Traffic Trace Info
DumpFile: 200909211400.dump
FileSize: 1939.77MB
Id: 200909211400
StartTime: Mon Sep 21 14:00:01 2009
EndTime: Mon Sep 21 14:15:01 2009
TotalTime: 899.66 seconds
TotalCapSize: 1499.34MB CapLen: 96 bytes
# of packets: 28863176 (16751.92MB)
AvgRate: 156.20Mbps stddev:11.38M
IP flow (unique src/dst pair) Information
# of flows: 1772005 (avg. 16.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 5.0% 1.7% 1.4% 1.1% 1.0% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1028115
Top 10 bandwidth usage (bytes/total in %):
27.6% 7.5% 7.0% 6.3% 5.3% 5.1% 3.2% 3.1% 2.8% 2.5%
# of IPv6 addresses: 887
Top 10 bandwidth usage (bytes/total in %):
25.3% 11.9% 8.2% 7.9% 7.0% 5.9% 5.9% 4.3% 4.2% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909211400.pktlen.png)
detailed numbers
[ 32- 63]: 7782459
[ 64- 127]: 6960847
[ 128- 255]: 1497303
[ 256- 511]: 968048
[ 512- 1023]: 973846
[ 1024- 2047]: 10680673
Protocol Breakdown
![[protocol breakdown chart]](200909211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28863176 (100.00%) 17565658701 (100.00%) 608.58
ip 28844176 ( 99.93%) 17561879493 ( 99.98%) 608.85
tcp 21137712 ( 73.23%) 14856309765 ( 84.58%) 702.83
http(s) 6794440 ( 23.54%) 9123545880 ( 51.94%) 1342.80
http(c) 3659682 ( 12.68%) 365049240 ( 2.08%) 99.75
squid 1229564 ( 4.26%) 265639255 ( 1.51%) 216.04
smtp 258187 ( 0.89%) 50240884 ( 0.29%) 194.59
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 27389 ( 0.09%) 3176829 ( 0.02%) 115.99
pop3 74800 ( 0.26%) 8549346 ( 0.05%) 114.30
imap 826 ( 0.00%) 77959 ( 0.00%) 94.38
telnet 4209 ( 0.01%) 319134 ( 0.00%) 75.82
ssh 96195 ( 0.33%) 23106714 ( 0.13%) 240.21
dns 5582 ( 0.02%) 6903452 ( 0.04%) 1236.73
bgp 162 ( 0.00%) 48693 ( 0.00%) 300.57
napster 673 ( 0.00%) 55028 ( 0.00%) 81.77
realaud 772 ( 0.00%) 121660 ( 0.00%) 157.59
rtsp 55223 ( 0.19%) 12723696 ( 0.07%) 230.41
icecast 7936 ( 0.03%) 624410 ( 0.00%) 78.68
hotline 312 ( 0.00%) 25631 ( 0.00%) 82.15
other 8921702 ( 30.91%) 4996043216 ( 28.44%) 559.99
udp 6637464 ( 23.00%) 2580521469 ( 14.69%) 388.78
dns 1156063 ( 4.01%) 214687021 ( 1.22%) 185.71
rip 103 ( 0.00%) 23210 ( 0.00%) 225.34
realaud 109 ( 0.00%) 16308 ( 0.00%) 149.61
halflif 102 ( 0.00%) 16537 ( 0.00%) 162.13
starcra 502 ( 0.00%) 103113 ( 0.00%) 205.40
everque 574 ( 0.00%) 88986 ( 0.00%) 155.03
unreal 132 ( 0.00%) 26266 ( 0.00%) 198.98
quake 73 ( 0.00%) 11260 ( 0.00%) 154.25
cuseeme 27 ( 0.00%) 3797 ( 0.00%) 140.63
other 5475593 ( 18.97%) 2364925707 ( 13.46%) 431.90
icmp 990268 ( 3.43%) 109062648 ( 0.62%) 110.13
ipip 356 ( 0.00%) 41658 ( 0.00%) 117.02
ipsec 80 ( 0.00%) 12640 ( 0.00%) 158.00
ip6 18295 ( 0.06%) 4327427 ( 0.02%) 236.54
other 60001 ( 0.21%) 11603886 ( 0.07%) 193.39
frag 12774 ( 0.04%) 10557545 ( 0.06%) 826.49
ip6 19000 ( 0.07%) 3779208 ( 0.02%) 198.91
tcp6 4992 ( 0.02%) 1317600 ( 0.01%) 263.94
http(s) 27 ( 0.00%) 15608 ( 0.00%) 578.07
http(c) 1834 ( 0.01%) 168985 ( 0.00%) 92.14
smtp 2112 ( 0.01%) 1034977 ( 0.01%) 490.05
bgp 92 ( 0.00%) 10927 ( 0.00%) 118.77
other 927 ( 0.00%) 87103 ( 0.00%) 93.96
udp6 10659 ( 0.04%) 2024552 ( 0.01%) 189.94
dns 10616 ( 0.04%) 2019822 ( 0.01%) 190.26
other 43 ( 0.00%) 4730 ( 0.00%) 110.00
icmp6 3278 ( 0.01%) 393663 ( 0.00%) 120.09
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 41 ( 0.00%) 39313 ( 0.00%) 958.85
tcpdump file: 200909211400.dump.gz (729.90 MB)