Traffic Trace Info
DumpFile: 200906271400.dump
FileSize: 1318.02MB
Id: 200906271400
StartTime: Sat Jun 27 14:00:00 2009
EndTime: Sat Jun 27 14:15:01 2009
TotalTime: 900.36 seconds
TotalCapSize: 1025.11MB CapLen: 96 bytes
# of packets: 19195456 (12540.24MB)
AvgRate: 116.84Mbps stddev:13.07M
IP flow (unique src/dst pair) Information
# of flows: 867029 (avg. 22.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 1.4% 1.3% 1.1% 1.1% 1.0% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 531866
Top 10 bandwidth usage (bytes/total in %):
7.6% 7.4% 6.3% 4.6% 4.3% 3.8% 2.9% 2.5% 2.5% 2.4%
# of IPv6 addresses: 819
Top 10 bandwidth usage (bytes/total in %):
24.3% 24.3% 16.8% 13.8% 13.5% 13.0% 13.0% 5.1% 5.1% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200906271400.pktlen.png)
detailed numbers
[ 32- 63]: 4156457
[ 64- 127]: 4683114
[ 128- 255]: 1105589
[ 256- 511]: 488594
[ 512- 1023]: 502594
[ 1024- 2047]: 8259108
Protocol Breakdown
![[protocol breakdown chart]](200906271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19195456 (100.00%) 13149398790 (100.00%) 685.03
ip 19131004 ( 99.66%) 13138744056 ( 99.92%) 686.78
tcp 14517904 ( 75.63%) 11243625170 ( 85.51%) 774.47
http(s) 5778407 ( 30.10%) 7939482248 ( 60.38%) 1373.99
http(c) 3585228 ( 18.68%) 375197231 ( 2.85%) 104.65
squid 282161 ( 1.47%) 100494092 ( 0.76%) 356.16
smtp 202912 ( 1.06%) 28772572 ( 0.22%) 141.80
nntp 33 ( 0.00%) 2518 ( 0.00%) 76.30
ftp 114916 ( 0.60%) 13425178 ( 0.10%) 116.83
pop3 18332 ( 0.10%) 14855899 ( 0.11%) 810.38
imap 2763 ( 0.01%) 1397297 ( 0.01%) 505.72
telnet 15073 ( 0.08%) 1200827 ( 0.01%) 79.67
ssh 25099 ( 0.13%) 3956252 ( 0.03%) 157.63
dns 2048 ( 0.01%) 172339 ( 0.00%) 84.15
bgp 229 ( 0.00%) 80272 ( 0.00%) 350.53
napster 200 ( 0.00%) 15198 ( 0.00%) 75.99
realaud 480 ( 0.00%) 76302 ( 0.00%) 158.96
rtsp 38793 ( 0.20%) 2635208 ( 0.02%) 67.93
icecast 1507 ( 0.01%) 267972 ( 0.00%) 177.82
hotline 9 ( 0.00%) 1332 ( 0.00%) 148.00
other 4449707 ( 23.18%) 2761592013 ( 21.00%) 620.62
udp 4131747 ( 21.52%) 1848586889 ( 14.06%) 447.41
dns 1183956 ( 6.17%) 212292218 ( 1.61%) 179.31
realaud 640 ( 0.00%) 43807 ( 0.00%) 68.45
halflif 47 ( 0.00%) 7543 ( 0.00%) 160.49
starcra 2881 ( 0.02%) 3081128 ( 0.02%) 1069.46
everque 191 ( 0.00%) 35216 ( 0.00%) 184.38
unreal 83 ( 0.00%) 21294 ( 0.00%) 256.55
quake 29 ( 0.00%) 3748 ( 0.00%) 129.24
cuseeme 75 ( 0.00%) 8258 ( 0.00%) 110.11
other 2943700 ( 15.34%) 1632984905 ( 12.42%) 554.74
icmp 453136 ( 2.36%) 40621237 ( 0.31%) 89.64
igmp 6 ( 0.00%) 360 ( 0.00%) 60.00
ipip 1013 ( 0.01%) 167106 ( 0.00%) 164.96
ipsec 276 ( 0.00%) 47088 ( 0.00%) 170.61
ip6 23602 ( 0.12%) 5168788 ( 0.04%) 219.00
other 3320 ( 0.02%) 527418 ( 0.00%) 158.86
frag 1530 ( 0.01%) 1490518 ( 0.01%) 974.19
ip6 64452 ( 0.34%) 10654734 ( 0.08%) 165.31
tcp6 51974 ( 0.27%) 8736458 ( 0.07%) 168.09
http(s) 2205 ( 0.01%) 1477692 ( 0.01%) 670.16
http(c) 38336 ( 0.20%) 3454177 ( 0.03%) 90.10
smtp 737 ( 0.00%) 362806 ( 0.00%) 492.27
ssh 15 ( 0.00%) 2122 ( 0.00%) 141.47
dns 9 ( 0.00%) 834 ( 0.00%) 92.67
bgp 360 ( 0.00%) 30198 ( 0.00%) 83.88
other 10312 ( 0.05%) 3408629 ( 0.03%) 330.55
udp6 6981 ( 0.04%) 1291558 ( 0.01%) 185.01
dns 6914 ( 0.04%) 1283215 ( 0.01%) 185.60
other 67 ( 0.00%) 8343 ( 0.00%) 124.52
icmp6 5328 ( 0.03%) 612646 ( 0.00%) 114.99
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 138 ( 0.00%) 9856 ( 0.00%) 71.42
tcpdump file: 200906271400.dump.gz (461.05 MB)