Traffic Trace Info
DumpFile: 200909091400.dump
FileSize: 1822.97MB
Id: 200909091400
StartTime: Wed Sep 9 14:00:01 2009
EndTime: Wed Sep 9 14:15:01 2009
TotalTime: 899.64 seconds
TotalCapSize: 1415.28MB CapLen: 96 bytes
# of packets: 26718153 (15827.93MB)
AvgRate: 147.59Mbps stddev:20.15M
IP flow (unique src/dst pair) Information
# of flows: 1220188 (avg. 21.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.4% 1.3% 1.0% 0.9% 0.9% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 723896
Top 10 bandwidth usage (bytes/total in %):
15.2% 8.9% 7.3% 6.4% 4.5% 4.2% 3.2% 2.2% 1.8% 1.7%
# of IPv6 addresses: 992
Top 10 bandwidth usage (bytes/total in %):
80.2% 69.4% 13.2% 13.2% 10.7% 1.1% 1.1% 0.8% 0.8% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909091400.pktlen.png)
detailed numbers
[ 32- 63]: 6924878
[ 64- 127]: 6562705
[ 128- 255]: 1355097
[ 256- 511]: 738368
[ 512- 1023]: 715519
[ 1024- 2047]: 10421586
Protocol Breakdown
![[protocol breakdown chart]](200909091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26718153 (100.00%) 16596782553 (100.00%) 621.18
ip 26624181 ( 99.65%) 16489826178 ( 99.36%) 619.36
tcp 19949308 ( 74.67%) 13411338160 ( 80.81%) 672.27
http(s) 6998236 ( 26.19%) 8813416394 ( 53.10%) 1259.38
http(c) 5065135 ( 18.96%) 717017001 ( 4.32%) 141.56
squid 865714 ( 3.24%) 312625052 ( 1.88%) 361.12
smtp 341878 ( 1.28%) 101604464 ( 0.61%) 297.20
nntp 347312 ( 1.30%) 20914787 ( 0.13%) 60.22
ftp 25942 ( 0.10%) 2944163 ( 0.02%) 113.49
pop3 37695 ( 0.14%) 13441925 ( 0.08%) 356.60
imap 3129 ( 0.01%) 608104 ( 0.00%) 194.34
telnet 338 ( 0.00%) 143070 ( 0.00%) 423.28
ssh 395328 ( 1.48%) 67874884 ( 0.41%) 171.69
dns 2851 ( 0.01%) 2750968 ( 0.02%) 964.91
bgp 154 ( 0.00%) 59996 ( 0.00%) 389.58
napster 1677 ( 0.01%) 869151 ( 0.01%) 518.28
realaud 18836 ( 0.07%) 15616288 ( 0.09%) 829.07
rtsp 213413 ( 0.80%) 122048266 ( 0.74%) 571.89
icecast 67544 ( 0.25%) 46140158 ( 0.28%) 683.11
hotline 20 ( 0.00%) 1486 ( 0.00%) 74.30
other 5563890 ( 20.82%) 3173054306 ( 19.12%) 570.29
udp 5876269 ( 21.99%) 3009846153 ( 18.14%) 512.20
dns 1104225 ( 4.13%) 202575148 ( 1.22%) 183.45
realaud 967 ( 0.00%) 64636 ( 0.00%) 66.84
halflif 604 ( 0.00%) 39991 ( 0.00%) 66.21
starcra 218 ( 0.00%) 45989 ( 0.00%) 210.96
everque 463 ( 0.00%) 180503 ( 0.00%) 389.86
unreal 54 ( 0.00%) 10805 ( 0.00%) 200.09
quake 31 ( 0.00%) 4343 ( 0.00%) 140.10
cuseeme 13 ( 0.00%) 1588 ( 0.00%) 122.15
other 4769281 ( 17.85%) 2806660576 ( 16.91%) 588.49
icmp 772076 ( 2.89%) 63013169 ( 0.38%) 81.62
ipip 313 ( 0.00%) 37938 ( 0.00%) 121.21
ipsec 92 ( 0.00%) 14536 ( 0.00%) 158.00
ip6 22015 ( 0.08%) 4435401 ( 0.03%) 201.47
other 4108 ( 0.02%) 1140821 ( 0.01%) 277.71
frag 3222 ( 0.01%) 3509966 ( 0.02%) 1089.37
ip6 93972 ( 0.35%) 106956375 ( 0.64%) 1138.17
tcp6 76448 ( 0.29%) 103521037 ( 0.62%) 1354.14
http(s) 68098 ( 0.25%) 101547850 ( 0.61%) 1491.20
http(c) 1524 ( 0.01%) 145299 ( 0.00%) 95.34
smtp 1298 ( 0.00%) 661622 ( 0.00%) 509.72
ftp 71 ( 0.00%) 7420 ( 0.00%) 104.51
ssh 3574 ( 0.01%) 968108 ( 0.01%) 270.88
dns 32 ( 0.00%) 4995 ( 0.00%) 156.09
bgp 99 ( 0.00%) 12114 ( 0.00%) 122.36
other 1752 ( 0.01%) 173629 ( 0.00%) 99.10
udp6 13398 ( 0.05%) 2921871 ( 0.02%) 218.08
dns 13391 ( 0.05%) 2921101 ( 0.02%) 218.14
other 7 ( 0.00%) 770 ( 0.00%) 110.00
icmp6 4060 ( 0.02%) 475906 ( 0.00%) 117.22
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 36 ( 0.00%) 33481 ( 0.00%) 930.03
tcpdump file: 200909091400.dump.gz (684.78 MB)