Traffic Trace Info
DumpFile: 200903312145.dump
FileSize: 1181.98MB
Id: 200903312145
StartTime: Tue Mar 31 21:45:01 2009
EndTime: Tue Mar 31 22:00:00 2009
TotalTime: 899.75 seconds
TotalCapSize: 922.10MB CapLen: 96 bytes
# of packets: 17018933 (12123.13MB)
AvgRate: 113.00Mbps stddev:13.58M
IP flow (unique src/dst pair) Information
# of flows: 951689 (avg. 17.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.3% 4.2% 1.7% 1.6% 1.6% 1.6% 1.4% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 636153
Top 10 bandwidth usage (bytes/total in %):
10.4% 9.6% 9.3% 8.8% 7.4% 7.3% 4.3% 4.3% 3.9% 3.1%
# of IPv6 addresses: 2204
Top 10 bandwidth usage (bytes/total in %):
48.7% 48.6% 9.9% 9.8% 7.8% 6.3% 2.8% 2.4% 2.4% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903312145.pktlen.png)
detailed numbers
[ 32- 63]: 3469151
[ 64- 127]: 3737359
[ 128- 255]: 954896
[ 256- 511]: 433908
[ 512- 1023]: 422841
[ 1024- 2047]: 8000778
Protocol Breakdown
![[protocol breakdown chart]](200903312145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17018933 (100.00%) 12712027231 (100.00%) 746.93
ip 16901459 ( 99.31%) 12699122264 ( 99.90%) 751.36
tcp 13046790 ( 76.66%) 11559923269 ( 90.94%) 886.04
http(s) 5525835 ( 32.47%) 7503313554 ( 59.03%) 1357.86
http(c) 2984834 ( 17.54%) 268278700 ( 2.11%) 89.88
squid 653968 ( 3.84%) 557802155 ( 4.39%) 852.95
smtp 389668 ( 2.29%) 79270223 ( 0.62%) 203.43
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 628266 ( 3.69%) 622054824 ( 4.89%) 990.11
pop3 7929 ( 0.05%) 5458879 ( 0.04%) 688.47
imap 4868 ( 0.03%) 1168755 ( 0.01%) 240.09
telnet 11008 ( 0.06%) 4801522 ( 0.04%) 436.18
ssh 741140 ( 4.35%) 1013765948 ( 7.97%) 1367.85
dns 18350 ( 0.11%) 3191226 ( 0.03%) 173.91
bgp 138 ( 0.00%) 46871 ( 0.00%) 339.64
napster 17 ( 0.00%) 2025 ( 0.00%) 119.12
realaud 1175 ( 0.01%) 71553 ( 0.00%) 60.90
rtsp 4545 ( 0.03%) 5656702 ( 0.04%) 1244.60
icecast 331 ( 0.00%) 24561 ( 0.00%) 74.20
hotline 5 ( 0.00%) 302 ( 0.00%) 60.40
other 2074562 ( 12.19%) 1494958115 ( 11.76%) 720.61
udp 2560925 ( 15.05%) 976429087 ( 7.68%) 381.28
dns 1208188 ( 7.10%) 261571529 ( 2.06%) 216.50
realaud 18032 ( 0.11%) 8260243 ( 0.06%) 458.09
halflif 53 ( 0.00%) 5780 ( 0.00%) 109.06
starcra 222 ( 0.00%) 20668 ( 0.00%) 93.10
everque 103 ( 0.00%) 19183 ( 0.00%) 186.24
unreal 24 ( 0.00%) 4575 ( 0.00%) 190.62
quake 19 ( 0.00%) 2813 ( 0.00%) 148.05
cuseeme 10 ( 0.00%) 1469 ( 0.00%) 146.90
other 1334085 ( 7.84%) 706382601 ( 5.56%) 529.49
icmp 1249836 ( 7.34%) 152113535 ( 1.20%) 121.71
ipip 346 ( 0.00%) 41404 ( 0.00%) 119.66
ipsec 147 ( 0.00%) 24994 ( 0.00%) 170.03
ip6 26070 ( 0.15%) 4776256 ( 0.04%) 183.21
other 17345 ( 0.10%) 5813719 ( 0.05%) 335.18
frag 55410 ( 0.33%) 60862013 ( 0.48%) 1098.39
ip6 117474 ( 0.69%) 12904967 ( 0.10%) 109.85
tcp6 93568 ( 0.55%) 8678236 ( 0.07%) 92.75
http(s) 237 ( 0.00%) 220393 ( 0.00%) 929.93
http(c) 5270 ( 0.03%) 435409 ( 0.00%) 82.62
smtp 818 ( 0.00%) 299486 ( 0.00%) 366.12
ssh 14 ( 0.00%) 1204 ( 0.00%) 86.00
dns 10 ( 0.00%) 1089 ( 0.00%) 108.90
bgp 367 ( 0.00%) 31632 ( 0.00%) 86.19
other 86852 ( 0.51%) 7689023 ( 0.06%) 88.53
udp6 18244 ( 0.11%) 3036174 ( 0.02%) 166.42
dns 16113 ( 0.09%) 2570280 ( 0.02%) 159.52
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2128 ( 0.01%) 465573 ( 0.00%) 218.78
icmp6 5053 ( 0.03%) 645698 ( 0.01%) 127.79
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 579 ( 0.00%) 540779 ( 0.00%) 933.99
tcpdump file: 200903312145.dump.gz (408.74 MB)