Traffic Trace Info
DumpFile: 200903312215.dump
FileSize: 1102.80MB
Id: 200903312215
StartTime: Tue Mar 31 22:15:00 2009
EndTime: Tue Mar 31 22:30:01 2009
TotalTime: 900.62 seconds
TotalCapSize: 855.12MB CapLen: 96 bytes
# of packets: 16216102 (11807.40MB)
AvgRate: 109.97Mbps stddev:12.88M
IP flow (unique src/dst pair) Information
# of flows: 946367 (avg. 17.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 1.9% 1.9% 1.8% 1.7% 1.7% 1.1% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 599140
Top 10 bandwidth usage (bytes/total in %):
10.3% 9.0% 8.0% 7.9% 7.6% 5.6% 5.2% 5.0% 3.5% 2.1%
# of IPv6 addresses: 2355
Top 10 bandwidth usage (bytes/total in %):
51.0% 51.0% 10.3% 10.2% 9.3% 6.4% 2.9% 2.7% 2.1% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903312215.pktlen.png)
detailed numbers
[ 32- 63]: 3180816
[ 64- 127]: 3166198
[ 128- 255]: 1092328
[ 256- 511]: 420710
[ 512- 1023]: 409095
[ 1024- 2047]: 7946955
Protocol Breakdown
![[protocol breakdown chart]](200903312215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16216102 (100.00%) 12380961086 (100.00%) 763.50
ip 16103065 ( 99.30%) 12368611864 ( 99.90%) 768.09
tcp 11798053 ( 72.76%) 10513729155 ( 84.92%) 891.14
http(s) 5108717 ( 31.50%) 6936405497 ( 56.02%) 1357.76
http(c) 2567765 ( 15.83%) 231452242 ( 1.87%) 90.14
squid 622058 ( 3.84%) 481286274 ( 3.89%) 773.70
smtp 416870 ( 2.57%) 89073148 ( 0.72%) 213.67
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 204557 ( 1.26%) 171255917 ( 1.38%) 837.20
pop3 7118 ( 0.04%) 4070868 ( 0.03%) 571.91
imap 3327 ( 0.02%) 669122 ( 0.01%) 201.12
telnet 1295 ( 0.01%) 177909 ( 0.00%) 137.38
ssh 770247 ( 4.75%) 1015975963 ( 8.21%) 1319.03
dns 27419 ( 0.17%) 14489758 ( 0.12%) 528.46
bgp 149 ( 0.00%) 61036 ( 0.00%) 409.64
napster 67 ( 0.00%) 22745 ( 0.00%) 339.48
realaud 33 ( 0.00%) 2563 ( 0.00%) 77.67
rtsp 5129 ( 0.03%) 5526688 ( 0.04%) 1077.54
icecast 853 ( 0.01%) 423026 ( 0.00%) 495.93
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 2062354 ( 12.72%) 1562830699 ( 12.62%) 757.79
udp 3485653 ( 21.50%) 1726411238 ( 13.94%) 495.29
dns 1332430 ( 8.22%) 265532373 ( 2.14%) 199.28
realaud 18200 ( 0.11%) 8289322 ( 0.07%) 455.46
halflif 37 ( 0.00%) 3344 ( 0.00%) 90.38
starcra 40 ( 0.00%) 7405 ( 0.00%) 185.12
everque 116 ( 0.00%) 24674 ( 0.00%) 212.71
unreal 21 ( 0.00%) 2208 ( 0.00%) 105.14
quake 15 ( 0.00%) 1814 ( 0.00%) 120.93
cuseeme 1204 ( 0.01%) 754094 ( 0.01%) 626.32
other 2133385 ( 13.16%) 1451630135 ( 11.72%) 680.44
icmp 779726 ( 4.81%) 121588073 ( 0.98%) 155.94
ipip 350 ( 0.00%) 42028 ( 0.00%) 120.08
ipsec 110 ( 0.00%) 17388 ( 0.00%) 158.07
ip6 26612 ( 0.16%) 4687481 ( 0.04%) 176.14
other 12561 ( 0.08%) 2136501 ( 0.02%) 170.09
frag 54974 ( 0.34%) 59913974 ( 0.48%) 1089.86
ip6 113037 ( 0.70%) 12349222 ( 0.10%) 109.25
tcp6 90232 ( 0.56%) 8236285 ( 0.07%) 91.28
http(s) 62 ( 0.00%) 66962 ( 0.00%) 1080.03
http(c) 2407 ( 0.01%) 214699 ( 0.00%) 89.20
squid 7 ( 0.00%) 590 ( 0.00%) 84.29
smtp 465 ( 0.00%) 226869 ( 0.00%) 487.89
ssh 4 ( 0.00%) 344 ( 0.00%) 86.00
dns 7 ( 0.00%) 724 ( 0.00%) 103.43
bgp 369 ( 0.00%) 31490 ( 0.00%) 85.34
other 86911 ( 0.54%) 7694607 ( 0.06%) 88.53
udp6 18118 ( 0.11%) 2974896 ( 0.02%) 164.20
dns 15786 ( 0.10%) 2432835 ( 0.02%) 154.11
starcra 1 ( 0.00%) 127 ( 0.00%) 127.00
other 2331 ( 0.01%) 541934 ( 0.00%) 232.49
icmp6 4010 ( 0.02%) 527925 ( 0.00%) 131.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 647 ( 0.00%) 606036 ( 0.00%) 936.69
tcpdump file: 200903312215.dump.gz (394.36 MB)