Traffic Trace Info
DumpFile: 200903312330.dump
FileSize: 1225.61MB
Id: 200903312330
StartTime: Tue Mar 31 23:30:01 2009
EndTime: Tue Mar 31 23:45:01 2009
TotalTime: 900.06 seconds
TotalCapSize: 953.16MB CapLen: 96 bytes
# of packets: 17836816 (13128.01MB)
AvgRate: 122.37Mbps stddev:14.85M
IP flow (unique src/dst pair) Information
# of flows: 901953 (avg. 19.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.6% 6.4% 1.9% 1.7% 1.6% 1.4% 1.3% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 595367
Top 10 bandwidth usage (bytes/total in %):
12.1% 11.3% 9.8% 8.9% 8.8% 6.5% 6.4% 4.2% 2.5% 2.2%
# of IPv6 addresses: 2126
Top 10 bandwidth usage (bytes/total in %):
18.8% 18.3% 17.2% 14.9% 11.2% 10.5% 4.7% 4.6% 3.7% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903312330.pktlen.png)
detailed numbers
[ 32- 63]: 3680907
[ 64- 127]: 3552524
[ 128- 255]: 993935
[ 256- 511]: 440468
[ 512- 1023]: 427792
[ 1024- 2047]: 8741190
Protocol Breakdown
![[protocol breakdown chart]](200903312330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17836816 (100.00%) 13765713699 (100.00%) 771.76
ip 17791736 ( 99.75%) 13758735034 ( 99.95%) 773.32
tcp 13922210 ( 78.05%) 12580202677 ( 91.39%) 903.61
http(s) 6626553 ( 37.15%) 9006571091 ( 65.43%) 1359.16
http(c) 3198393 ( 17.93%) 250425084 ( 1.82%) 78.30
squid 689316 ( 3.86%) 540494156 ( 3.93%) 784.10
smtp 407270 ( 2.28%) 91706403 ( 0.67%) 225.17
ftp 46629 ( 0.26%) 18373534 ( 0.13%) 394.04
pop3 6154 ( 0.03%) 3484444 ( 0.03%) 566.21
imap 83827 ( 0.47%) 111580466 ( 0.81%) 1331.08
telnet 9284 ( 0.05%) 2945475 ( 0.02%) 317.26
ssh 662383 ( 3.71%) 898084743 ( 6.52%) 1355.84
dns 21324 ( 0.12%) 5538276 ( 0.04%) 259.72
bgp 140 ( 0.00%) 48498 ( 0.00%) 346.41
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 10 ( 0.00%) 724 ( 0.00%) 72.40
rtsp 3427 ( 0.02%) 4087733 ( 0.03%) 1192.80
icecast 302 ( 0.00%) 22598 ( 0.00%) 74.83
other 2167168 ( 12.15%) 1646837652 ( 11.96%) 759.90
udp 2646237 ( 14.84%) 1018224025 ( 7.40%) 384.78
dns 1259934 ( 7.06%) 254022903 ( 1.85%) 201.62
realaud 19867 ( 0.11%) 8375301 ( 0.06%) 421.57
halflif 39 ( 0.00%) 3362 ( 0.00%) 86.21
starcra 327 ( 0.00%) 25521 ( 0.00%) 78.05
everque 91 ( 0.00%) 18242 ( 0.00%) 200.46
unreal 16 ( 0.00%) 2271 ( 0.00%) 141.94
quake 21 ( 0.00%) 2882 ( 0.00%) 137.24
cuseeme 8 ( 0.00%) 1020 ( 0.00%) 127.50
other 1365758 ( 7.66%) 755620439 ( 5.49%) 553.26
icmp 1179610 ( 6.61%) 147092829 ( 1.07%) 124.70
ipip 306 ( 0.00%) 36670 ( 0.00%) 119.84
ipsec 110 ( 0.00%) 17380 ( 0.00%) 158.00
ip6 31217 ( 0.18%) 11301500 ( 0.08%) 362.03
other 12046 ( 0.07%) 1859953 ( 0.01%) 154.40
frag 53452 ( 0.30%) 58537618 ( 0.43%) 1095.14
ip6 45080 ( 0.25%) 6978665 ( 0.05%) 154.81
tcp6 23917 ( 0.13%) 3534015 ( 0.03%) 147.76
http(c) 4767 ( 0.03%) 462905 ( 0.00%) 97.11
squid 8 ( 0.00%) 676 ( 0.00%) 84.50
smtp 1093 ( 0.01%) 400747 ( 0.00%) 366.65
ssh 4 ( 0.00%) 344 ( 0.00%) 86.00
bgp 371 ( 0.00%) 31434 ( 0.00%) 84.73
other 17674 ( 0.10%) 2637909 ( 0.02%) 149.25
udp6 15927 ( 0.09%) 2382163 ( 0.02%) 149.57
dns 13892 ( 0.08%) 2073008 ( 0.02%) 149.22
realaud 3 ( 0.00%) 328 ( 0.00%) 109.33
everque 1 ( 0.00%) 145 ( 0.00%) 145.00
other 2031 ( 0.01%) 308682 ( 0.00%) 151.99
icmp6 4656 ( 0.03%) 582350 ( 0.00%) 125.08
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 549 ( 0.00%) 475921 ( 0.00%) 866.89
tcpdump file: 200903312330.dump.gz (420.56 MB)