Traffic Trace Info
DumpFile: 200909141400.dump
FileSize: 1984.89MB
Id: 200909141400
StartTime: Mon Sep 14 14:00:00 2009
EndTime: Mon Sep 14 14:15:00 2009
TotalTime: 899.80 seconds
TotalCapSize: 1537.71MB CapLen: 96 bytes
# of packets: 29305522 (17492.33MB)
AvgRate: 163.08Mbps stddev:12.03M
IP flow (unique src/dst pair) Information
# of flows: 1443012 (avg. 20.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.5% 1.2% 1.0% 0.9% 0.9% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 853536
Top 10 bandwidth usage (bytes/total in %):
15.8% 15.6% 6.8% 4.7% 4.4% 3.9% 2.6% 2.3% 2.0% 1.9%
# of IPv6 addresses: 1739
Top 10 bandwidth usage (bytes/total in %):
18.4% 11.8% 10.6% 10.6% 9.6% 9.2% 5.9% 4.9% 4.8% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909141400.pktlen.png)
detailed numbers
[ 32- 63]: 8054638
[ 64- 127]: 6671050
[ 128- 255]: 1489667
[ 256- 511]: 942065
[ 512- 1023]: 870346
[ 1024- 2047]: 11277756
Protocol Breakdown
![[protocol breakdown chart]](200909141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29305522 (100.00%) 18342039413 (100.00%) 625.89
ip 29280645 ( 99.92%) 18335114378 ( 99.96%) 626.19
tcp 22062030 ( 75.28%) 15462854742 ( 84.30%) 700.88
http(s) 7975477 ( 27.21%) 10465582931 ( 57.06%) 1312.22
http(c) 5771136 ( 19.69%) 859841037 ( 4.69%) 148.99
squid 1460891 ( 4.99%) 221188025 ( 1.21%) 151.41
smtp 316495 ( 1.08%) 153203473 ( 0.84%) 484.06
nntp 57 ( 0.00%) 3540 ( 0.00%) 62.11
ftp 27981 ( 0.10%) 3104520 ( 0.02%) 110.95
pop3 19390 ( 0.07%) 13158730 ( 0.07%) 678.63
imap 1514 ( 0.01%) 151929 ( 0.00%) 100.35
telnet 15139 ( 0.05%) 1119310 ( 0.01%) 73.94
ssh 7407 ( 0.03%) 3678945 ( 0.02%) 496.68
dns 5839 ( 0.02%) 6808751 ( 0.04%) 1166.08
bgp 141 ( 0.00%) 49169 ( 0.00%) 348.72
napster 97 ( 0.00%) 6072 ( 0.00%) 62.60
realaud 384 ( 0.00%) 50440 ( 0.00%) 131.35
rtsp 192750 ( 0.66%) 64669468 ( 0.35%) 335.51
icecast 13734 ( 0.05%) 3101754 ( 0.02%) 225.84
hotline 9 ( 0.00%) 1767 ( 0.00%) 196.33
other 6253377 ( 21.34%) 3667122161 ( 19.99%) 586.42
udp 6422580 ( 21.92%) 2803447612 ( 15.28%) 436.50
dns 1300120 ( 4.44%) 243113051 ( 1.33%) 186.99
realaud 10176 ( 0.03%) 6595390 ( 0.04%) 648.13
halflif 1663 ( 0.01%) 112853 ( 0.00%) 67.86
starcra 549 ( 0.00%) 121106 ( 0.00%) 220.59
everque 552 ( 0.00%) 141656 ( 0.00%) 256.62
unreal 255 ( 0.00%) 26269 ( 0.00%) 103.02
quake 45 ( 0.00%) 7342 ( 0.00%) 163.16
cuseeme 51 ( 0.00%) 6075 ( 0.00%) 119.12
other 5105042 ( 17.42%) 2552533942 ( 13.92%) 500.00
icmp 772098 ( 2.63%) 62917896 ( 0.34%) 81.49
ipip 340 ( 0.00%) 42840 ( 0.00%) 126.00
ipsec 86 ( 0.00%) 13588 ( 0.00%) 158.00
ip6 20782 ( 0.07%) 5217027 ( 0.03%) 251.04
other 2729 ( 0.01%) 620673 ( 0.00%) 227.44
frag 16786 ( 0.06%) 13967393 ( 0.08%) 832.09
ip6 24877 ( 0.08%) 6925035 ( 0.04%) 278.37
tcp6 6952 ( 0.02%) 3392897 ( 0.02%) 488.05
http(s) 1693 ( 0.01%) 2192650 ( 0.01%) 1295.13
http(c) 1767 ( 0.01%) 161858 ( 0.00%) 91.60
smtp 1764 ( 0.01%) 867442 ( 0.00%) 491.75
dns 2 ( 0.00%) 284 ( 0.00%) 142.00
bgp 94 ( 0.00%) 11345 ( 0.00%) 120.69
other 1632 ( 0.01%) 159318 ( 0.00%) 97.62
udp6 13478 ( 0.05%) 2825811 ( 0.02%) 209.66
dns 12245 ( 0.04%) 2636137 ( 0.01%) 215.28
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1231 ( 0.00%) 189428 ( 0.00%) 153.88
icmp6 4192 ( 0.01%) 492155 ( 0.00%) 117.40
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 224 ( 0.00%) 209956 ( 0.00%) 937.30
tcpdump file: 200909141400.dump.gz (742.43 MB)