Traffic Trace Info
DumpFile: 200909241400.dump
FileSize: 2290.19MB
Id: 200909241400
StartTime: Thu Sep 24 14:00:01 2009
EndTime: Thu Sep 24 14:15:01 2009
TotalTime: 900.16 seconds
TotalCapSize: 1771.23MB CapLen: 96 bytes
# of packets: 34009461 (19477.37MB)
AvgRate: 181.52Mbps stddev:11.58M
IP flow (unique src/dst pair) Information
# of flows: 1746472 (avg. 19.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 988722
Top 10 bandwidth usage (bytes/total in %):
31.1% 10.6% 4.3% 2.7% 2.5% 2.2% 2.1% 2.1% 2.1% 1.9%
# of IPv6 addresses: 980
Top 10 bandwidth usage (bytes/total in %):
32.0% 31.9% 9.9% 5.8% 4.4% 4.4% 4.4% 4.4% 3.2% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909241400.pktlen.png)
detailed numbers
[ 32- 63]: 9068740
[ 64- 127]: 8408312
[ 128- 255]: 1749175
[ 256- 511]: 1372926
[ 512- 1023]: 1004686
[ 1024- 2047]: 12405622
Protocol Breakdown
![[protocol breakdown chart]](200909241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34009461 (100.00%) 20423506066 (100.00%) 600.52
ip 33968986 ( 99.88%) 20416263639 ( 99.96%) 601.03
tcp 25173737 ( 74.02%) 17333075963 ( 84.87%) 688.54
http(s) 7083224 ( 20.83%) 9047270134 ( 44.30%) 1277.28
http(c) 5768280 ( 16.96%) 1259852752 ( 6.17%) 218.41
squid 1261099 ( 3.71%) 320917661 ( 1.57%) 254.47
smtp 286303 ( 0.84%) 83001836 ( 0.41%) 289.91
nntp 29546 ( 0.09%) 1782351 ( 0.01%) 60.32
ftp 22743 ( 0.07%) 3039972 ( 0.01%) 133.67
pop3 23439 ( 0.07%) 14390430 ( 0.07%) 613.95
imap 3136 ( 0.01%) 419910 ( 0.00%) 133.90
telnet 2724 ( 0.01%) 201725 ( 0.00%) 74.05
ssh 37240 ( 0.11%) 11951346 ( 0.06%) 320.93
dns 10610 ( 0.03%) 10339596 ( 0.05%) 974.51
bgp 179 ( 0.00%) 76219 ( 0.00%) 425.80
napster 779 ( 0.00%) 595820 ( 0.00%) 764.85
realaud 609 ( 0.00%) 72939 ( 0.00%) 119.77
rtsp 158265 ( 0.47%) 51105056 ( 0.25%) 322.91
icecast 49997 ( 0.15%) 38698517 ( 0.19%) 774.02
hotline 29 ( 0.00%) 2657 ( 0.00%) 91.62
other 10433910 ( 30.68%) 6489259542 ( 31.77%) 621.94
udp 7817204 ( 22.99%) 2966740985 ( 14.53%) 379.51
dns 1319355 ( 3.88%) 222370001 ( 1.09%) 168.54
rip 2 ( 0.00%) 464 ( 0.00%) 232.00
realaud 16541 ( 0.05%) 5927477 ( 0.03%) 358.35
halflif 1193 ( 0.00%) 84059 ( 0.00%) 70.46
starcra 620 ( 0.00%) 108515 ( 0.00%) 175.02
everque 2153 ( 0.01%) 394925 ( 0.00%) 183.43
unreal 147 ( 0.00%) 26935 ( 0.00%) 183.23
quake 83 ( 0.00%) 13307 ( 0.00%) 160.33
cuseeme 418 ( 0.00%) 298611 ( 0.00%) 714.38
other 6472647 ( 19.03%) 2737013617 ( 13.40%) 422.86
icmp 951206 ( 2.80%) 109023026 ( 0.53%) 114.62
ipip 298 ( 0.00%) 37438 ( 0.00%) 125.63
ipsec 80 ( 0.00%) 12640 ( 0.00%) 158.00
ip6 21993 ( 0.06%) 6844348 ( 0.03%) 311.21
other 4468 ( 0.01%) 529239 ( 0.00%) 118.45
frag 27924 ( 0.08%) 22623577 ( 0.11%) 810.18
ip6 40475 ( 0.12%) 7242427 ( 0.04%) 178.94
tcp6 25571 ( 0.08%) 4249478 ( 0.02%) 166.18
http(s) 558 ( 0.00%) 604455 ( 0.00%) 1083.25
http(c) 1933 ( 0.01%) 178011 ( 0.00%) 92.09
squid 6 ( 0.00%) 508 ( 0.00%) 84.67
smtp 1429 ( 0.00%) 746288 ( 0.00%) 522.24
ssh 779 ( 0.00%) 319594 ( 0.00%) 410.26
dns 16 ( 0.00%) 5694 ( 0.00%) 355.88
bgp 114 ( 0.00%) 14686 ( 0.00%) 128.82
other 20736 ( 0.06%) 2380242 ( 0.01%) 114.79
udp6 11893 ( 0.03%) 2595329 ( 0.01%) 218.22
dns 11882 ( 0.03%) 2594119 ( 0.01%) 218.32
other 11 ( 0.00%) 1210 ( 0.00%) 110.00
icmp6 2938 ( 0.01%) 352642 ( 0.00%) 120.03
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 43 ( 0.00%) 40898 ( 0.00%) 951.12
tcpdump file: 200909241400.dump.gz (876.95 MB)