Traffic Trace Info
DumpFile: 200909121400.dump
FileSize: 1759.66MB
Id: 200909121400
StartTime: Sat Sep 12 14:00:01 2009
EndTime: Sat Sep 12 14:15:00 2009
TotalTime: 899.64 seconds
TotalCapSize: 1359.79MB CapLen: 96 bytes
# of packets: 26204928 (17097.47MB)
AvgRate: 159.43Mbps stddev:17.28M
IP flow (unique src/dst pair) Information
# of flows: 1177054 (avg. 22.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.6% 2.4% 2.4% 2.4% 2.4% 2.4% 2.4% 2.2% 2.1%
IP address Information
# of IPv4 addresses: 730169
Top 10 bandwidth usage (bytes/total in %):
19.7% 14.4% 7.2% 6.0% 4.1% 3.8% 3.7% 3.6% 3.6% 2.5%
# of IPv6 addresses: 1485
Top 10 bandwidth usage (bytes/total in %):
22.3% 10.4% 9.3% 6.7% 5.8% 5.1% 5.0% 4.7% 4.4% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909121400.pktlen.png)
detailed numbers
[ 32- 63]: 6942808
[ 64- 127]: 5393366
[ 128- 255]: 1412150
[ 256- 511]: 689127
[ 512- 1023]: 565781
[ 1024- 2047]: 11201696
Protocol Breakdown
![[protocol breakdown chart]](200909121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26204928 (100.00%) 17927998062 (100.00%) 684.15
ip 26184084 ( 99.92%) 17923836307 ( 99.98%) 684.53
tcp 19521736 ( 74.50%) 15368521418 ( 85.72%) 787.25
http(s) 7446271 ( 28.42%) 10187691263 ( 56.83%) 1368.16
http(c) 5114847 ( 19.52%) 1284792037 ( 7.17%) 251.19
squid 961786 ( 3.67%) 204513383 ( 1.14%) 212.64
smtp 184922 ( 0.71%) 40768919 ( 0.23%) 220.47
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 101310 ( 0.39%) 108795503 ( 0.61%) 1073.89
pop3 36623 ( 0.14%) 44558866 ( 0.25%) 1216.69
imap 1083 ( 0.00%) 329695 ( 0.00%) 304.43
telnet 794 ( 0.00%) 67364 ( 0.00%) 84.84
ssh 19843 ( 0.08%) 3633842 ( 0.02%) 183.13
dns 6175 ( 0.02%) 6874001 ( 0.04%) 1113.20
bgp 252 ( 0.00%) 125071 ( 0.00%) 496.31
napster 633 ( 0.00%) 455663 ( 0.00%) 719.85
realaud 787 ( 0.00%) 237337 ( 0.00%) 301.57
rtsp 152105 ( 0.58%) 20583064 ( 0.11%) 135.32
icecast 3985 ( 0.02%) 1969944 ( 0.01%) 494.34
hotline 6 ( 0.00%) 582 ( 0.00%) 97.00
other 5490217 ( 20.95%) 3463008521 ( 19.32%) 630.76
udp 5825009 ( 22.23%) 2473234612 ( 13.80%) 424.59
dns 1382957 ( 5.28%) 194279339 ( 1.08%) 140.48
rip 3 ( 0.00%) 645 ( 0.00%) 215.00
realaud 1036 ( 0.00%) 89564 ( 0.00%) 86.45
halflif 3318 ( 0.01%) 207261 ( 0.00%) 62.47
starcra 11500 ( 0.04%) 866892 ( 0.00%) 75.38
everque 2386 ( 0.01%) 2025410 ( 0.01%) 848.87
unreal 78 ( 0.00%) 14357 ( 0.00%) 184.06
quake 59 ( 0.00%) 6678 ( 0.00%) 113.19
cuseeme 15 ( 0.00%) 2468 ( 0.00%) 164.53
other 4419469 ( 16.87%) 2275319536 ( 12.69%) 514.84
icmp 777095 ( 2.97%) 63786222 ( 0.36%) 82.08
ipip 337 ( 0.00%) 40158 ( 0.00%) 119.16
ipsec 88 ( 0.00%) 13904 ( 0.00%) 158.00
ip6 20444 ( 0.08%) 5529066 ( 0.03%) 270.45
other 39375 ( 0.15%) 12710927 ( 0.07%) 322.82
frag 13237 ( 0.05%) 12380948 ( 0.07%) 935.33
ip6 20844 ( 0.08%) 4161755 ( 0.02%) 199.66
tcp6 6694 ( 0.03%) 1418225 ( 0.01%) 211.87
http(s) 6 ( 0.00%) 916 ( 0.00%) 152.67
http(c) 1564 ( 0.01%) 143713 ( 0.00%) 91.89
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 1816 ( 0.01%) 932136 ( 0.01%) 513.29
ftp 164 ( 0.00%) 18669 ( 0.00%) 113.84
bgp 117 ( 0.00%) 15230 ( 0.00%) 130.17
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 3024 ( 0.01%) 307339 ( 0.00%) 101.63
udp6 10430 ( 0.04%) 2088557 ( 0.01%) 200.25
dns 9345 ( 0.04%) 1912332 ( 0.01%) 204.64
other 1085 ( 0.00%) 176225 ( 0.00%) 162.42
icmp6 3430 ( 0.01%) 395163 ( 0.00%) 115.21
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 260 ( 0.00%) 255730 ( 0.00%) 983.58
tcpdump file: 200909121400.dump.gz (631.57 MB)