Traffic Trace Info
DumpFile: 200909111400.dump
FileSize: 1820.90MB
Id: 200909111400
StartTime: Fri Sep 11 14:00:00 2009
EndTime: Fri Sep 11 14:15:01 2009
TotalTime: 900.10 seconds
TotalCapSize: 1412.03MB CapLen: 96 bytes
# of packets: 26794941 (15555.52MB)
AvgRate: 144.97Mbps stddev:12.89M
IP flow (unique src/dst pair) Information
# of flows: 1412880 (avg. 18.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.0% 1.8% 1.3% 1.1% 1.0% 0.9% 0.9% 0.9% 0.6%
IP address Information
# of IPv4 addresses: 893024
Top 10 bandwidth usage (bytes/total in %):
11.6% 6.9% 6.9% 5.7% 5.0% 2.7% 2.4% 2.3% 2.2% 2.2%
# of IPv6 addresses: 1586
Top 10 bandwidth usage (bytes/total in %):
17.7% 17.7% 14.4% 9.9% 9.9% 7.0% 5.5% 4.2% 4.1% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909111400.pktlen.png)
detailed numbers
[ 32- 63]: 6913134
[ 64- 127]: 6783269
[ 128- 255]: 1446425
[ 256- 511]: 796191
[ 512- 1023]: 713582
[ 1024- 2047]: 10142340
Protocol Breakdown
![[protocol breakdown chart]](200909111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26794941 (100.00%) 16311147263 (100.00%) 608.74
ip 26769025 ( 99.90%) 16303342995 ( 99.95%) 609.04
tcp 19920152 ( 74.34%) 13397751718 ( 82.14%) 672.57
http(s) 5905934 ( 22.04%) 7567315997 ( 46.39%) 1281.31
http(c) 4335647 ( 16.18%) 599978516 ( 3.68%) 138.38
squid 1637983 ( 6.11%) 364298934 ( 2.23%) 222.41
smtp 528631 ( 1.97%) 130425471 ( 0.80%) 246.72
nntp 37 ( 0.00%) 2853 ( 0.00%) 77.11
ftp 156151 ( 0.58%) 98295126 ( 0.60%) 629.49
pop3 12901 ( 0.05%) 5588746 ( 0.03%) 433.20
imap 2207 ( 0.01%) 325694 ( 0.00%) 147.57
telnet 459 ( 0.00%) 121193 ( 0.00%) 264.04
ssh 139866 ( 0.52%) 59263754 ( 0.36%) 423.72
dns 5704 ( 0.02%) 6779534 ( 0.04%) 1188.56
bgp 152 ( 0.00%) 51911 ( 0.00%) 341.52
napster 3646 ( 0.01%) 3178247 ( 0.02%) 871.71
realaud 600 ( 0.00%) 73138 ( 0.00%) 121.90
rtsp 203064 ( 0.76%) 20491566 ( 0.13%) 100.91
icecast 10198 ( 0.04%) 4509687 ( 0.03%) 442.21
other 6976819 ( 26.04%) 4536871638 ( 27.81%) 650.28
udp 6065078 ( 22.64%) 2838137393 ( 17.40%) 467.95
dns 1119654 ( 4.18%) 204507824 ( 1.25%) 182.65
rip 1 ( 0.00%) 104 ( 0.00%) 104.00
realaud 2272 ( 0.01%) 192572 ( 0.00%) 84.76
halflif 656 ( 0.00%) 52558 ( 0.00%) 80.12
starcra 9856 ( 0.04%) 712368 ( 0.00%) 72.28
everque 692 ( 0.00%) 229576 ( 0.00%) 331.76
unreal 513 ( 0.00%) 45262 ( 0.00%) 88.23
quake 65 ( 0.00%) 10832 ( 0.00%) 166.65
cuseeme 18 ( 0.00%) 2563 ( 0.00%) 142.39
other 4929239 ( 18.40%) 2631931591 ( 16.14%) 533.94
icmp 759527 ( 2.83%) 62118112 ( 0.38%) 81.79
ipip 344 ( 0.00%) 42148 ( 0.00%) 122.52
ipsec 88 ( 0.00%) 14048 ( 0.00%) 159.64
ip6 19645 ( 0.07%) 4680799 ( 0.03%) 238.27
other 4191 ( 0.02%) 598777 ( 0.00%) 142.87
frag 17341 ( 0.06%) 15487996 ( 0.09%) 893.14
ip6 25916 ( 0.10%) 7804268 ( 0.05%) 301.14
tcp6 7906 ( 0.03%) 4099262 ( 0.03%) 518.50
http(s) 1254 ( 0.00%) 1784234 ( 0.01%) 1422.83
http(c) 2005 ( 0.01%) 179926 ( 0.00%) 89.74
smtp 2845 ( 0.01%) 1944854 ( 0.01%) 683.60
dns 6 ( 0.00%) 2825 ( 0.00%) 470.83
bgp 104 ( 0.00%) 12779 ( 0.00%) 122.88
other 1692 ( 0.01%) 174644 ( 0.00%) 103.22
udp6 13733 ( 0.05%) 2975793 ( 0.02%) 216.69
dns 12417 ( 0.05%) 2667035 ( 0.02%) 214.79
everque 2 ( 0.00%) 278 ( 0.00%) 139.00
other 1314 ( 0.00%) 308480 ( 0.00%) 234.76
icmp6 4028 ( 0.02%) 505897 ( 0.00%) 125.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 219 ( 0.00%) 219236 ( 0.00%) 1001.08
tcpdump file: 200909111400.dump.gz (689.38 MB)