Traffic Trace Info
DumpFile: 200906281400.dump
FileSize: 1132.03MB
Id: 200906281400
StartTime: Sun Jun 28 14:00:00 2009
EndTime: Sun Jun 28 14:15:01 2009
TotalTime: 900.71 seconds
TotalCapSize: 880.06MB CapLen: 96 bytes
# of packets: 16512161 (10839.33MB)
AvgRate: 100.95Mbps stddev:11.52M
IP flow (unique src/dst pair) Information
# of flows: 879921 (avg. 18.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 4.2% 2.6% 1.6% 1.3% 1.2% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 578355
Top 10 bandwidth usage (bytes/total in %):
9.7% 8.5% 8.2% 4.8% 4.4% 4.3% 3.4% 3.2% 2.9% 2.7%
# of IPv6 addresses: 762
Top 10 bandwidth usage (bytes/total in %):
41.2% 29.3% 11.9% 11.2% 6.3% 5.5% 5.5% 3.7% 3.7% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200906281400.pktlen.png)
detailed numbers
[ 32- 63]: 3509640
[ 64- 127]: 4072414
[ 128- 255]: 1017770
[ 256- 511]: 462915
[ 512- 1023]: 387926
[ 1024- 2047]: 7061496
Protocol Breakdown
![[protocol breakdown chart]](200906281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16512161 (100.00%) 11365860058 (100.00%) 688.33
ip 16488914 ( 99.86%) 11360921801 ( 99.96%) 689.00
tcp 12486670 ( 75.62%) 9956323034 ( 87.60%) 797.36
http(s) 4752237 ( 28.78%) 6492625051 ( 57.12%) 1366.23
http(c) 2590751 ( 15.69%) 283667717 ( 2.50%) 109.49
squid 326164 ( 1.98%) 204749043 ( 1.80%) 627.75
smtp 218724 ( 1.32%) 34308004 ( 0.30%) 156.86
nntp 8 ( 0.00%) 615 ( 0.00%) 76.88
ftp 131064 ( 0.79%) 28455718 ( 0.25%) 217.11
pop3 7166 ( 0.04%) 2327176 ( 0.02%) 324.75
imap 1940 ( 0.01%) 993430 ( 0.01%) 512.08
telnet 9203 ( 0.06%) 717468 ( 0.01%) 77.96
ssh 25885 ( 0.16%) 6727538 ( 0.06%) 259.90
dns 867 ( 0.01%) 86326 ( 0.00%) 99.57
bgp 186 ( 0.00%) 58322 ( 0.00%) 313.56
napster 56 ( 0.00%) 9767 ( 0.00%) 174.41
realaud 288 ( 0.00%) 42035 ( 0.00%) 145.95
rtsp 29389 ( 0.18%) 1950237 ( 0.02%) 66.36
icecast 1046 ( 0.01%) 149794 ( 0.00%) 143.21
other 4391664 ( 26.60%) 2899409287 ( 25.51%) 660.21
udp 3547530 ( 21.48%) 1360611688 ( 11.97%) 383.54
dns 1147991 ( 6.95%) 199657128 ( 1.76%) 173.92
realaud 2755 ( 0.02%) 170608 ( 0.00%) 61.93
halflif 35 ( 0.00%) 5932 ( 0.00%) 169.49
starcra 200 ( 0.00%) 35501 ( 0.00%) 177.50
everque 551 ( 0.00%) 321693 ( 0.00%) 583.83
unreal 68 ( 0.00%) 16508 ( 0.00%) 242.76
quake 32 ( 0.00%) 4768 ( 0.00%) 149.00
cuseeme 16 ( 0.00%) 2538 ( 0.00%) 158.62
other 2395768 ( 14.51%) 1160300513 ( 10.21%) 484.31
icmp 427156 ( 2.59%) 38751680 ( 0.34%) 90.72
ipip 1670 ( 0.01%) 270158 ( 0.00%) 161.77
ipsec 275 ( 0.00%) 46906 ( 0.00%) 170.57
ip6 23153 ( 0.14%) 4577947 ( 0.04%) 197.73
other 2460 ( 0.01%) 340388 ( 0.00%) 138.37
frag 909 ( 0.01%) 1086301 ( 0.01%) 1195.05
ip6 23247 ( 0.14%) 4938257 ( 0.04%) 212.43
tcp6 12491 ( 0.08%) 3155129 ( 0.03%) 252.59
http(s) 2132 ( 0.01%) 1453615 ( 0.01%) 681.81
http(c) 2999 ( 0.02%) 675564 ( 0.01%) 225.26
smtp 560 ( 0.00%) 282180 ( 0.00%) 503.89
ssh 40 ( 0.00%) 4144 ( 0.00%) 103.60
bgp 378 ( 0.00%) 32330 ( 0.00%) 85.53
other 6382 ( 0.04%) 707296 ( 0.01%) 110.83
udp6 6485 ( 0.04%) 1256094 ( 0.01%) 193.69
dns 6466 ( 0.04%) 1254004 ( 0.01%) 193.94
other 19 ( 0.00%) 2090 ( 0.00%) 110.00
icmp6 4229 ( 0.03%) 512301 ( 0.00%) 121.14
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 11 ( 0.00%) 10517 ( 0.00%) 956.09
tcpdump file: 200906281400.dump.gz (402.14 MB)