Traffic Trace Info
DumpFile: 200903312315.dump
FileSize: 1221.27MB
Id: 200903312315
StartTime: Tue Mar 31 23:15:01 2009
EndTime: Tue Mar 31 23:30:01 2009
TotalTime: 900.17 seconds
TotalCapSize: 948.70MB CapLen: 96 bytes
# of packets: 17847805 (13390.12MB)
AvgRate: 124.79Mbps stddev:17.76M
IP flow (unique src/dst pair) Information
# of flows: 806960 (avg. 22.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 4.4% 3.1% 2.3% 1.6% 1.5% 1.5% 1.4% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 527232
Top 10 bandwidth usage (bytes/total in %):
11.4% 9.7% 8.5% 7.3% 7.1% 7.0% 4.6% 4.5% 4.4% 3.1%
# of IPv6 addresses: 2355
Top 10 bandwidth usage (bytes/total in %):
52.4% 52.4% 10.7% 10.5% 8.8% 5.9% 2.5% 2.5% 2.3% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903312315.pktlen.png)
detailed numbers
[ 32- 63]: 3477191
[ 64- 127]: 3546120
[ 128- 255]: 995738
[ 256- 511]: 435717
[ 512- 1023]: 401132
[ 1024- 2047]: 8991907
Protocol Breakdown
![[protocol breakdown chart]](200903312315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17847805 (100.00%) 14040556520 (100.00%) 786.68
ip 17734774 ( 99.37%) 14028515385 ( 99.91%) 791.02
tcp 13757220 ( 77.08%) 12608965470 ( 89.80%) 916.53
http(s) 6531453 ( 36.60%) 8956805566 ( 63.79%) 1371.33
http(c) 3078006 ( 17.25%) 248766937 ( 1.77%) 80.82
squid 748824 ( 4.20%) 611867081 ( 4.36%) 817.10
smtp 420637 ( 2.36%) 95517027 ( 0.68%) 227.08
ftp 52732 ( 0.30%) 19442596 ( 0.14%) 368.71
pop3 25008 ( 0.14%) 27326241 ( 0.19%) 1092.70
imap 27768 ( 0.16%) 33109895 ( 0.24%) 1192.38
telnet 9374 ( 0.05%) 4358729 ( 0.03%) 464.98
ssh 818318 ( 4.58%) 1102150046 ( 7.85%) 1346.85
dns 19565 ( 0.11%) 2139174 ( 0.02%) 109.34
bgp 181 ( 0.00%) 77836 ( 0.00%) 430.03
napster 9 ( 0.00%) 885 ( 0.00%) 98.33
realaud 20 ( 0.00%) 1665 ( 0.00%) 83.25
rtsp 2316 ( 0.01%) 1812181 ( 0.01%) 782.46
icecast 1132 ( 0.01%) 76394 ( 0.00%) 67.49
hotline 3 ( 0.00%) 182 ( 0.00%) 60.67
other 2021487 ( 11.33%) 1505483441 ( 10.72%) 744.74
udp 2928075 ( 16.41%) 1272769325 ( 9.06%) 434.68
dns 1109620 ( 6.22%) 234515722 ( 1.67%) 211.35
realaud 19816 ( 0.11%) 8371954 ( 0.06%) 422.48
halflif 37 ( 0.00%) 3851 ( 0.00%) 104.08
starcra 335 ( 0.00%) 26254 ( 0.00%) 78.37
everque 69 ( 0.00%) 13875 ( 0.00%) 201.09
unreal 19 ( 0.00%) 2899 ( 0.00%) 152.58
quake 19 ( 0.00%) 2479 ( 0.00%) 130.47
cuseeme 5 ( 0.00%) 697 ( 0.00%) 139.40
other 1797932 ( 10.07%) 1029654388 ( 7.33%) 572.69
icmp 1011726 ( 5.67%) 139592241 ( 0.99%) 137.97
ipip 322 ( 0.00%) 39224 ( 0.00%) 121.81
ipsec 108 ( 0.00%) 17064 ( 0.00%) 158.00
ip6 26074 ( 0.15%) 4812047 ( 0.03%) 184.55
other 11249 ( 0.06%) 2320014 ( 0.02%) 206.24
frag 55404 ( 0.31%) 60273631 ( 0.43%) 1087.89
ip6 113029 ( 0.63%) 12041015 ( 0.09%) 106.53
tcp6 91028 ( 0.51%) 8232746 ( 0.06%) 90.44
http(c) 2708 ( 0.02%) 240836 ( 0.00%) 88.94
squid 5 ( 0.00%) 426 ( 0.00%) 85.20
smtp 455 ( 0.00%) 208118 ( 0.00%) 457.40
dns 42 ( 0.00%) 4664 ( 0.00%) 111.05
bgp 366 ( 0.00%) 31047 ( 0.00%) 84.83
other 87452 ( 0.49%) 7747655 ( 0.06%) 88.59
udp6 16705 ( 0.09%) 2731579 ( 0.02%) 163.52
dns 14121 ( 0.08%) 2175041 ( 0.02%) 154.03
everque 1 ( 0.00%) 576 ( 0.00%) 576.00
other 2583 ( 0.01%) 555962 ( 0.00%) 215.24
icmp6 4675 ( 0.03%) 570907 ( 0.00%) 122.12
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 591 ( 0.00%) 501703 ( 0.00%) 848.91
tcpdump file: 200903312315.dump.gz (416.67 MB)