Traffic Trace Info
DumpFile: 200906161400.dump
FileSize: 2974.76MB
Id: 200906161400
StartTime: Tue Jun 16 14:00:00 2009
EndTime: Tue Jun 16 14:15:00 2009
TotalTime: 900.00 seconds
TotalCapSize: -1799.05MB CapLen: 96 bytes
# of packets: 44420193 (27175.58MB)
AvgRate: 253.30Mbps stddev:22.21M
IP flow (unique src/dst pair) Information
# of flows: 1555407 (avg. 28.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.7% 1.5% 0.8% 0.8% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 925244
Top 10 bandwidth usage (bytes/total in %):
28.9% 6.4% 5.6% 4.6% 2.8% 2.6% 2.5% 2.3% 2.3% 2.1%
# of IPv6 addresses: 826
Top 10 bandwidth usage (bytes/total in %):
14.9% 14.1% 11.8% 10.7% 10.7% 10.0% 8.9% 6.1% 6.0% 5.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200906161400.pktlen.png)
detailed numbers
[ 32- 63]: 9924580
[ 64- 127]: 11722264
[ 128- 255]: 2392658
[ 256- 511]: 1221282
[ 512- 1023]: 1251427
[ 1024- 2047]: 17907982
Protocol Breakdown
![[protocol breakdown chart]](200906161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44420193 (100.00%) 28495663361 (100.00%) 641.50
ip 44387676 ( 99.93%) 28484409863 ( 99.96%) 641.72
tcp 30538226 ( 68.75%) 22939377548 ( 80.50%) 751.17
http(s) 9520922 ( 21.43%) 12325222742 ( 43.25%) 1294.54
http(c) 7209373 ( 16.23%) 1232278458 ( 4.32%) 170.93
squid 597178 ( 1.34%) 286460581 ( 1.01%) 479.69
smtp 256074 ( 0.58%) 99328607 ( 0.35%) 387.89
nntp 56 ( 0.00%) 4992 ( 0.00%) 89.14
ftp 194034 ( 0.44%) 157432212 ( 0.55%) 811.36
pop3 19280 ( 0.04%) 8890680 ( 0.03%) 461.13
imap 2734 ( 0.01%) 463765 ( 0.00%) 169.63
telnet 12453 ( 0.03%) 1838541 ( 0.01%) 147.64
ssh 312736 ( 0.70%) 49657681 ( 0.17%) 158.78
dns 6747 ( 0.02%) 6571415 ( 0.02%) 973.98
bgp 164 ( 0.00%) 72865 ( 0.00%) 444.30
napster 3737 ( 0.01%) 2581284 ( 0.01%) 690.74
realaud 1114 ( 0.00%) 135476 ( 0.00%) 121.61
rtsp 143048 ( 0.32%) 80640636 ( 0.28%) 563.73
icecast 6244 ( 0.01%) 1234322 ( 0.00%) 197.68
hotline 11 ( 0.00%) 1269 ( 0.00%) 115.36
other 12252134 ( 27.58%) 8686471998 ( 30.48%) 708.98
udp 13066323 ( 29.42%) 5471697880 ( 19.20%) 418.76
dns 1534398 ( 3.45%) 295581817 ( 1.04%) 192.64
realaud 17324 ( 0.04%) 5995800 ( 0.02%) 346.10
halflif 263 ( 0.00%) 31350 ( 0.00%) 119.20
starcra 593 ( 0.00%) 114178 ( 0.00%) 192.54
everque 2255 ( 0.01%) 1672042 ( 0.01%) 741.48
unreal 161 ( 0.00%) 35755 ( 0.00%) 222.08
quake 165 ( 0.00%) 20122 ( 0.00%) 121.95
cuseeme 22 ( 0.00%) 2828 ( 0.00%) 128.55
other 11487975 ( 25.86%) 5165228934 ( 18.13%) 449.62
icmp 753357 ( 1.70%) 67231670 ( 0.24%) 89.24
ipip 1058 ( 0.00%) 168880 ( 0.00%) 159.62
ipsec 79 ( 0.00%) 12482 ( 0.00%) 158.00
ip6 10695 ( 0.02%) 1712035 ( 0.01%) 160.08
other 17938 ( 0.04%) 4209368 ( 0.01%) 234.66
frag 64186 ( 0.14%) 48478141 ( 0.17%) 755.28
ip6 32517 ( 0.07%) 11253498 ( 0.04%) 346.08
tcp6 16069 ( 0.04%) 7476620 ( 0.03%) 465.28
http(s) 4105 ( 0.01%) 4288375 ( 0.02%) 1044.67
http(c) 3752 ( 0.01%) 680418 ( 0.00%) 181.35
smtp 1481 ( 0.00%) 742550 ( 0.00%) 501.38
ssh 33 ( 0.00%) 4390 ( 0.00%) 133.03
dns 5 ( 0.00%) 578 ( 0.00%) 115.60
bgp 405 ( 0.00%) 36790 ( 0.00%) 90.84
other 6288 ( 0.01%) 1723519 ( 0.01%) 274.10
udp6 9200 ( 0.02%) 1904106 ( 0.01%) 206.97
dns 9190 ( 0.02%) 1903006 ( 0.01%) 207.07
other 10 ( 0.00%) 1100 ( 0.00%) 110.00
icmp6 5435 ( 0.01%) 649235 ( 0.00%) 119.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1783 ( 0.00%) 1219457 ( 0.00%) 683.94
tcpdump file: 200906161400.dump.gz (1106.58 MB)