Traffic Trace Info
DumpFile: 200909031400.dump
FileSize: 1489.98MB
Id: 200909031400
StartTime: Thu Sep 3 14:00:00 2009
EndTime: Thu Sep 3 14:15:01 2009
TotalTime: 900.79 seconds
TotalCapSize: 1157.33MB CapLen: 96 bytes
# of packets: 21800427 (12158.76MB)
AvgRate: 113.23Mbps stddev:13.52M
IP flow (unique src/dst pair) Information
# of flows: 1502007 (avg. 14.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 1.4% 1.3% 1.2% 1.0% 0.9% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 888339
Top 10 bandwidth usage (bytes/total in %):
16.6% 7.7% 4.7% 4.1% 3.4% 3.1% 2.3% 2.3% 2.3% 2.0%
# of IPv6 addresses: 951
Top 10 bandwidth usage (bytes/total in %):
19.3% 8.7% 7.5% 7.0% 6.5% 5.9% 5.8% 5.3% 4.7% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909031400.pktlen.png)
detailed numbers
[ 32- 63]: 5964458
[ 64- 127]: 5455494
[ 128- 255]: 1204035
[ 256- 511]: 874845
[ 512- 1023]: 727102
[ 1024- 2047]: 7574493
Protocol Breakdown
![[protocol breakdown chart]](200909031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21800427 (100.00%) 12749385070 (100.00%) 584.82
ip 21776950 ( 99.89%) 12744517016 ( 99.96%) 585.23
tcp 16581073 ( 76.06%) 11114888757 ( 87.18%) 670.34
http(s) 5639175 ( 25.87%) 6952483016 ( 54.53%) 1232.89
http(c) 3956166 ( 18.15%) 657369339 ( 5.16%) 166.16
squid 713862 ( 3.27%) 208908823 ( 1.64%) 292.65
smtp 365473 ( 1.68%) 137746106 ( 1.08%) 376.90
nntp 4 ( 0.00%) 482 ( 0.00%) 120.50
ftp 14032 ( 0.06%) 1507711 ( 0.01%) 107.45
pop3 24542 ( 0.11%) 6412669 ( 0.05%) 261.29
imap 4071 ( 0.02%) 1368880 ( 0.01%) 336.25
telnet 483 ( 0.00%) 59139 ( 0.00%) 122.44
ssh 30033 ( 0.14%) 5767889 ( 0.05%) 192.05
dns 5784 ( 0.03%) 6773183 ( 0.05%) 1171.02
bgp 219 ( 0.00%) 98270 ( 0.00%) 448.72
napster 164 ( 0.00%) 24889 ( 0.00%) 151.76
realaud 1515 ( 0.01%) 109700 ( 0.00%) 72.41
rtsp 185230 ( 0.85%) 49568948 ( 0.39%) 267.61
icecast 13405 ( 0.06%) 3117672 ( 0.02%) 232.58
hotline 18 ( 0.00%) 3019 ( 0.00%) 167.72
other 5626855 ( 25.81%) 3083509620 ( 24.19%) 548.00
udp 4231138 ( 19.41%) 1523075072 ( 11.95%) 359.97
dns 1168169 ( 5.36%) 212256189 ( 1.66%) 181.70
realaud 104 ( 0.00%) 15261 ( 0.00%) 146.74
halflif 1022 ( 0.00%) 69483 ( 0.00%) 67.99
starcra 268 ( 0.00%) 54279 ( 0.00%) 202.53
everque 374 ( 0.00%) 69716 ( 0.00%) 186.41
unreal 104 ( 0.00%) 20792 ( 0.00%) 199.92
quake 54 ( 0.00%) 7521 ( 0.00%) 139.28
cuseeme 14 ( 0.00%) 1859 ( 0.00%) 132.79
other 3060559 ( 14.04%) 1310408496 ( 10.28%) 428.16
icmp 864847 ( 3.97%) 89912879 ( 0.71%) 103.96
ipip 308 ( 0.00%) 36804 ( 0.00%) 119.49
ipsec 98 ( 0.00%) 15484 ( 0.00%) 158.00
ip6 20631 ( 0.09%) 3795160 ( 0.03%) 183.95
other 78855 ( 0.36%) 12792860 ( 0.10%) 162.23
frag 8000 ( 0.04%) 6768697 ( 0.05%) 846.09
ip6 23477 ( 0.11%) 4868054 ( 0.04%) 207.35
tcp6 5637 ( 0.03%) 1406578 ( 0.01%) 249.53
http(s) 802 ( 0.00%) 163795 ( 0.00%) 204.23
http(c) 1672 ( 0.01%) 155289 ( 0.00%) 92.88
smtp 2040 ( 0.01%) 965181 ( 0.01%) 473.13
imap 1 ( 0.00%) 139 ( 0.00%) 139.00
dns 35 ( 0.00%) 3825 ( 0.00%) 109.29
bgp 104 ( 0.00%) 12845 ( 0.00%) 123.51
other 983 ( 0.00%) 105504 ( 0.00%) 107.33
udp6 13718 ( 0.06%) 2936278 ( 0.02%) 214.05
dns 13709 ( 0.06%) 2935288 ( 0.02%) 214.11
other 9 ( 0.00%) 990 ( 0.00%) 110.00
icmp6 4044 ( 0.02%) 479240 ( 0.00%) 118.51
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 48 ( 0.00%) 41878 ( 0.00%) 872.46
tcpdump file: 200909031400.dump.gz (572.78 MB)