Traffic Trace Info
DumpFile: 200903312345.dump
FileSize: 1210.83MB
Id: 200903312345
StartTime: Tue Mar 31 23:45:01 2009
EndTime: Wed Apr 1 00:00:00 2009
TotalTime: 899.27 seconds
TotalCapSize: 939.61MB CapLen: 96 bytes
# of packets: 17757828 (12768.39MB)
AvgRate: 119.10Mbps stddev:14.38M
IP flow (unique src/dst pair) Information
# of flows: 857747 (avg. 20.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.9% 6.5% 2.2% 1.9% 1.7% 1.4% 1.2% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 554433
Top 10 bandwidth usage (bytes/total in %):
12.2% 9.4% 9.0% 9.0% 8.9% 8.6% 6.6% 4.7% 4.6% 2.0%
# of IPv6 addresses: 2031
Top 10 bandwidth usage (bytes/total in %):
38.1% 37.7% 11.9% 5.8% 5.2% 4.9% 4.8% 4.3% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200903312345.pktlen.png)
detailed numbers
[ 32- 63]: 3481666
[ 64- 127]: 3570060
[ 128- 255]: 1368113
[ 256- 511]: 433775
[ 512- 1023]: 456403
[ 1024- 2047]: 8447811
Protocol Breakdown
![[protocol breakdown chart]](200903312345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17757828 (100.00%) 13388628568 (100.00%) 753.96
ip 17729982 ( 99.84%) 13382550362 ( 99.95%) 754.80
tcp 13161646 ( 74.12%) 12161640487 ( 90.84%) 924.02
http(s) 6241148 ( 35.15%) 8420962112 ( 62.90%) 1349.26
http(c) 2909362 ( 16.38%) 233927749 ( 1.75%) 80.41
squid 707967 ( 3.99%) 569147367 ( 4.25%) 803.92
smtp 382668 ( 2.15%) 91835577 ( 0.69%) 239.99
nntp 19 ( 0.00%) 1158 ( 0.00%) 60.95
ftp 43094 ( 0.24%) 16791761 ( 0.13%) 389.65
pop3 7808 ( 0.04%) 5897004 ( 0.04%) 755.25
imap 190476 ( 1.07%) 257634655 ( 1.92%) 1352.58
telnet 10567 ( 0.06%) 2776497 ( 0.02%) 262.75
ssh 649350 ( 3.66%) 889947124 ( 6.65%) 1370.52
dns 20372 ( 0.11%) 3494955 ( 0.03%) 171.56
bgp 139 ( 0.00%) 49750 ( 0.00%) 357.91
napster 1085 ( 0.01%) 1020660 ( 0.01%) 940.70
realaud 8 ( 0.00%) 592 ( 0.00%) 74.00
rtsp 326 ( 0.00%) 60794 ( 0.00%) 186.48
icecast 217 ( 0.00%) 15522 ( 0.00%) 71.53
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 1997027 ( 11.25%) 1668076430 ( 12.46%) 835.28
udp 3766985 ( 21.21%) 1091678668 ( 8.15%) 289.80
dns 2482137 ( 13.98%) 380122179 ( 2.84%) 153.14
realaud 19819 ( 0.11%) 8367916 ( 0.06%) 422.22
halflif 45 ( 0.00%) 3849 ( 0.00%) 85.53
starcra 261 ( 0.00%) 22335 ( 0.00%) 85.57
everque 117 ( 0.00%) 20970 ( 0.00%) 179.23
unreal 14 ( 0.00%) 2228 ( 0.00%) 159.14
quake 30 ( 0.00%) 3578 ( 0.00%) 119.27
cuseeme 5 ( 0.00%) 422 ( 0.00%) 84.40
other 1264328 ( 7.12%) 702942695 ( 5.25%) 555.98
icmp 758972 ( 4.27%) 117870224 ( 0.88%) 155.30
ipip 345 ( 0.00%) 42510 ( 0.00%) 123.22
ipsec 114 ( 0.00%) 17972 ( 0.00%) 157.65
ip6 28722 ( 0.16%) 8564532 ( 0.06%) 298.19
other 13198 ( 0.07%) 2735969 ( 0.02%) 207.30
frag 58515 ( 0.33%) 64135975 ( 0.48%) 1096.06
ip6 27846 ( 0.16%) 6078206 ( 0.05%) 218.28
tcp6 6349 ( 0.04%) 2921372 ( 0.02%) 460.13
http(s) 4 ( 0.00%) 530 ( 0.00%) 132.50
http(c) 2647 ( 0.01%) 240537 ( 0.00%) 90.87
smtp 416 ( 0.00%) 180514 ( 0.00%) 433.93
dns 14 ( 0.00%) 1551 ( 0.00%) 110.79
bgp 374 ( 0.00%) 32432 ( 0.00%) 86.72
other 2894 ( 0.02%) 2465808 ( 0.02%) 852.04
udp6 16621 ( 0.09%) 2483012 ( 0.02%) 149.39
dns 14501 ( 0.08%) 2204338 ( 0.02%) 152.01
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 2119 ( 0.01%) 278572 ( 0.00%) 131.46
icmp6 4726 ( 0.03%) 595375 ( 0.00%) 125.98
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 120 ( 0.00%) 74367 ( 0.00%) 619.73
tcpdump file: 200903312345.dump.gz (428.94 MB)