Traffic Trace Info
DumpFile: 200906091400.dump
FileSize: 2310.52MB
Id: 200906091400
StartTime: Tue Jun 9 14:00:01 2009
EndTime: Tue Jun 9 14:15:01 2009
TotalTime: 899.88 seconds
TotalCapSize: 1779.24MB CapLen: 96 bytes
# of packets: 34817466 (20300.42MB)
AvgRate: 189.24Mbps stddev:19.38M
IP flow (unique src/dst pair) Information
# of flows: 1883292 (avg. 18.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.4% 0.8% 0.8% 0.7% 0.6% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 1165318
Top 10 bandwidth usage (bytes/total in %):
32.5% 6.6% 5.3% 3.5% 2.6% 2.4% 2.2% 2.1% 2.1% 2.0%
# of IPv6 addresses: 1683
Top 10 bandwidth usage (bytes/total in %):
91.4% 91.4% 2.2% 1.8% 1.4% 1.1% 1.0% 0.9% 0.8% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200906091400.pktlen.png)
detailed numbers
[ 32- 63]: 9205932
[ 64- 127]: 7953705
[ 128- 255]: 2104224
[ 256- 511]: 1176824
[ 512- 1023]: 1168077
[ 1024- 2047]: 13208704
Protocol Breakdown
![[protocol breakdown chart]](200906091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34817466 (100.00%) 21286527992 (100.00%) 611.37
ip 34654123 ( 99.53%) 21090245250 ( 99.08%) 608.59
tcp 23319642 ( 66.98%) 16587311607 ( 77.92%) 711.30
http(s) 7595038 ( 21.81%) 9548489394 ( 44.86%) 1257.20
http(c) 5567444 ( 15.99%) 1143375801 ( 5.37%) 205.37
squid 656785 ( 1.89%) 310120077 ( 1.46%) 472.18
smtp 264080 ( 0.76%) 88052017 ( 0.41%) 333.43
nntp 152 ( 0.00%) 14214 ( 0.00%) 93.51
ftp 30801 ( 0.09%) 4700507 ( 0.02%) 152.61
pop3 65797 ( 0.19%) 7477696 ( 0.04%) 113.65
imap 4691 ( 0.01%) 2498369 ( 0.01%) 532.59
telnet 20180 ( 0.06%) 1503101 ( 0.01%) 74.48
ssh 23981 ( 0.07%) 3758739 ( 0.02%) 156.74
dns 4839 ( 0.01%) 3829720 ( 0.02%) 791.43
bgp 153 ( 0.00%) 63131 ( 0.00%) 412.62
napster 76 ( 0.00%) 10383 ( 0.00%) 136.62
realaud 4045 ( 0.01%) 368708 ( 0.00%) 91.15
rtsp 189044 ( 0.54%) 44166388 ( 0.21%) 233.63
icecast 21491 ( 0.06%) 9344860 ( 0.04%) 434.83
hotline 20 ( 0.00%) 1825 ( 0.00%) 91.25
other 8870936 ( 25.48%) 5419499349 ( 25.46%) 610.93
udp 10615438 ( 30.49%) 4432235206 ( 20.82%) 417.53
dns 1079675 ( 3.10%) 245760238 ( 1.15%) 227.62
rip 2 ( 0.00%) 199 ( 0.00%) 99.50
realaud 18488 ( 0.05%) 6175666 ( 0.03%) 334.04
halflif 169 ( 0.00%) 30498 ( 0.00%) 180.46
starcra 684 ( 0.00%) 125797 ( 0.00%) 183.91
everque 1551 ( 0.00%) 366955 ( 0.00%) 236.59
unreal 272 ( 0.00%) 57073 ( 0.00%) 209.83
quake 96 ( 0.00%) 16255 ( 0.00%) 169.32
cuseeme 40 ( 0.00%) 7052 ( 0.00%) 176.30
other 9511586 ( 27.32%) 4179354646 ( 19.63%) 439.40
icmp 676770 ( 1.94%) 61133476 ( 0.29%) 90.33
ipip 1678 ( 0.00%) 263284 ( 0.00%) 156.90
ipsec 5013 ( 0.01%) 2521598 ( 0.01%) 503.01
ip6 12340 ( 0.04%) 1972415 ( 0.01%) 159.84
other 23242 ( 0.07%) 4807664 ( 0.02%) 206.85
frag 14140 ( 0.04%) 10738795 ( 0.05%) 759.46
ip6 163343 ( 0.47%) 196282742 ( 0.92%) 1201.66
tcp6 146064 ( 0.42%) 191969522 ( 0.90%) 1314.28
http(s) 12486 ( 0.04%) 9610676 ( 0.05%) 769.72
http(c) 3919 ( 0.01%) 846316 ( 0.00%) 215.95
smtp 2995 ( 0.01%) 1529680 ( 0.01%) 510.74
ssh 85 ( 0.00%) 20942 ( 0.00%) 246.38
dns 4 ( 0.00%) 813 ( 0.00%) 203.25
bgp 418 ( 0.00%) 48140 ( 0.00%) 115.17
other 126157 ( 0.36%) 179912955 ( 0.85%) 1426.10
udp6 11209 ( 0.03%) 2475927 ( 0.01%) 220.89
dns 9670 ( 0.03%) 2128412 ( 0.01%) 220.10
other 1539 ( 0.00%) 347515 ( 0.00%) 225.81
icmp6 4135 ( 0.01%) 498047 ( 0.00%) 120.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1905 ( 0.01%) 1335166 ( 0.01%) 700.87
tcpdump file: 200906091400.dump.gz (864.35 MB)