Traffic Trace Info
DumpFile: 200903312300.dump
FileSize: 1319.79MB
Id: 200903312300
StartTime: Tue Mar 31 23:00:00 2009
EndTime: Tue Mar 31 23:15:01 2009
TotalTime: 900.21 seconds
TotalCapSize: 1025.94MB CapLen: 96 bytes
# of packets: 19242583 (15102.99MB)
AvgRate: 140.74Mbps stddev:26.90M
IP flow (unique src/dst pair) Information
# of flows: 830577 (avg. 23.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 5.9% 2.2% 2.0% 1.8% 1.6% 1.5% 1.4% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 538128
Top 10 bandwidth usage (bytes/total in %):
8.7% 8.4% 7.3% 7.2% 7.1% 7.1% 5.9% 3.9% 3.8% 2.7%
# of IPv6 addresses: 2161
Top 10 bandwidth usage (bytes/total in %):
48.0% 47.9% 19.2% 9.8% 9.8% 6.4% 5.9% 2.5% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903312300.pktlen.png)
detailed numbers
[ 32- 63]: 3917758
[ 64- 127]: 3272993
[ 128- 255]: 1021720
[ 256- 511]: 426952
[ 512- 1023]: 416562
[ 1024- 2047]: 10186598
Protocol Breakdown
![[protocol breakdown chart]](200903312300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19242583 (100.00%) 15836634609 (100.00%) 823.00
ip 19128955 ( 99.41%) 15823480347 ( 99.92%) 827.20
tcp 15471077 ( 80.40%) 14422893852 ( 91.07%) 932.25
http(s) 6647128 ( 34.54%) 9131219325 ( 57.66%) 1373.71
http(c) 3104671 ( 16.13%) 278481005 ( 1.76%) 89.70
squid 763434 ( 3.97%) 604824958 ( 3.82%) 792.24
smtp 409773 ( 2.13%) 103583175 ( 0.65%) 252.78
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 65734 ( 0.34%) 38514615 ( 0.24%) 585.92
pop3 8925 ( 0.05%) 6510602 ( 0.04%) 729.48
imap 14250 ( 0.07%) 14600023 ( 0.09%) 1024.56
telnet 11084 ( 0.06%) 3048845 ( 0.02%) 275.07
ssh 862225 ( 4.48%) 1152515855 ( 7.28%) 1336.68
dns 18124 ( 0.09%) 2110147 ( 0.01%) 116.43
bgp 143 ( 0.00%) 52445 ( 0.00%) 366.75
napster 9 ( 0.00%) 1245 ( 0.00%) 138.33
realaud 27 ( 0.00%) 5594 ( 0.00%) 207.19
rtsp 2377 ( 0.01%) 1738606 ( 0.01%) 731.43
icecast 513 ( 0.00%) 45083 ( 0.00%) 87.88
hotline 8 ( 0.00%) 1457 ( 0.00%) 182.12
other 3562570 ( 18.51%) 3085635242 ( 19.48%) 866.13
udp 2859651 ( 14.86%) 1274797908 ( 8.05%) 445.79
dns 1142324 ( 5.94%) 239687351 ( 1.51%) 209.82
realaud 19945 ( 0.10%) 8381193 ( 0.05%) 420.22
halflif 35 ( 0.00%) 3227 ( 0.00%) 92.20
starcra 326 ( 0.00%) 25240 ( 0.00%) 77.42
everque 727 ( 0.00%) 257713 ( 0.00%) 354.49
unreal 15 ( 0.00%) 2503 ( 0.00%) 166.87
quake 16 ( 0.00%) 2370 ( 0.00%) 148.12
cuseeme 4 ( 0.00%) 382 ( 0.00%) 95.50
other 1696072 ( 8.81%) 1026273444 ( 6.48%) 605.09
icmp 757347 ( 3.94%) 117444062 ( 0.74%) 155.07
ipip 305 ( 0.00%) 37410 ( 0.00%) 122.66
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 25361 ( 0.13%) 4478929 ( 0.03%) 176.61
other 15104 ( 0.08%) 3810806 ( 0.02%) 252.30
frag 56180 ( 0.29%) 61411117 ( 0.39%) 1093.11
ip6 113628 ( 0.59%) 13154262 ( 0.08%) 115.77
tcp6 91403 ( 0.48%) 9457476 ( 0.06%) 103.47
http(c) 2494 ( 0.01%) 260949 ( 0.00%) 104.63
smtp 368 ( 0.00%) 162645 ( 0.00%) 441.97
ssh 16 ( 0.00%) 3200 ( 0.00%) 200.00
dns 8 ( 0.00%) 921 ( 0.00%) 115.12
bgp 365 ( 0.00%) 30797 ( 0.00%) 84.38
other 88152 ( 0.46%) 8998964 ( 0.06%) 102.08
udp6 17125 ( 0.09%) 2646083 ( 0.02%) 154.52
dns 15021 ( 0.08%) 2284572 ( 0.01%) 152.09
quake 2 ( 0.00%) 221 ( 0.00%) 110.50
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2101 ( 0.01%) 361184 ( 0.00%) 171.91
icmp6 4512 ( 0.02%) 554477 ( 0.00%) 122.89
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 558 ( 0.00%) 492146 ( 0.00%) 881.98
tcpdump file: 200903312300.dump.gz (448.01 MB)