Traffic Trace Info
DumpFile: 200909041400.dump
FileSize: 1578.88MB
Id: 200909041400
StartTime: Fri Sep 4 14:00:00 2009
EndTime: Fri Sep 4 14:15:00 2009
TotalTime: 899.64 seconds
TotalCapSize: 1225.00MB CapLen: 96 bytes
# of packets: 23191114 (13021.02MB)
AvgRate: 121.41Mbps stddev:11.99M
IP flow (unique src/dst pair) Information
# of flows: 1358421 (avg. 17.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.7% 1.6% 1.6% 1.5% 1.2% 1.2% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 781334
Top 10 bandwidth usage (bytes/total in %):
15.9% 11.5% 10.7% 4.0% 4.0% 3.9% 2.9% 2.9% 2.9% 2.8%
# of IPv6 addresses: 930
Top 10 bandwidth usage (bytes/total in %):
14.0% 13.0% 8.3% 8.3% 7.5% 7.3% 6.3% 5.0% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909041400.pktlen.png)
detailed numbers
[ 32- 63]: 6060260
[ 64- 127]: 5968820
[ 128- 255]: 1394623
[ 256- 511]: 701835
[ 512- 1023]: 669080
[ 1024- 2047]: 8396496
Protocol Breakdown
![[protocol breakdown chart]](200909041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23191114 (100.00%) 13653527883 (100.00%) 588.74
ip 23169051 ( 99.90%) 13648614802 ( 99.96%) 589.09
tcp 16990207 ( 73.26%) 11153405656 ( 81.69%) 656.46
http(s) 4975667 ( 21.46%) 6404274819 ( 46.91%) 1287.12
http(c) 3934981 ( 16.97%) 528192752 ( 3.87%) 134.23
squid 798167 ( 3.44%) 208385708 ( 1.53%) 261.08
smtp 389297 ( 1.68%) 189080169 ( 1.38%) 485.70
nntp 58 ( 0.00%) 5252 ( 0.00%) 90.55
ftp 25101 ( 0.11%) 2659907 ( 0.02%) 105.97
pop3 50182 ( 0.22%) 9039244 ( 0.07%) 180.13
imap 1522 ( 0.01%) 204499 ( 0.00%) 134.36
telnet 152 ( 0.00%) 17175 ( 0.00%) 112.99
ssh 152127 ( 0.66%) 116101352 ( 0.85%) 763.19
dns 8983 ( 0.04%) 6955868 ( 0.05%) 774.34
bgp 153 ( 0.00%) 48350 ( 0.00%) 316.01
napster 402 ( 0.00%) 165384 ( 0.00%) 411.40
realaud 860 ( 0.00%) 94639 ( 0.00%) 110.05
rtsp 138372 ( 0.60%) 22601788 ( 0.17%) 163.34
icecast 3609 ( 0.02%) 798101 ( 0.01%) 221.14
hotline 4 ( 0.00%) 246 ( 0.00%) 61.50
other 6510543 ( 28.07%) 3664764243 ( 26.84%) 562.90
udp 5361841 ( 23.12%) 2425925561 ( 17.77%) 452.44
dns 1063337 ( 4.59%) 194394318 ( 1.42%) 182.82
realaud 91 ( 0.00%) 13057 ( 0.00%) 143.48
halflif 773 ( 0.00%) 53567 ( 0.00%) 69.30
starcra 2037 ( 0.01%) 183393 ( 0.00%) 90.03
everque 8132 ( 0.04%) 4491007 ( 0.03%) 552.26
unreal 84 ( 0.00%) 12788 ( 0.00%) 152.24
quake 48 ( 0.00%) 6595 ( 0.00%) 137.40
cuseeme 10 ( 0.00%) 1318 ( 0.00%) 131.80
other 4286819 ( 18.48%) 2226564467 ( 16.31%) 519.40
icmp 791233 ( 3.41%) 64648484 ( 0.47%) 81.71
ipip 315 ( 0.00%) 38558 ( 0.00%) 122.41
ipsec 171 ( 0.00%) 43770 ( 0.00%) 255.96
ip6 19442 ( 0.08%) 3494071 ( 0.03%) 179.72
other 5842 ( 0.03%) 1058702 ( 0.01%) 181.22
frag 3452 ( 0.01%) 3448645 ( 0.03%) 999.03
ip6 22063 ( 0.10%) 4913081 ( 0.04%) 222.68
tcp6 5029 ( 0.02%) 1528785 ( 0.01%) 303.99
http(s) 1365 ( 0.01%) 909378 ( 0.01%) 666.21
http(c) 1621 ( 0.01%) 150590 ( 0.00%) 92.90
smtp 647 ( 0.00%) 292272 ( 0.00%) 451.73
ssh 32 ( 0.00%) 9488 ( 0.00%) 296.50
dns 9 ( 0.00%) 1282 ( 0.00%) 142.44
bgp 101 ( 0.00%) 12364 ( 0.00%) 122.42
other 1254 ( 0.01%) 153411 ( 0.00%) 122.34
udp6 13123 ( 0.06%) 2833665 ( 0.02%) 215.93
dns 13105 ( 0.06%) 2831685 ( 0.02%) 216.08
other 18 ( 0.00%) 1980 ( 0.00%) 110.00
icmp6 3773 ( 0.02%) 436712 ( 0.00%) 115.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 108 ( 0.00%) 109839 ( 0.00%) 1017.03
tcpdump file: 200909041400.dump.gz (593.74 MB)