94
ipip 358 ( 0.00%) 43696 ( 0.00%) 122.06
ipsec 164 ( 0.00%) 26064 ( 0.00%) 158.93
ip6 32285 ( 0.16%) 12951955 ( 0.09%) 401.18
other 19638 ( 0.10%) 3528599 ( 0.02%) 179.68
frag 54619 ( 0.28%) 60102337 ( 0.42%) 1100.39
ip6 156058 ( 0.80%) 17178285 ( 0.12%) 110.08
tcp6 132812 ( 0.68%) 12869834 ( 0.09%) 96.90
http(s) 4 ( 0.00%) 530 ( 0.00%) 132.50
http(c) 42965 ( 0.22%) 3381317 ( 0.02%) 78.70
smtp 1114 ( 0.01%) 443176 ( 0.00%) 397.82
ftp 16 ( 0.00%) 1410 ( 0.00%) 88.12
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 5 ( 0.00%) 534 ( 0.00%) 106.80
bgp 360 ( 0.00%) 30309 ( 0.00%) 84.19
other 88346 ( 0.45%) 9012386 ( 0.06%) 102.01
udp6 17480 ( 0.09%) 2901711 ( 0.02%) 166.00
dns 15276 ( 0.08%) 2377096 ( 0.02%) 155.61
other 2204 ( 0.01%) 524615 ( 0.00%) 238.03
icmp6 4843 ( 0.02%) 596680 ( 0.00%) 123.20
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 893 ( 0.00%) 805980 ( 0.01%) 902.55
tcpdump file: 200903312045.dump.gz (463.77 MB)