Traffic Trace Info
DumpFile: 200909181400.dump
FileSize: 1874.26MB
Id: 200909181400
StartTime: Fri Sep 18 14:00:01 2009
EndTime: Fri Sep 18 14:15:00 2009
TotalTime: 899.44 seconds
TotalCapSize: 1449.84MB CapLen: 96 bytes
# of packets: 27814031 (15003.51MB)
AvgRate: 139.92Mbps stddev:10.77M
IP flow (unique src/dst pair) Information
# of flows: 1551477 (avg. 17.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.3% 2.2% 1.0% 0.7% 0.6% 0.5% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 929126
Top 10 bandwidth usage (bytes/total in %):
30.8% 8.1% 4.8% 3.2% 3.0% 2.7% 2.7% 2.5% 2.4% 2.4%
# of IPv6 addresses: 950
Top 10 bandwidth usage (bytes/total in %):
91.9% 91.9% 2.5% 2.5% 1.3% 0.4% 0.4% 0.4% 0.3% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909181400.pktlen.png)
detailed numbers
[ 32- 63]: 8650749
[ 64- 127]: 6517392
[ 128- 255]: 1540154
[ 256- 511]: 925713
[ 512- 1023]: 889691
[ 1024- 2047]: 9290332
Protocol Breakdown
![[protocol breakdown chart]](200909181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27814031 (100.00%) 15732325123 (100.00%) 565.63
ip 27713690 ( 99.64%) 15635823872 ( 99.39%) 564.19
tcp 21383766 ( 76.88%) 13510838001 ( 85.88%) 631.83
http(s) 5813591 ( 20.90%) 7415495631 ( 47.14%) 1275.54
http(c) 4806975 ( 17.28%) 608521873 ( 3.87%) 126.59
squid 1327534 ( 4.77%) 291449437 ( 1.85%) 219.54
smtp 292519 ( 1.05%) 125230351 ( 0.80%) 428.11
ftp 33636 ( 0.12%) 5677856 ( 0.04%) 168.80
pop3 15218 ( 0.05%) 8830678 ( 0.06%) 580.28
imap 794 ( 0.00%) 99214 ( 0.00%) 124.95
telnet 14261 ( 0.05%) 1060217 ( 0.01%) 74.34
ssh 87920 ( 0.32%) 10571306 ( 0.07%) 120.24
dns 6232 ( 0.02%) 6859115 ( 0.04%) 1100.63
bgp 169 ( 0.00%) 57515 ( 0.00%) 340.33
napster 88 ( 0.00%) 7981 ( 0.00%) 90.69
realaud 581 ( 0.00%) 70860 ( 0.00%) 121.96
rtsp 192973 ( 0.69%) 34237863 ( 0.22%) 177.42
icecast 17488 ( 0.06%) 8596319 ( 0.05%) 491.56
hotline 70 ( 0.00%) 5440 ( 0.00%) 77.71
other 8773507 ( 31.54%) 4993856637 ( 31.74%) 569.20
udp 5480113 ( 19.70%) 2049945543 ( 13.03%) 374.07
dns 1191672 ( 4.28%) 230302807 ( 1.46%) 193.26
rip 2 ( 0.00%) 199 ( 0.00%) 99.50
realaud 201 ( 0.00%) 23800 ( 0.00%) 118.41
halflif 96 ( 0.00%) 12755 ( 0.00%) 132.86
starcra 666 ( 0.00%) 108966 ( 0.00%) 163.61
everque 476 ( 0.00%) 86220 ( 0.00%) 181.13
unreal 109 ( 0.00%) 22528 ( 0.00%) 206.68
quake 56 ( 0.00%) 9507 ( 0.00%) 169.77
cuseeme 11 ( 0.00%) 1322 ( 0.00%) 120.18
other 4286094 ( 15.41%) 1819125563 ( 11.56%) 424.43
icmp 782689 ( 2.81%) 63874054 ( 0.41%) 81.61
ipip 348 ( 0.00%) 42652 ( 0.00%) 122.56
ipsec 84 ( 0.00%) 13272 ( 0.00%) 158.00
ip6 58060 ( 0.21%) 9639170 ( 0.06%) 166.02
other 8630 ( 0.03%) 1471180 ( 0.01%) 170.47
frag 6251 ( 0.02%) 5338078 ( 0.03%) 853.96
ip6 100339 ( 0.36%) 96501131 ( 0.61%) 961.75
tcp6 84074 ( 0.30%) 93407558 ( 0.59%) 1111.02
http(s) 2187 ( 0.01%) 2898756 ( 0.02%) 1325.45
http(c) 1655 ( 0.01%) 150114 ( 0.00%) 90.70
smtp 2657 ( 0.01%) 1313010 ( 0.01%) 494.17
dns 2 ( 0.00%) 280 ( 0.00%) 140.00
bgp 111 ( 0.00%) 14453 ( 0.00%) 130.21
other 77462 ( 0.28%) 89030945 ( 0.57%) 1149.35
udp6 13269 ( 0.05%) 2714606 ( 0.02%) 204.58
dns 13250 ( 0.05%) 2712516 ( 0.02%) 204.72
other 19 ( 0.00%) 2090 ( 0.00%) 110.00
icmp6 2938 ( 0.01%) 349325 ( 0.00%) 118.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 28 ( 0.00%) 25562 ( 0.00%) 912.93
tcpdump file: 200909181400.dump.gz (718.69 MB)