Traffic Trace Info
DumpFile: 200906071400.dump
FileSize: 1576.91MB
Id: 200906071400
StartTime: Sun Jun 7 14:00:01 2009
EndTime: Sun Jun 7 14:15:01 2009
TotalTime: 899.66 seconds
TotalCapSize: 1209.37MB CapLen: 96 bytes
# of packets: 24086612 (12793.43MB)
AvgRate: 119.27Mbps stddev:13.85M
IP flow (unique src/dst pair) Information
# of flows: 1362840 (avg. 17.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 1.2% 1.1% 1.0% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 823861
Top 10 bandwidth usage (bytes/total in %):
30.3% 8.8% 3.2% 2.6% 2.3% 2.1% 2.0% 2.0% 1.9% 1.8%
# of IPv6 addresses: 1766
Top 10 bandwidth usage (bytes/total in %):
18.0% 14.6% 14.6% 12.9% 12.9% 12.4% 10.2% 8.9% 8.9% 6.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200906071400.pktlen.png)
detailed numbers
[ 32- 63]: 5152796
[ 64- 127]: 5864185
[ 128- 255]: 3015247
[ 256- 511]: 1263884
[ 512- 1023]: 862801
[ 1024- 2047]: 7927699
Protocol Breakdown
![[protocol breakdown chart]](200906071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24086612 (100.00%) 13414879476 (100.00%) 556.94
ip 24040252 ( 99.81%) 13401856121 ( 99.90%) 557.48
tcp 14382863 ( 59.71%) 10181025993 ( 75.89%) 707.86
http(s) 3959652 ( 16.44%) 5078277940 ( 37.86%) 1282.51
http(c) 2436231 ( 10.11%) 256573914 ( 1.91%) 105.32
squid 744281 ( 3.09%) 394496771 ( 2.94%) 530.04
smtp 215714 ( 0.90%) 31322140 ( 0.23%) 145.20
nntp 125 ( 0.00%) 10462 ( 0.00%) 83.70
ftp 41699 ( 0.17%) 30330033 ( 0.23%) 727.36
pop3 10038 ( 0.04%) 7069812 ( 0.05%) 704.30
imap 2431 ( 0.01%) 1001789 ( 0.01%) 412.09
telnet 3799 ( 0.02%) 310647 ( 0.00%) 81.77
ssh 72179 ( 0.30%) 13442141 ( 0.10%) 186.23
dns 3761 ( 0.02%) 3971140 ( 0.03%) 1055.87
bgp 139 ( 0.00%) 43076 ( 0.00%) 309.90
napster 240 ( 0.00%) 118761 ( 0.00%) 494.84
realaud 1271 ( 0.01%) 152130 ( 0.00%) 119.69
rtsp 168575 ( 0.70%) 141193110 ( 1.05%) 837.57
icecast 3926 ( 0.02%) 578129 ( 0.00%) 147.26
hotline 58 ( 0.00%) 38309 ( 0.00%) 660.50
other 6718421 ( 27.89%) 4222076309 ( 31.47%) 628.43
udp 9096640 ( 37.77%) 3168830645 ( 23.62%) 348.35
dns 783355 ( 3.25%) 162755957 ( 1.21%) 207.77
rip 1 ( 0.00%) 104 ( 0.00%) 104.00
realaud 4002 ( 0.02%) 388387 ( 0.00%) 97.05
halflif 2184 ( 0.01%) 141556 ( 0.00%) 64.82
starcra 792 ( 0.00%) 147283 ( 0.00%) 185.96
everque 20843 ( 0.09%) 20318364 ( 0.15%) 974.83
unreal 807 ( 0.00%) 81787 ( 0.00%) 101.35
quake 78 ( 0.00%) 11169 ( 0.00%) 143.19
cuseeme 26 ( 0.00%) 3475 ( 0.00%) 133.65
other 8278898 ( 34.37%) 2983934925 ( 22.24%) 360.43
icmp 544567 ( 2.26%) 48896568 ( 0.36%) 89.79
ipip 1350 ( 0.01%) 217262 ( 0.00%) 160.93
ipsec 99 ( 0.00%) 16050 ( 0.00%) 162.12
ip6 12773 ( 0.05%) 2618668 ( 0.02%) 205.02
other 1960 ( 0.01%) 250935 ( 0.00%) 128.03
frag 43509 ( 0.18%) 34846274 ( 0.26%) 800.90
ip6 46360 ( 0.19%) 13023355 ( 0.10%) 280.92
tcp6 31866 ( 0.13%) 9487886 ( 0.07%) 297.74
http(s) 5374 ( 0.02%) 3576985 ( 0.03%) 665.61
http(c) 5194 ( 0.02%) 1432178 ( 0.01%) 275.74
smtp 3126 ( 0.01%) 1635358 ( 0.01%) 523.15
ssh 4194 ( 0.02%) 518012 ( 0.00%) 123.51
dns 12 ( 0.00%) 4498 ( 0.00%) 374.83
bgp 414 ( 0.00%) 38149 ( 0.00%) 92.15
other 13552 ( 0.06%) 2282706 ( 0.02%) 168.44
udp6 7258 ( 0.03%) 1462441 ( 0.01%) 201.49
dns 5829 ( 0.02%) 1217666 ( 0.01%) 208.90
quake 1 ( 0.00%) 99 ( 0.00%) 99.00
other 1428 ( 0.01%) 244676 ( 0.00%) 171.34
icmp6 5199 ( 0.02%) 626984 ( 0.00%) 120.60
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2006 ( 0.01%) 1441828 ( 0.01%) 718.76
tcpdump file: 200906071400.dump.gz (591.16 MB)