Traffic Trace Info
DumpFile: 200906201400.dump
FileSize: 2026.37MB
Id: 200906201400
StartTime: Sat Jun 20 14:00:01 2009
EndTime: Sat Jun 20 14:15:00 2009
TotalTime: 899.56 seconds
TotalCapSize: 1571.39MB CapLen: 96 bytes
# of packets: 29816651 (19873.92MB)
AvgRate: 185.37Mbps stddev:19.19M
IP flow (unique src/dst pair) Information
# of flows: 1386645 (avg. 21.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.9% 2.7% 2.0% 1.3% 1.3% 1.1% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 854136
Top 10 bandwidth usage (bytes/total in %):
20.6% 5.9% 5.6% 5.0% 4.5% 3.2% 3.0% 2.9% 2.8% 2.8%
# of IPv6 addresses: 828
Top 10 bandwidth usage (bytes/total in %):
27.0% 20.1% 18.7% 16.0% 15.9% 15.8% 8.3% 7.3% 4.1% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200906201400.pktlen.png)
detailed numbers
[ 32- 63]: 6790828
[ 64- 127]: 6517650
[ 128- 255]: 1651062
[ 256- 511]: 974929
[ 512- 1023]: 809118
[ 1024- 2047]: 13073064
Protocol Breakdown
![[protocol breakdown chart]](200906201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29816651 (100.00%) 20839317801 (100.00%) 698.92
ip 29783721 ( 99.89%) 20831060705 ( 99.96%) 699.41
tcp 21727611 ( 72.87%) 17285943741 ( 82.95%) 795.57
http(s) 8081158 ( 27.10%) 10951116837 ( 52.55%) 1355.14
http(c) 4088010 ( 13.71%) 587831628 ( 2.82%) 143.79
squid 525707 ( 1.76%) 206371384 ( 0.99%) 392.56
smtp 248865 ( 0.83%) 61228117 ( 0.29%) 246.03
nntp 63 ( 0.00%) 4914 ( 0.00%) 78.00
ftp 97658 ( 0.33%) 23575772 ( 0.11%) 241.41
pop3 15373 ( 0.05%) 7535102 ( 0.04%) 490.15
imap 1777 ( 0.01%) 228894 ( 0.00%) 128.81
telnet 65638 ( 0.22%) 4860804 ( 0.02%) 74.05
ssh 123656 ( 0.41%) 17426128 ( 0.08%) 140.92
dns 6134 ( 0.02%) 6578837 ( 0.03%) 1072.52
bgp 180 ( 0.00%) 64064 ( 0.00%) 355.91
napster 893 ( 0.00%) 232786 ( 0.00%) 260.68
realaud 445 ( 0.00%) 56417 ( 0.00%) 126.78
rtsp 105753 ( 0.35%) 40353684 ( 0.19%) 381.58
icecast 15843 ( 0.05%) 8810585 ( 0.04%) 556.12
hotline 35 ( 0.00%) 4080 ( 0.00%) 116.57
other 8350204 ( 28.01%) 5369650506 ( 25.77%) 643.06
udp 7267093 ( 24.37%) 3219607003 ( 15.45%) 443.04
dns 1133202 ( 3.80%) 208652805 ( 1.00%) 184.13
realaud 2063 ( 0.01%) 135522 ( 0.00%) 65.69
halflif 110 ( 0.00%) 16632 ( 0.00%) 151.20
starcra 857 ( 0.00%) 216186 ( 0.00%) 252.26
everque 332 ( 0.00%) 59273 ( 0.00%) 178.53
unreal 167 ( 0.00%) 32070 ( 0.00%) 192.04
quake 237 ( 0.00%) 19761 ( 0.00%) 83.38
cuseeme 18 ( 0.00%) 3129 ( 0.00%) 173.83
other 6126362 ( 20.55%) 3010030968 ( 14.44%) 491.32
icmp 555978 ( 1.86%) 61971622 ( 0.30%) 111.46
ipip 1191 ( 0.00%) 182830 ( 0.00%) 153.51
ip6 185914 ( 0.62%) 215725129 ( 1.04%) 1160.35
other 45934 ( 0.15%) 47630380 ( 0.23%) 1036.93
frag 17206 ( 0.06%) 13065167 ( 0.06%) 759.34
ip6 32930 ( 0.11%) 8257096 ( 0.04%) 250.75
tcp6 19820 ( 0.07%) 5202663 ( 0.02%) 262.50
http(s) 2429 ( 0.01%) 1548132 ( 0.01%) 637.35
http(c) 4727 ( 0.02%) 900725 ( 0.00%) 190.55
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 1195 ( 0.00%) 438235 ( 0.00%) 366.72
ftp 1773 ( 0.01%) 172423 ( 0.00%) 97.25
ssh 32 ( 0.00%) 5312 ( 0.00%) 166.00
bgp 400 ( 0.00%) 35928 ( 0.00%) 89.82
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 9261 ( 0.03%) 2101686 ( 0.01%) 226.94
udp6 6179 ( 0.02%) 1226295 ( 0.01%) 198.46
dns 6157 ( 0.02%) 1223875 ( 0.01%) 198.78
other 22 ( 0.00%) 2420 ( 0.00%) 110.00
icmp6 5118 ( 0.02%) 606115 ( 0.00%) 118.43
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1783 ( 0.01%) 1217943 ( 0.01%) 683.09
tcpdump file: 200906201400.dump.gz (726.67 MB)