Traffic Trace Info
DumpFile: 200909101400.dump
FileSize: 1780.60MB
Id: 200909101400
StartTime: Thu Sep 10 14:00:00 2009
EndTime: Thu Sep 10 14:15:00 2009
TotalTime: 899.93 seconds
TotalCapSize: 1379.63MB CapLen: 96 bytes
# of packets: 26277288 (15107.14MB)
AvgRate: 140.83Mbps stddev:10.52M
IP flow (unique src/dst pair) Information
# of flows: 1290421 (avg. 20.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 1.9% 1.0% 0.9% 0.8% 0.6% 0.6% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 784990
Top 10 bandwidth usage (bytes/total in %):
20.5% 6.7% 5.0% 4.4% 4.3% 3.8% 3.6% 3.4% 3.2% 2.9%
# of IPv6 addresses: 977
Top 10 bandwidth usage (bytes/total in %):
29.3% 29.2% 17.2% 5.6% 4.6% 4.3% 4.3% 4.3% 4.2% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909101400.pktlen.png)
detailed numbers
[ 32- 63]: 7567622
[ 64- 127]: 6041238
[ 128- 255]: 1313372
[ 256- 511]: 798503
[ 512- 1023]: 821538
[ 1024- 2047]: 9735015
Protocol Breakdown
![[protocol breakdown chart]](200909101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26277288 (100.00%) 15840987142 (100.00%) 602.84
ip 26234892 ( 99.84%) 15833532205 ( 99.95%) 603.53
tcp 19872937 ( 75.63%) 13146392337 ( 82.99%) 661.52
http(s) 6415199 ( 24.41%) 8047260096 ( 50.80%) 1254.41
http(c) 4636849 ( 17.65%) 768766863 ( 4.85%) 165.80
squid 1375153 ( 5.23%) 373268068 ( 2.36%) 271.44
smtp 654278 ( 2.49%) 208665148 ( 1.32%) 318.92
nntp 86 ( 0.00%) 7552 ( 0.00%) 87.81
ftp 45793 ( 0.17%) 10519516 ( 0.07%) 229.72
pop3 25379 ( 0.10%) 11681214 ( 0.07%) 460.27
imap 3965 ( 0.02%) 1491231 ( 0.01%) 376.10
telnet 734 ( 0.00%) 143733 ( 0.00%) 195.82
ssh 11280 ( 0.04%) 4803918 ( 0.03%) 425.88
dns 6499 ( 0.02%) 6869997 ( 0.04%) 1057.09
bgp 172 ( 0.00%) 65384 ( 0.00%) 380.14
napster 1431 ( 0.01%) 844486 ( 0.01%) 590.14
realaud 294 ( 0.00%) 34850 ( 0.00%) 118.54
rtsp 391030 ( 1.49%) 83067096 ( 0.52%) 212.43
icecast 51138 ( 0.19%) 21845140 ( 0.14%) 427.18
hotline 10 ( 0.00%) 826 ( 0.00%) 82.60
other 6250981 ( 23.79%) 3606872541 ( 22.77%) 577.01
udp 5511174 ( 20.97%) 2610743831 ( 16.48%) 473.72
dns 1154102 ( 4.39%) 210658347 ( 1.33%) 182.53
realaud 57 ( 0.00%) 9621 ( 0.00%) 168.79
halflif 69 ( 0.00%) 10097 ( 0.00%) 146.33
starcra 314 ( 0.00%) 62179 ( 0.00%) 198.02
everque 538 ( 0.00%) 179302 ( 0.00%) 333.28
unreal 66 ( 0.00%) 11683 ( 0.00%) 177.02
quake 32 ( 0.00%) 5455 ( 0.00%) 170.47
cuseeme 12 ( 0.00%) 1060 ( 0.00%) 88.33
other 4353023 ( 16.57%) 2399411640 ( 15.15%) 551.21
icmp 815549 ( 3.10%) 68993511 ( 0.44%) 84.60
ipip 315 ( 0.00%) 38596 ( 0.00%) 122.53
ipsec 1885 ( 0.01%) 240646 ( 0.00%) 127.66
ip6 28464 ( 0.11%) 6408685 ( 0.04%) 225.15
other 4568 ( 0.02%) 714599 ( 0.00%) 156.44
frag 18732 ( 0.07%) 14397040 ( 0.09%) 768.58
ip6 42396 ( 0.16%) 7454937 ( 0.05%) 175.84
tcp6 25521 ( 0.10%) 4163351 ( 0.03%) 163.13
http(s) 335 ( 0.00%) 416253 ( 0.00%) 1242.55
http(c) 1523 ( 0.01%) 139657 ( 0.00%) 91.70
smtp 2572 ( 0.01%) 1289791 ( 0.01%) 501.47
dns 5 ( 0.00%) 546 ( 0.00%) 109.20
bgp 113 ( 0.00%) 15239 ( 0.00%) 134.86
other 20973 ( 0.08%) 2301865 ( 0.01%) 109.75
udp6 12882 ( 0.05%) 2810600 ( 0.02%) 218.18
dns 12871 ( 0.05%) 2809394 ( 0.02%) 218.27
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
halflif 1 ( 0.00%) 111 ( 0.00%) 111.00
other 9 ( 0.00%) 990 ( 0.00%) 110.00
icmp6 3949 ( 0.02%) 462780 ( 0.00%) 117.19
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14 ( 0.00%) 14126 ( 0.00%) 1009.00
tcpdump file: 200909101400.dump.gz (682.14 MB)