Traffic Trace Info
DumpFile: 200903312115.dump
FileSize: 1302.18MB
Id: 200903312115
StartTime: Tue Mar 31 21:15:01 2009
EndTime: Tue Mar 31 21:30:01 2009
TotalTime: 900.42 seconds
TotalCapSize: 1014.37MB CapLen: 96 bytes
# of packets: 18851195 (13528.22MB)
AvgRate: 126.02Mbps stddev:14.29M
IP flow (unique src/dst pair) Information
# of flows: 922609 (avg. 20.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 6.5% 3.7% 1.4% 1.3% 1.1% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 557119
Top 10 bandwidth usage (bytes/total in %):
8.2% 8.2% 8.2% 8.0% 7.7% 6.7% 6.6% 6.6% 5.8% 4.2%
# of IPv6 addresses: 2261
Top 10 bandwidth usage (bytes/total in %):
43.0% 43.0% 9.6% 9.4% 8.7% 8.6% 7.5% 5.4% 5.4% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903312115.pktlen.png)
detailed numbers
[ 32- 63]: 3840871
[ 64- 127]: 4026516
[ 128- 255]: 984863
[ 256- 511]: 439413
[ 512- 1023]: 472880
[ 1024- 2047]: 9086652
Protocol Breakdown
![[protocol breakdown chart]](200903312115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18851195 (100.00%) 14185366186 (100.00%) 752.49
ip 18718614 ( 99.30%) 14170738787 ( 99.90%) 757.04
tcp 14190717 ( 75.28%) 12313207407 ( 86.80%) 867.69
http(s) 5419409 ( 28.75%) 7301431260 ( 51.47%) 1347.27
http(c) 3185323 ( 16.90%) 273833642 ( 1.93%) 85.97
squid 755807 ( 4.01%) 653255797 ( 4.61%) 864.32
smtp 446282 ( 2.37%) 96595131 ( 0.68%) 216.44
ftp 619917 ( 3.29%) 597904983 ( 4.21%) 964.49
pop3 9071 ( 0.05%) 7577977 ( 0.05%) 835.41
imap 12626 ( 0.07%) 9078457 ( 0.06%) 719.03
telnet 11066 ( 0.06%) 2550869 ( 0.02%) 230.51
ssh 711185 ( 3.77%) 955691507 ( 6.74%) 1343.80
dns 19899 ( 0.11%) 2192320 ( 0.02%) 110.17
bgp 164 ( 0.00%) 65042 ( 0.00%) 396.60
napster 28 ( 0.00%) 1722 ( 0.00%) 61.50
realaud 29 ( 0.00%) 3616 ( 0.00%) 124.69
rtsp 312 ( 0.00%) 97889 ( 0.00%) 313.75
icecast 312 ( 0.00%) 35227 ( 0.00%) 112.91
other 2999273 ( 15.91%) 2412891128 ( 17.01%) 804.49
udp 3487302 ( 18.50%) 1712775955 ( 12.07%) 491.15
dns 1174669 ( 6.23%) 253032525 ( 1.78%) 215.41
realaud 18087 ( 0.10%) 8270940 ( 0.06%) 457.29
halflif 37 ( 0.00%) 6686 ( 0.00%) 180.70
starcra 35 ( 0.00%) 6175 ( 0.00%) 176.43
everque 119 ( 0.00%) 24758 ( 0.00%) 208.05
unreal 27 ( 0.00%) 4794 ( 0.00%) 177.56
quake 13 ( 0.00%) 1382 ( 0.00%) 106.31
other 2294106 ( 12.17%) 1451243094 ( 10.23%) 632.60
icmp 996469 ( 5.29%) 136820651 ( 0.96%) 137.31
ipip 350 ( 0.00%) 42104 ( 0.00%) 120.30
ipsec 268 ( 0.00%) 42728 ( 0.00%) 159.43
ip6 27916 ( 0.15%) 4885594 ( 0.03%) 175.01
other 15592 ( 0.08%) 2964348 ( 0.02%) 190.12
frag 55299 ( 0.29%) 60923635 ( 0.43%) 1101.71
ip6 132581 ( 0.70%) 14627399 ( 0.10%) 110.33
tcp6 108809 ( 0.58%) 10352782 ( 0.07%) 95.15
http(s) 549 ( 0.00%) 795875 ( 0.01%) 1449.68
http(c) 20537 ( 0.11%) 1617601 ( 0.01%) 78.77
smtp 454 ( 0.00%) 203857 ( 0.00%) 449.02
ssh 4 ( 0.00%) 344 ( 0.00%) 86.00
dns 13 ( 0.00%) 1463 ( 0.00%) 112.54
bgp 367 ( 0.00%) 31303 ( 0.00%) 85.29
other 86885 ( 0.46%) 7702339 ( 0.05%) 88.65
udp6 18011 ( 0.10%) 3060605 ( 0.02%) 169.93
dns 15697 ( 0.08%) 2529381 ( 0.02%) 161.14
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
unreal 1 ( 0.00%) 117 ( 0.00%) 117.00
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 2311 ( 0.01%) 530893 ( 0.00%) 229.72
icmp6 5099 ( 0.03%) 637006 ( 0.00%) 124.93
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 631 ( 0.00%) 572790 ( 0.00%) 907.75
tcpdump file: 200903312115.dump.gz (444.61 MB)