Traffic Trace Info
DumpFile: 200906121400.dump
FileSize: 2570.85MB
Id: 200906121400
StartTime: Fri Jun 12 14:00:00 2009
EndTime: Fri Jun 12 14:15:01 2009
TotalTime: 900.62 seconds
TotalCapSize: 1983.93MB CapLen: 96 bytes
# of packets: 38463932 (25859.47MB)
AvgRate: 240.88Mbps stddev:16.05M
IP flow (unique src/dst pair) Information
# of flows: 1372456 (avg. 28.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.5% 1.5% 0.8% 0.7% 0.7% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 821491
Top 10 bandwidth usage (bytes/total in %):
25.2% 7.7% 5.2% 4.9% 4.7% 3.2% 3.1% 3.1% 2.5% 2.4%
# of IPv6 addresses: 849
Top 10 bandwidth usage (bytes/total in %):
93.8% 93.8% 0.9% 0.8% 0.7% 0.7% 0.6% 0.6% 0.5% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200906121400.pktlen.png)
detailed numbers
[ 32- 63]: 8423188
[ 64- 127]: 8876121
[ 128- 255]: 1775896
[ 256- 511]: 1045796
[ 512- 1023]: 1219423
[ 1024- 2047]: 17123508
Protocol Breakdown
![[protocol breakdown chart]](200906121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38463932 (100.00%) 27115621220 (100.00%) 704.96
ip 38306052 ( 99.59%) 26919762836 ( 99.28%) 702.75
tcp 27215750 ( 70.76%) 22186509132 ( 81.82%) 815.21
http(s) 9754265 ( 25.36%) 13270887593 ( 48.94%) 1360.52
http(c) 6013156 ( 15.63%) 674561914 ( 2.49%) 112.18
squid 592391 ( 1.54%) 267714130 ( 0.99%) 451.92
smtp 308224 ( 0.80%) 119374631 ( 0.44%) 387.30
nntp 147 ( 0.00%) 17183 ( 0.00%) 116.89
ftp 22799 ( 0.06%) 4255661 ( 0.02%) 186.66
pop3 13825 ( 0.04%) 6249757 ( 0.02%) 452.06
imap 4317 ( 0.01%) 1077803 ( 0.00%) 249.66
telnet 58227 ( 0.15%) 4291220 ( 0.02%) 73.70
ssh 97658 ( 0.25%) 13147732 ( 0.05%) 134.63
dns 5583 ( 0.01%) 6577884 ( 0.02%) 1178.20
bgp 142 ( 0.00%) 52272 ( 0.00%) 368.11
napster 14585 ( 0.04%) 1368350 ( 0.01%) 93.82
realaud 22561 ( 0.06%) 1922846 ( 0.01%) 85.23
rtsp 410512 ( 1.07%) 139802246 ( 0.52%) 340.56
icecast 33095 ( 0.09%) 23135831 ( 0.09%) 699.07
hotline 8 ( 0.00%) 1518 ( 0.00%) 189.75
other 9863871 ( 25.64%) 7651975905 ( 28.22%) 775.76
udp 10306409 ( 26.79%) 4641967914 ( 17.12%) 450.40
dns 1216027 ( 3.16%) 259293059 ( 0.96%) 213.23
rip 2 ( 0.00%) 295 ( 0.00%) 147.50
realaud 7790 ( 0.02%) 515280 ( 0.00%) 66.15
halflif 111 ( 0.00%) 17287 ( 0.00%) 155.74
starcra 478 ( 0.00%) 96321 ( 0.00%) 201.51
everque 54801 ( 0.14%) 22689192 ( 0.08%) 414.03
unreal 149 ( 0.00%) 27650 ( 0.00%) 185.57
quake 52 ( 0.00%) 8387 ( 0.00%) 161.29
cuseeme 15 ( 0.00%) 2686 ( 0.00%) 179.07
other 9025424 ( 23.46%) 4359039277 ( 16.08%) 482.97
icmp 681363 ( 1.77%) 59083385 ( 0.22%) 86.71
ipip 1275 ( 0.00%) 200766 ( 0.00%) 157.46
ipsec 71 ( 0.00%) 11218 ( 0.00%) 158.00
ip6 24171 ( 0.06%) 13508104 ( 0.05%) 558.86
other 77013 ( 0.20%) 18482317 ( 0.07%) 239.99
frag 8107 ( 0.02%) 6297952 ( 0.02%) 776.85
ip6 157880 ( 0.41%) 195858384 ( 0.72%) 1240.55
tcp6 142681 ( 0.37%) 192214106 ( 0.71%) 1347.16
http(s) 5557 ( 0.01%) 5866105 ( 0.02%) 1055.62
http(c) 4494 ( 0.01%) 785185 ( 0.00%) 174.72
squid 4 ( 0.00%) 296 ( 0.00%) 74.00
smtp 2441 ( 0.01%) 1217087 ( 0.00%) 498.60
ssh 19 ( 0.00%) 2706 ( 0.00%) 142.42
dns 11 ( 0.00%) 4031 ( 0.00%) 366.45
bgp 414 ( 0.00%) 38250 ( 0.00%) 92.39
icecast 2 ( 0.00%) 148 ( 0.00%) 74.00
other 129739 ( 0.34%) 184300298 ( 0.68%) 1420.55
udp6 9020 ( 0.02%) 1894351 ( 0.01%) 210.02
dns 9008 ( 0.02%) 1893039 ( 0.01%) 210.15
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
other 11 ( 0.00%) 1210 ( 0.00%) 110.00
icmp6 4361 ( 0.01%) 521573 ( 0.00%) 119.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1788 ( 0.00%) 1224274 ( 0.00%) 684.72
tcpdump file: 200906121400.dump.gz (942.57 MB)