Traffic Trace Info
DumpFile: 200906251400.dump
FileSize: 2607.69MB
Id: 200906251400
StartTime: Thu Jun 25 14:00:00 2009
EndTime: Thu Jun 25 14:15:01 2009
TotalTime: 900.48 seconds
TotalCapSize: 2039.95MB CapLen: 96 bytes
# of packets: 37206929 (22279.52MB)
AvgRate: 207.54Mbps stddev:17.95M
IP flow (unique src/dst pair) Information
# of flows: 1319481 (avg. 28.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.0% 1.0% 0.9% 0.8% 0.8% 0.7% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 778222
Top 10 bandwidth usage (bytes/total in %):
21.4% 7.8% 4.7% 4.1% 3.7% 3.1% 3.1% 2.9% 1.7% 1.6%
# of IPv6 addresses: 845
Top 10 bandwidth usage (bytes/total in %):
96.6% 96.6% 1.1% 0.8% 0.6% 0.6% 0.3% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200906251400.pktlen.png)
detailed numbers
[ 32- 63]: 7477065
[ 64- 127]: 10957761
[ 128- 255]: 2313514
[ 256- 511]: 946715
[ 512- 1023]: 1367133
[ 1024- 2047]: 14144741
Protocol Breakdown
![[protocol breakdown chart]](200906251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37206929 (100.00%) 23361772810 (100.00%) 627.89
ip 37054295 ( 99.59%) 23162295360 ( 99.15%) 625.09
tcp 29952278 ( 80.50%) 20576870545 ( 88.08%) 686.99
http(s) 9492721 ( 25.51%) 12724777081 ( 54.47%) 1340.48
http(c) 6218435 ( 16.71%) 754034013 ( 3.23%) 121.26
squid 576567 ( 1.55%) 283792354 ( 1.21%) 492.21
smtp 316339 ( 0.85%) 81185541 ( 0.35%) 256.64
nntp 71 ( 0.00%) 7027 ( 0.00%) 98.97
ftp 282723 ( 0.76%) 68243980 ( 0.29%) 241.38
pop3 12512 ( 0.03%) 2865367 ( 0.01%) 229.01
imap 5469 ( 0.01%) 1099958 ( 0.00%) 201.13
telnet 22354 ( 0.06%) 1642949 ( 0.01%) 73.50
ssh 4501094 ( 12.10%) 701687125 ( 3.00%) 155.89
dns 8062 ( 0.02%) 6916006 ( 0.03%) 857.85
bgp 149 ( 0.00%) 55713 ( 0.00%) 373.91
napster 461 ( 0.00%) 130451 ( 0.00%) 282.97
realaud 556 ( 0.00%) 74055 ( 0.00%) 133.19
rtsp 97934 ( 0.26%) 114978992 ( 0.49%) 1174.05
icecast 16394 ( 0.04%) 8613257 ( 0.04%) 525.39
hotline 14 ( 0.00%) 1288 ( 0.00%) 92.00
other 8400316 ( 22.58%) 5826702181 ( 24.94%) 693.63
udp 6330039 ( 17.01%) 2412275070 ( 10.33%) 381.08
dns 1508459 ( 4.05%) 293400202 ( 1.26%) 194.50
realaud 1010 ( 0.00%) 69197 ( 0.00%) 68.51
halflif 96 ( 0.00%) 16728 ( 0.00%) 174.25
starcra 490 ( 0.00%) 97317 ( 0.00%) 198.61
everque 476 ( 0.00%) 63151 ( 0.00%) 132.67
unreal 178 ( 0.00%) 41444 ( 0.00%) 232.83
quake 54 ( 0.00%) 7641 ( 0.00%) 141.50
cuseeme 16 ( 0.00%) 2354 ( 0.00%) 147.12
other 4818358 ( 12.95%) 2118049659 ( 9.07%) 439.58
icmp 539489 ( 1.45%) 47420164 ( 0.20%) 87.90
igmp 4 ( 0.00%) 240 ( 0.00%) 60.00
ipip 1130 ( 0.00%) 183780 ( 0.00%) 162.64
ipsec 273 ( 0.00%) 46638 ( 0.00%) 170.84
ip6 197308 ( 0.53%) 117230427 ( 0.50%) 594.15
other 33774 ( 0.09%) 8268496 ( 0.04%) 244.82
frag 7806 ( 0.02%) 8103043 ( 0.03%) 1038.05
ip6 152634 ( 0.41%) 199477450 ( 0.85%) 1306.90
tcp6 138959 ( 0.37%) 197157923 ( 0.84%) 1418.82
http(s) 3207 ( 0.01%) 3218322 ( 0.01%) 1003.53
http(c) 3697 ( 0.01%) 699568 ( 0.00%) 189.23
smtp 708 ( 0.00%) 282408 ( 0.00%) 398.88
ssh 41 ( 0.00%) 4278 ( 0.00%) 104.34
dns 7 ( 0.00%) 622 ( 0.00%) 88.86
bgp 404 ( 0.00%) 36591 ( 0.00%) 90.57
other 130895 ( 0.35%) 192916134 ( 0.83%) 1473.82
udp6 9326 ( 0.03%) 1750761 ( 0.01%) 187.73
dns 9279 ( 0.02%) 1745591 ( 0.01%) 188.12
other 47 ( 0.00%) 5170 ( 0.00%) 110.00
icmp6 4278 ( 0.01%) 529538 ( 0.00%) 123.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 41 ( 0.00%) 35148 ( 0.00%) 857.27
tcpdump file: 200906251400.dump.gz (977.32 MB)