Traffic Trace Info
DumpFile: 200909051400.dump
FileSize: 1498.03MB
Id: 200909051400
StartTime: Sat Sep 5 14:00:01 2009
EndTime: Sat Sep 5 14:15:00 2009
TotalTime: 899.73 seconds
TotalCapSize: 1156.24MB CapLen: 96 bytes
# of packets: 22399088 (13298.89MB)
AvgRate: 123.97Mbps stddev:13.03M
IP flow (unique src/dst pair) Information
# of flows: 1504296 (avg. 14.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 3.0% 2.4% 1.9% 1.2% 1.1% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 881910
Top 10 bandwidth usage (bytes/total in %):
18.6% 7.9% 5.0% 4.3% 3.7% 3.6% 3.5% 3.5% 3.2% 2.5%
# of IPv6 addresses: 1583
Top 10 bandwidth usage (bytes/total in %):
75.4% 71.4% 4.1% 3.0% 2.5% 2.3% 2.0% 1.8% 1.7% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909051400.pktlen.png)
detailed numbers
[ 32- 63]: 5415395
[ 64- 127]: 5693714
[ 128- 255]: 1176160
[ 256- 511]: 783868
[ 512- 1023]: 648638
[ 1024- 2047]: 8681313
Protocol Breakdown
![[protocol breakdown chart]](200909051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22399088 (100.00%) 13944893263 (100.00%) 622.57
ip 22242484 ( 99.30%) 13928213037 ( 99.88%) 626.20
tcp 15304041 ( 68.32%) 11009737754 ( 78.95%) 719.40
http(s) 4472268 ( 19.97%) 5858007934 ( 42.01%) 1309.85
http(c) 2799706 ( 12.50%) 356125936 ( 2.55%) 127.20
squid 784720 ( 3.50%) 155732129 ( 1.12%) 198.46
smtp 262748 ( 1.17%) 43369013 ( 0.31%) 165.06
nntp 116 ( 0.00%) 12358 ( 0.00%) 106.53
ftp 58493 ( 0.26%) 30452341 ( 0.22%) 520.62
pop3 6530 ( 0.03%) 3398947 ( 0.02%) 520.51
imap 2294 ( 0.01%) 617655 ( 0.00%) 269.25
telnet 524 ( 0.00%) 66768 ( 0.00%) 127.42
ssh 86018 ( 0.38%) 11137708 ( 0.08%) 129.48
dns 39364 ( 0.18%) 8769047 ( 0.06%) 222.77
bgp 144 ( 0.00%) 46352 ( 0.00%) 321.89
napster 61 ( 0.00%) 4843 ( 0.00%) 79.39
realaud 1089 ( 0.00%) 179075 ( 0.00%) 164.44
rtsp 367149 ( 1.64%) 213831669 ( 1.53%) 582.41
icecast 16129 ( 0.07%) 13655877 ( 0.10%) 846.67
hotline 25 ( 0.00%) 1874 ( 0.00%) 74.96
other 6406575 ( 28.60%) 4314285144 ( 30.94%) 673.42
udp 6051554 ( 27.02%) 2836719644 ( 20.34%) 468.76
dns 953795 ( 4.26%) 162385960 ( 1.16%) 170.25
realaud 2399 ( 0.01%) 168950 ( 0.00%) 70.43
halflif 2238 ( 0.01%) 143965 ( 0.00%) 64.33
starcra 350 ( 0.00%) 68429 ( 0.00%) 195.51
everque 289 ( 0.00%) 68099 ( 0.00%) 235.64
unreal 116 ( 0.00%) 21177 ( 0.00%) 182.56
quake 44 ( 0.00%) 9736 ( 0.00%) 221.27
cuseeme 466 ( 0.00%) 29414 ( 0.00%) 63.12
other 5091606 ( 22.73%) 2673632343 ( 19.17%) 525.11
icmp 795017 ( 3.55%) 65763933 ( 0.47%) 82.72
ipip 326 ( 0.00%) 41050 ( 0.00%) 125.92
ipsec 104 ( 0.00%) 16304 ( 0.00%) 156.77
ip6 23239 ( 0.10%) 5505845 ( 0.04%) 236.92
other 68203 ( 0.30%) 10428507 ( 0.07%) 152.90
frag 4098 ( 0.02%) 5135018 ( 0.04%) 1253.05
ip6 156604 ( 0.70%) 16680226 ( 0.12%) 106.51
tcp6 140321 ( 0.63%) 13560589 ( 0.10%) 96.64
http(s) 757 ( 0.00%) 181559 ( 0.00%) 239.84
http(c) 1701 ( 0.01%) 156981 ( 0.00%) 92.29
smtp 1083 ( 0.00%) 517486 ( 0.00%) 477.83
bgp 98 ( 0.00%) 11741 ( 0.00%) 119.81
other 136682 ( 0.61%) 12692822 ( 0.09%) 92.86
udp6 11742 ( 0.05%) 2393045 ( 0.02%) 203.80
dns 10557 ( 0.05%) 2185458 ( 0.02%) 207.02
other 1185 ( 0.01%) 207587 ( 0.00%) 175.18
icmp6 4269 ( 0.02%) 501999 ( 0.00%) 117.59
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 242 ( 0.00%) 220513 ( 0.00%) 911.21
tcpdump file: 200909051400.dump.gz (560.65 MB)