Traffic Trace Info
DumpFile: 200909261400.dump
FileSize: 2044.30MB
Id: 200909261400
StartTime: Sat Sep 26 14:00:01 2009
EndTime: Sat Sep 26 14:15:01 2009
TotalTime: 899.94 seconds
TotalCapSize: 1577.06MB CapLen: 96 bytes
# of packets: 30620698 (16808.43MB)
AvgRate: 156.67Mbps stddev:13.04M
IP flow (unique src/dst pair) Information
# of flows: 1622683 (avg. 18.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.3% 1.1% 1.1% 0.9% 0.8% 0.8% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 939992
Top 10 bandwidth usage (bytes/total in %):
33.6% 7.3% 2.3% 2.2% 2.1% 2.1% 2.1% 1.9% 1.8% 1.8%
# of IPv6 addresses: 888
Top 10 bandwidth usage (bytes/total in %):
22.9% 22.9% 15.8% 7.4% 5.9% 5.4% 5.2% 4.7% 4.1% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200909261400.pktlen.png)
detailed numbers
[ 32- 63]: 8896965
[ 64- 127]: 7294649
[ 128- 255]: 1783315
[ 256- 511]: 1073535
[ 512- 1023]: 1126130
[ 1024- 2047]: 10446104
Protocol Breakdown
![[protocol breakdown chart]](200909261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30620698 (100.00%) 17624913904 (100.00%) 575.59
ip 30589613 ( 99.90%) 17619410829 ( 99.97%) 575.99
tcp 22976527 ( 75.04%) 15304917095 ( 86.84%) 666.11
http(s) 6998109 ( 22.85%) 8952270616 ( 50.79%) 1279.24
http(c) 4377755 ( 14.30%) 504650784 ( 2.86%) 115.28
squid 1326459 ( 4.33%) 268381256 ( 1.52%) 202.33
smtp 311289 ( 1.02%) 85002619 ( 0.48%) 273.07
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 26414 ( 0.09%) 3332084 ( 0.02%) 126.15
pop3 11531 ( 0.04%) 5659747 ( 0.03%) 490.83
imap 1734 ( 0.01%) 1009861 ( 0.01%) 582.39
telnet 12150 ( 0.04%) 930688 ( 0.01%) 76.60
ssh 15245 ( 0.05%) 3800731 ( 0.02%) 249.31
dns 5723 ( 0.02%) 6843956 ( 0.04%) 1195.87
bgp 144 ( 0.00%) 47975 ( 0.00%) 333.16
napster 724 ( 0.00%) 62263 ( 0.00%) 86.00
realaud 1782 ( 0.01%) 236423 ( 0.00%) 132.67
rtsp 179411 ( 0.59%) 109117685 ( 0.62%) 608.20
icecast 61160 ( 0.20%) 45156907 ( 0.26%) 738.34
hotline 9 ( 0.00%) 581 ( 0.00%) 64.56
other 9645715 ( 31.50%) 5318342127 ( 30.18%) 551.37
udp 6832569 ( 22.31%) 2244886138 ( 12.74%) 328.56
dns 1198568 ( 3.91%) 186743222 ( 1.06%) 155.81
realaud 132 ( 0.00%) 26715 ( 0.00%) 202.39
halflif 6866 ( 0.02%) 446628 ( 0.00%) 65.05
starcra 775 ( 0.00%) 263966 ( 0.00%) 340.60
everque 947 ( 0.00%) 185732 ( 0.00%) 196.13
unreal 139 ( 0.00%) 27907 ( 0.00%) 200.77
quake 70 ( 0.00%) 9253 ( 0.00%) 132.19
cuseeme 22 ( 0.00%) 3079 ( 0.00%) 139.95
other 5623239 ( 18.36%) 2056291792 ( 11.67%) 365.68
icmp 756700 ( 2.47%) 63291516 ( 0.36%) 83.64
ipip 314 ( 0.00%) 36308 ( 0.00%) 115.63
ipsec 78 ( 0.00%) 12324 ( 0.00%) 158.00
ip6 22369 ( 0.07%) 6152878 ( 0.03%) 275.06
other 1056 ( 0.00%) 114570 ( 0.00%) 108.49
frag 16993 ( 0.06%) 16830662 ( 0.10%) 990.45
ip6 31085 ( 0.10%) 5503075 ( 0.03%) 177.03
tcp6 16627 ( 0.05%) 2721191 ( 0.02%) 163.66
http(s) 21 ( 0.00%) 17674 ( 0.00%) 841.62
http(c) 1937 ( 0.01%) 176193 ( 0.00%) 90.96
smtp 1786 ( 0.01%) 910049 ( 0.01%) 509.55
ssh 8924 ( 0.03%) 1263040 ( 0.01%) 141.53
dns 5 ( 0.00%) 1774 ( 0.00%) 354.80
bgp 105 ( 0.00%) 13642 ( 0.00%) 129.92
other 3849 ( 0.01%) 338819 ( 0.00%) 88.03
udp6 10438 ( 0.03%) 2294184 ( 0.01%) 219.79
dns 10427 ( 0.03%) 2292974 ( 0.01%) 219.91
other 11 ( 0.00%) 1210 ( 0.00%) 110.00
icmp6 3964 ( 0.01%) 459178 ( 0.00%) 115.84
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 26 ( 0.00%) 24442 ( 0.00%) 940.08
tcpdump file: 200909261400.dump.gz (778.04 MB)