Traffic Trace Info
DumpFile: 200903312230.dump
FileSize: 1147.98MB
Id: 200903312230
StartTime: Tue Mar 31 22:30:01 2009
EndTime: Tue Mar 31 22:45:00 2009
TotalTime: 899.82 seconds
TotalCapSize: 891.24MB CapLen: 96 bytes
# of packets: 16809929 (12414.84MB)
AvgRate: 115.72Mbps stddev:15.68M
IP flow (unique src/dst pair) Information
# of flows: 815226 (avg. 20.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 3.4% 2.0% 1.8% 1.7% 1.5% 1.2% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 530051
Top 10 bandwidth usage (bytes/total in %):
13.7% 9.0% 8.3% 7.2% 7.1% 5.6% 5.3% 3.5% 3.4% 2.5%
# of IPv6 addresses: 2066
Top 10 bandwidth usage (bytes/total in %):
53.3% 53.0% 10.9% 10.7% 6.6% 6.4% 2.9% 2.7% 2.5% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903312230.pktlen.png)
detailed numbers
[ 32- 63]: 3177898
[ 64- 127]: 3357849
[ 128- 255]: 1092253
[ 256- 511]: 426601
[ 512- 1023]: 463341
[ 1024- 2047]: 8291987
Protocol Breakdown
![[protocol breakdown chart]](200903312230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16809929 (100.00%) 13017900027 (100.00%) 774.42
ip 16697532 ( 99.33%) 13006125039 ( 99.91%) 778.92
tcp 12460526 ( 74.13%) 11429266353 ( 87.80%) 917.24
http(s) 5655624 ( 33.64%) 7695896520 ( 59.12%) 1360.75
http(c) 2632134 ( 15.66%) 220756753 ( 1.70%) 83.87
squid 816611 ( 4.86%) 656196128 ( 5.04%) 803.56
smtp 360874 ( 2.15%) 62004651 ( 0.48%) 171.82
ftp 96182 ( 0.57%) 67231027 ( 0.52%) 699.00
pop3 9261 ( 0.06%) 4674951 ( 0.04%) 504.80
imap 12127 ( 0.07%) 10894455 ( 0.08%) 898.36
telnet 1115 ( 0.01%) 135608 ( 0.00%) 121.62
ssh 705328 ( 4.20%) 957816696 ( 7.36%) 1357.97
dns 20031 ( 0.12%) 5400352 ( 0.04%) 269.60
bgp 133 ( 0.00%) 47475 ( 0.00%) 356.95
napster 2 ( 0.00%) 124 ( 0.00%) 62.00
realaud 8 ( 0.00%) 592 ( 0.00%) 74.00
rtsp 4842 ( 0.03%) 4659849 ( 0.04%) 962.38
icecast 265 ( 0.00%) 19556 ( 0.00%) 73.80
hotline 487 ( 0.00%) 30742 ( 0.00%) 63.13
other 2145492 ( 12.76%) 1743500274 ( 13.39%) 812.63
udp 3234652 ( 19.24%) 1438836854 ( 11.05%) 444.82
dns 1318509 ( 7.84%) 267329510 ( 2.05%) 202.75
realaud 19247 ( 0.11%) 8337213 ( 0.06%) 433.17
halflif 47 ( 0.00%) 4771 ( 0.00%) 101.51
starcra 51 ( 0.00%) 8805 ( 0.00%) 172.65
everque 96 ( 0.00%) 19897 ( 0.00%) 207.26
unreal 20 ( 0.00%) 3901 ( 0.00%) 195.05
quake 18 ( 0.00%) 2511 ( 0.00%) 139.50
cuseeme 1855 ( 0.01%) 1148221 ( 0.01%) 618.99
other 1894629 ( 11.27%) 1161827760 ( 8.92%) 613.22
icmp 964574 ( 5.74%) 130193776 ( 1.00%) 134.98
ipip 302 ( 0.00%) 36748 ( 0.00%) 121.68
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 24588 ( 0.15%) 5330462 ( 0.04%) 216.79
other 12780 ( 0.08%) 2443466 ( 0.02%) 191.19
frag 54228 ( 0.32%) 59271650 ( 0.46%) 1093.01
ip6 112397 ( 0.67%) 11774988 ( 0.09%) 104.76
tcp6 89984 ( 0.54%) 8142543 ( 0.06%) 90.49
http(s) 1 ( 0.00%) 74 ( 0.00%) 74.00
http(c) 2747 ( 0.02%) 249087 ( 0.00%) 90.68
squid 14 ( 0.00%) 1188 ( 0.00%) 84.86
smtp 335 ( 0.00%) 130363 ( 0.00%) 389.14
ssh 3 ( 0.00%) 258 ( 0.00%) 86.00
dns 8 ( 0.00%) 915 ( 0.00%) 114.38
bgp 375 ( 0.00%) 31914 ( 0.00%) 85.10
other 86501 ( 0.51%) 7728744 ( 0.06%) 89.35
udp6 16945 ( 0.10%) 2550479 ( 0.02%) 150.52
dns 14987 ( 0.09%) 2253830 ( 0.02%) 150.39
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
other 1957 ( 0.01%) 296539 ( 0.00%) 151.53
icmp6 4906 ( 0.03%) 606122 ( 0.00%) 123.55
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 531 ( 0.00%) 471628 ( 0.00%) 888.19
tcpdump file: 200903312230.dump.gz (404.71 MB)