Traffic Trace Info
DumpFile: 200909191400.dump
FileSize: 1798.55MB
Id: 200909191400
StartTime: Sat Sep 19 14:00:00 2009
EndTime: Sat Sep 19 14:15:01 2009
TotalTime: 900.62 seconds
TotalCapSize: 1391.90MB CapLen: 96 bytes
# of packets: 26649559 (15286.25MB)
AvgRate: 142.39Mbps stddev:22.79M
IP flow (unique src/dst pair) Information
# of flows: 1621077 (avg. 16.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.3% 2.1% 1.3% 1.2% 1.2% 1.0% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 951933
Top 10 bandwidth usage (bytes/total in %):
24.6% 12.3% 5.8% 5.2% 3.1% 3.0% 3.0% 2.4% 2.3% 2.2%
# of IPv6 addresses: 903
Top 10 bandwidth usage (bytes/total in %):
25.1% 17.9% 17.7% 8.3% 7.7% 5.9% 5.9% 5.5% 4.4% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909191400.pktlen.png)
detailed numbers
[ 32- 63]: 6970612
[ 64- 127]: 6677232
[ 128- 255]: 1646098
[ 256- 511]: 862536
[ 512- 1023]: 838004
[ 1024- 2047]: 9655077
Protocol Breakdown
![[protocol breakdown chart]](200909191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26649559 (100.00%) 16028795062 (100.00%) 601.47
ip 26626756 ( 99.91%) 16023983715 ( 99.97%) 601.80
tcp 19220245 ( 72.12%) 13486852908 ( 84.14%) 701.70
http(s) 5826657 ( 21.86%) 7633994661 ( 47.63%) 1310.18
http(c) 3626030 ( 13.61%) 404501475 ( 2.52%) 111.55
squid 810404 ( 3.04%) 186706782 ( 1.16%) 230.39
smtp 250339 ( 0.94%) 64757041 ( 0.40%) 258.68
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 29446 ( 0.11%) 2937892 ( 0.02%) 99.77
pop3 22103 ( 0.08%) 12296704 ( 0.08%) 556.34
imap 1265 ( 0.00%) 394924 ( 0.00%) 312.19
telnet 11149 ( 0.04%) 809618 ( 0.01%) 72.62
ssh 176026 ( 0.66%) 139449599 ( 0.87%) 792.21
dns 6152 ( 0.02%) 6841762 ( 0.04%) 1112.12
bgp 149 ( 0.00%) 46901 ( 0.00%) 314.77
napster 650 ( 0.00%) 61781 ( 0.00%) 95.05
realaud 744 ( 0.00%) 91342 ( 0.00%) 122.77
rtsp 212880 ( 0.80%) 30499862 ( 0.19%) 143.27
icecast 4138 ( 0.02%) 603176 ( 0.00%) 145.77
other 8241945 ( 30.93%) 5002753020 ( 31.21%) 606.99
udp 6492551 ( 24.36%) 2457080872 ( 15.33%) 378.45
dns 1172419 ( 4.40%) 193041396 ( 1.20%) 164.65
rip 1 ( 0.00%) 148 ( 0.00%) 148.00
realaud 5529 ( 0.02%) 1721521 ( 0.01%) 311.36
halflif 216 ( 0.00%) 27261 ( 0.00%) 126.21
starcra 4700 ( 0.02%) 373590 ( 0.00%) 79.49
everque 688 ( 0.00%) 371487 ( 0.00%) 539.95
unreal 92 ( 0.00%) 17783 ( 0.00%) 193.29
quake 46 ( 0.00%) 6666 ( 0.00%) 144.91
cuseeme 21 ( 0.00%) 3563 ( 0.00%) 169.67
other 5285552 ( 19.83%) 2259702160 ( 14.10%) 427.52
icmp 893796 ( 3.35%) 75898196 ( 0.47%) 84.92
ipip 339 ( 0.00%) 43026 ( 0.00%) 126.92
ipsec 84 ( 0.00%) 13272 ( 0.00%) 158.00
ip6 17095 ( 0.06%) 3530986 ( 0.02%) 206.55
other 2646 ( 0.01%) 564455 ( 0.00%) 213.32
frag 66791 ( 0.25%) 51772431 ( 0.32%) 775.14
ip6 22801 ( 0.09%) 4811227 ( 0.03%) 211.01
tcp6 10423 ( 0.04%) 2513117 ( 0.02%) 241.11
http(s) 218 ( 0.00%) 124878 ( 0.00%) 572.83
http(c) 1773 ( 0.01%) 165142 ( 0.00%) 93.14
smtp 2528 ( 0.01%) 1260739 ( 0.01%) 498.71
dns 6 ( 0.00%) 1982 ( 0.00%) 330.33
bgp 90 ( 0.00%) 10720 ( 0.00%) 119.11
other 5808 ( 0.02%) 949656 ( 0.01%) 163.51
udp6 9262 ( 0.03%) 1899966 ( 0.01%) 205.14
dns 9250 ( 0.03%) 1898640 ( 0.01%) 205.26
quake 1 ( 0.00%) 116 ( 0.00%) 116.00
other 11 ( 0.00%) 1210 ( 0.00%) 110.00
icmp6 3044 ( 0.01%) 357012 ( 0.00%) 117.28
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 41 ( 0.00%) 36916 ( 0.00%) 900.39
tcpdump file: 200909191400.dump.gz (680.39 MB)