Traffic Trace Info
DumpFile: 200909011400.dump
FileSize: 1704.42MB
Id: 200909011400
StartTime: Tue Sep 1 14:00:00 2009
EndTime: Tue Sep 1 14:15:01 2009
TotalTime: 900.33 seconds
TotalCapSize: 1317.61MB CapLen: 96 bytes
# of packets: 25348995 (13907.69MB)
AvgRate: 129.59Mbps stddev:10.95M
IP flow (unique src/dst pair) Information
# of flows: 1453896 (avg. 17.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.7% 2.1% 2.1% 1.5% 1.0% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 893293
Top 10 bandwidth usage (bytes/total in %):
22.3% 6.6% 6.2% 5.9% 5.2% 3.4% 3.0% 3.0% 2.8% 2.8%
# of IPv6 addresses: 1443
Top 10 bandwidth usage (bytes/total in %):
76.6% 76.6% 2.2% 1.7% 1.7% 1.7% 1.7% 1.5% 1.4% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909011400.pktlen.png)
detailed numbers
[ 32- 63]: 7711140
[ 64- 127]: 5931828
[ 128- 255]: 1264941
[ 256- 511]: 813660
[ 512- 1023]: 700539
[ 1024- 2047]: 8926887
Protocol Breakdown
![[protocol breakdown chart]](200909011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25348995 (100.00%) 14583267389 (100.00%) 575.30
ip 25313129 ( 99.86%) 14560021785 ( 99.84%) 575.20
tcp 18562891 ( 73.23%) 12165465134 ( 83.42%) 655.36
http(s) 5446252 ( 21.49%) 6976354195 ( 47.84%) 1280.95
http(c) 4292329 ( 16.93%) 687153117 ( 4.71%) 160.09
squid 734216 ( 2.90%) 168890473 ( 1.16%) 230.03
smtp 359148 ( 1.42%) 194439933 ( 1.33%) 541.39
nntp 26 ( 0.00%) 2130 ( 0.00%) 81.92
ftp 7251 ( 0.03%) 874812 ( 0.01%) 120.65
pop3 13588 ( 0.05%) 5477270 ( 0.04%) 403.10
imap 3252 ( 0.01%) 744483 ( 0.01%) 228.93
telnet 494 ( 0.00%) 127276 ( 0.00%) 257.64
ssh 207763 ( 0.82%) 29581673 ( 0.20%) 142.38
dns 5969 ( 0.02%) 6781697 ( 0.05%) 1136.15
bgp 152 ( 0.00%) 56785 ( 0.00%) 373.59
napster 454 ( 0.00%) 325934 ( 0.00%) 717.92
realaud 380 ( 0.00%) 38366 ( 0.00%) 100.96
rtsp 218003 ( 0.86%) 25377883 ( 0.17%) 116.41
icecast 2113 ( 0.01%) 242629 ( 0.00%) 114.83
hotline 18 ( 0.00%) 1805 ( 0.00%) 100.28
other 7271387 ( 28.69%) 4068872444 ( 27.90%) 559.57
udp 5827315 ( 22.99%) 2289782752 ( 15.70%) 392.94
dns 1203885 ( 4.75%) 223270691 ( 1.53%) 185.46
realaud 71 ( 0.00%) 12346 ( 0.00%) 173.89
halflif 1834 ( 0.01%) 122304 ( 0.00%) 66.69
starcra 1343 ( 0.01%) 136452 ( 0.00%) 101.60
everque 2026 ( 0.01%) 379401 ( 0.00%) 187.27
unreal 132 ( 0.00%) 24445 ( 0.00%) 185.19
quake 52 ( 0.00%) 10066 ( 0.00%) 193.58
cuseeme 22 ( 0.00%) 3702 ( 0.00%) 168.27
other 4617552 ( 18.22%) 2065647000 ( 14.16%) 447.35
icmp 828943 ( 3.27%) 81826629 ( 0.56%) 98.71
ipip 357 ( 0.00%) 44270 ( 0.00%) 124.01
ipsec 100 ( 0.00%) 15800 ( 0.00%) 158.00
ip6 22722 ( 0.09%) 5214772 ( 0.04%) 229.50
other 70801 ( 0.28%) 17672428 ( 0.12%) 249.61
frag 2429 ( 0.01%) 2392563 ( 0.02%) 985.00
ip6 35866 ( 0.14%) 23245604 ( 0.16%) 648.12
tcp6 17845 ( 0.07%) 19693549 ( 0.14%) 1103.59
http(s) 13000 ( 0.05%) 18708017 ( 0.13%) 1439.08
http(c) 3116 ( 0.01%) 283297 ( 0.00%) 90.92
smtp 1126 ( 0.00%) 638358 ( 0.00%) 566.93
dns 14 ( 0.00%) 1776 ( 0.00%) 126.86
bgp 103 ( 0.00%) 12792 ( 0.00%) 124.19
other 486 ( 0.00%) 49309 ( 0.00%) 101.46
udp6 13976 ( 0.06%) 3029964 ( 0.02%) 216.80
dns 13317 ( 0.05%) 2914300 ( 0.02%) 218.84
quake 1 ( 0.00%) 103 ( 0.00%) 103.00
other 658 ( 0.00%) 115561 ( 0.00%) 175.62
icmp6 3961 ( 0.02%) 469644 ( 0.00%) 118.57
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 54 ( 0.00%) 48367 ( 0.00%) 895.69
tcpdump file: 200909011400.dump.gz (646.85 MB)