Traffic Trace Info
DumpFile: 200909171400.dump
FileSize: 1950.29MB
Id: 200909171400
StartTime: Thu Sep 17 14:00:01 2009
EndTime: Thu Sep 17 14:15:00 2009
TotalTime: 899.19 seconds
TotalCapSize: 1513.58MB CapLen: 96 bytes
# of packets: 28613213 (15995.48MB)
AvgRate: 149.23Mbps stddev:16.74M
IP flow (unique src/dst pair) Information
# of flows: 1514745 (avg. 18.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 1.9% 1.1% 1.1% 1.1% 1.0% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 878427
Top 10 bandwidth usage (bytes/total in %):
27.9% 6.3% 4.7% 4.5% 2.9% 2.9% 2.8% 2.5% 2.0% 1.8%
# of IPv6 addresses: 1024
Top 10 bandwidth usage (bytes/total in %):
33.9% 33.9% 20.9% 20.9% 5.6% 3.9% 3.3% 3.2% 3.0% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909171400.pktlen.png)
detailed numbers
[ 32- 63]: 7341548
[ 64- 127]: 7579429
[ 128- 255]: 1696681
[ 256- 511]: 970135
[ 512- 1023]: 1041601
[ 1024- 2047]: 9983819
Protocol Breakdown
![[protocol breakdown chart]](200909171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28613213 (100.00%) 16772471484 (100.00%) 586.18
ip 28549271 ( 99.78%) 16761953503 ( 99.94%) 587.12
tcp 21492615 ( 75.11%) 14201540855 ( 84.67%) 660.76
http(s) 6481718 ( 22.65%) 8195011373 ( 48.86%) 1264.33
http(c) 5119709 ( 17.89%) 655155777 ( 3.91%) 127.97
squid 722213 ( 2.52%) 241869414 ( 1.44%) 334.90
smtp 278760 ( 0.97%) 71191399 ( 0.42%) 255.39
ftp 33769 ( 0.12%) 4014588 ( 0.02%) 118.88
pop3 14721 ( 0.05%) 5785932 ( 0.03%) 393.04
imap 1680 ( 0.01%) 227003 ( 0.00%) 135.12
telnet 2979 ( 0.01%) 222629 ( 0.00%) 74.73
ssh 614525 ( 2.15%) 139782698 ( 0.83%) 227.46
dns 6620 ( 0.02%) 6900364 ( 0.04%) 1042.35
bgp 152 ( 0.00%) 65026 ( 0.00%) 427.80
napster 5940 ( 0.02%) 4116083 ( 0.02%) 692.94
realaud 502 ( 0.00%) 57254 ( 0.00%) 114.05
rtsp 58029 ( 0.20%) 60461302 ( 0.36%) 1041.92
icecast 4357 ( 0.02%) 961103 ( 0.01%) 220.59
other 8146474 ( 28.47%) 4815688018 ( 28.71%) 591.14
udp 6242851 ( 21.82%) 2491221379 ( 14.85%) 399.05
dns 1201466 ( 4.20%) 232062718 ( 1.38%) 193.15
rip 3 ( 0.00%) 568 ( 0.00%) 189.33
realaud 230 ( 0.00%) 26173 ( 0.00%) 113.80
halflif 116 ( 0.00%) 22677 ( 0.00%) 195.49
starcra 434 ( 0.00%) 87923 ( 0.00%) 202.59
everque 530 ( 0.00%) 106174 ( 0.00%) 200.33
unreal 97 ( 0.00%) 16103 ( 0.00%) 166.01
quake 215 ( 0.00%) 44699 ( 0.00%) 207.90
cuseeme 16 ( 0.00%) 2372 ( 0.00%) 148.25
other 5037425 ( 17.61%) 2258286106 ( 13.46%) 448.30
icmp 791982 ( 2.77%) 64872403 ( 0.39%) 81.91
ipip 335 ( 0.00%) 41262 ( 0.00%) 123.17
ipsec 260 ( 0.00%) 112984 ( 0.00%) 434.55
ip6 18912 ( 0.07%) 3620719 ( 0.02%) 191.45
other 2316 ( 0.01%) 543901 ( 0.00%) 234.84
frag 15740 ( 0.06%) 13798254 ( 0.08%) 876.64
ip6 63942 ( 0.22%) 10517981 ( 0.06%) 164.49
tcp6 47663 ( 0.17%) 7223029 ( 0.04%) 151.54
http(s) 265 ( 0.00%) 359786 ( 0.00%) 1357.68
http(c) 1684 ( 0.01%) 153798 ( 0.00%) 91.33
smtp 1643 ( 0.01%) 768599 ( 0.00%) 467.80
ssh 3938 ( 0.01%) 2196864 ( 0.01%) 557.86
dns 8 ( 0.00%) 1055 ( 0.00%) 131.88
bgp 92 ( 0.00%) 10994 ( 0.00%) 119.50
other 40033 ( 0.14%) 3731933 ( 0.02%) 93.22
udp6 13042 ( 0.05%) 2895867 ( 0.02%) 222.04
dns 13030 ( 0.05%) 2894558 ( 0.02%) 222.15
cuseeme 1 ( 0.00%) 99 ( 0.00%) 99.00
other 11 ( 0.00%) 1210 ( 0.00%) 110.00
icmp6 3185 ( 0.01%) 376076 ( 0.00%) 118.08
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 22 ( 0.00%) 18929 ( 0.00%) 860.41
tcpdump file: 200909171400.dump.gz (744.60 MB)