Traffic Trace Info
DumpFile: 200903312245.dump
FileSize: 1222.52MB
Id: 200903312245
StartTime: Tue Mar 31 22:45:00 2009
EndTime: Tue Mar 31 23:00:00 2009
TotalTime: 900.04 seconds
TotalCapSize: 949.50MB CapLen: 96 bytes
# of packets: 17874209 (13246.04MB)
AvgRate: 123.45Mbps stddev:23.85M
IP flow (unique src/dst pair) Information
# of flows: 897714 (avg. 19.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 6.6% 1.7% 1.7% 1.5% 1.4% 1.1% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 568230
Top 10 bandwidth usage (bytes/total in %):
9.0% 8.1% 8.1% 8.1% 7.6% 6.6% 6.6% 4.4% 3.1% 2.8%
# of IPv6 addresses: 2273
Top 10 bandwidth usage (bytes/total in %):
52.6% 52.6% 10.6% 10.5% 8.8% 6.2% 3.0% 2.7% 2.6% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903312245.pktlen.png)
detailed numbers
[ 32- 63]: 3691397
[ 64- 127]: 3320103
[ 128- 255]: 1065939
[ 256- 511]: 480163
[ 512- 1023]: 556279
[ 1024- 2047]: 8760328
Protocol Breakdown
![[protocol breakdown chart]](200903312245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17874209 (100.00%) 13889481490 (100.00%) 777.07
ip 17761402 ( 99.37%) 13877496683 ( 99.91%) 781.33
tcp 13882009 ( 77.67%) 12498160903 ( 89.98%) 900.31
http(s) 5171138 ( 28.93%) 6985202285 ( 50.29%) 1350.81
http(c) 2546872 ( 14.25%) 219013631 ( 1.58%) 85.99
squid 1226059 ( 6.86%) 1047021267 ( 7.54%) 853.97
smtp 383352 ( 2.14%) 75750540 ( 0.55%) 197.60
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 112529 ( 0.63%) 73688813 ( 0.53%) 654.84
pop3 8043 ( 0.04%) 6358724 ( 0.05%) 790.59
imap 20014 ( 0.11%) 20687261 ( 0.15%) 1033.64
telnet 7823 ( 0.04%) 2009823 ( 0.01%) 256.91
ssh 747359 ( 4.18%) 931223096 ( 6.70%) 1246.02
dns 18280 ( 0.10%) 3227727 ( 0.02%) 176.57
bgp 135 ( 0.00%) 44534 ( 0.00%) 329.88
realaud 31 ( 0.00%) 5875 ( 0.00%) 189.52
rtsp 3072 ( 0.02%) 2699295 ( 0.02%) 878.68
icecast 277 ( 0.00%) 57150 ( 0.00%) 206.32
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 3636986 ( 20.35%) 3131168536 ( 22.54%) 860.92
udp 3052224 ( 17.08%) 1248764436 ( 8.99%) 409.13
dns 1214449 ( 6.79%) 256790838 ( 1.85%) 211.45
realaud 20748 ( 0.12%) 8427132 ( 0.06%) 406.17
halflif 43 ( 0.00%) 4411 ( 0.00%) 102.58
starcra 127 ( 0.00%) 13389 ( 0.00%) 105.43
everque 3460 ( 0.02%) 691519 ( 0.00%) 199.86
unreal 23 ( 0.00%) 6352 ( 0.00%) 276.17
quake 29 ( 0.00%) 3329 ( 0.00%) 114.79
cuseeme 7 ( 0.00%) 869 ( 0.00%) 124.14
other 1813146 ( 10.14%) 982662804 ( 7.07%) 541.97
icmp 785108 ( 4.39%) 122843785 ( 0.88%) 156.47
ipip 333 ( 0.00%) 40812 ( 0.00%) 122.56
ipsec 110 ( 0.00%) 17412 ( 0.00%) 158.29
ip6 27876 ( 0.16%) 4745918 ( 0.03%) 170.25
other 13742 ( 0.08%) 2923417 ( 0.02%) 212.74
frag 54467 ( 0.30%) 59646939 ( 0.43%) 1095.10
ip6 112807 ( 0.63%) 11984807 ( 0.09%) 106.24
tcp6 90291 ( 0.51%) 8057466 ( 0.06%) 89.24
http(s) 4 ( 0.00%) 530 ( 0.00%) 132.50
http(c) 2517 ( 0.01%) 225516 ( 0.00%) 89.60
squid 12 ( 0.00%) 1020 ( 0.00%) 85.00
smtp 244 ( 0.00%) 76826 ( 0.00%) 314.86
ssh 9 ( 0.00%) 774 ( 0.00%) 86.00
dns 27 ( 0.00%) 3014 ( 0.00%) 111.63
bgp 363 ( 0.00%) 30609 ( 0.00%) 84.32
other 87115 ( 0.49%) 7719177 ( 0.06%) 88.61
udp6 17379 ( 0.10%) 2819817 ( 0.02%) 162.25
dns 15071 ( 0.08%) 2321886 ( 0.02%) 154.06
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
other 2307 ( 0.01%) 497822 ( 0.00%) 215.79
icmp6 4501 ( 0.03%) 549784 ( 0.00%) 122.15
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 606 ( 0.00%) 553660 ( 0.00%) 913.63
tcpdump file: 200903312245.dump.gz (426.60 MB)