Traffic Trace Info
DumpFile: 200910121400.dump
FileSize: 1942.44MB
Id: 200910121400
StartTime: Mon Oct 12 14:00:01 2009
EndTime: Mon Oct 12 14:15:01 2009
TotalTime: 899.59 seconds
TotalCapSize: 1499.67MB CapLen: 96 bytes
# of packets: 29008765 (15759.85MB)
AvgRate: 146.96Mbps stddev:10.59M
IP flow (unique src/dst pair) Information
# of flows: 1420416 (avg. 20.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.8% 1.2% 1.1% 1.1% 1.0% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 824225
Top 10 bandwidth usage (bytes/total in %):
24.3% 7.1% 5.7% 5.1% 4.2% 3.5% 3.3% 2.5% 2.4% 1.8%
# of IPv6 addresses: 863
Top 10 bandwidth usage (bytes/total in %):
43.1% 42.9% 10.0% 6.3% 4.6% 3.6% 3.2% 3.1% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910121400.pktlen.png)
detailed numbers
[ 32- 63]: 7230048
[ 64- 127]: 8124376
[ 128- 255]: 1769719
[ 256- 511]: 1076806
[ 512- 1023]: 926591
[ 1024- 2047]: 9881225
Protocol Breakdown
![[protocol breakdown chart]](200910121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29008765 (100.00%) 16525395347 (100.00%) 569.67
ip 28962882 ( 99.84%) 16518577377 ( 99.96%) 570.34
tcp 20159880 ( 69.50%) 13067917423 ( 79.08%) 648.21
http(s) 6057670 ( 20.88%) 7714650643 ( 46.68%) 1273.53
http(c) 4766148 ( 16.43%) 602842024 ( 3.65%) 126.48
squid 1416491 ( 4.88%) 604393230 ( 3.66%) 426.68
smtp 242457 ( 0.84%) 47532302 ( 0.29%) 196.04
nntp 94 ( 0.00%) 8412 ( 0.00%) 89.49
ftp 27662 ( 0.10%) 3947190 ( 0.02%) 142.69
pop3 16577 ( 0.06%) 9713950 ( 0.06%) 585.99
imap 949 ( 0.00%) 297296 ( 0.00%) 313.27
telnet 7037 ( 0.02%) 569565 ( 0.00%) 80.94
ssh 12569 ( 0.04%) 4028836 ( 0.02%) 320.54
dns 7245 ( 0.02%) 6977435 ( 0.04%) 963.07
bgp 180 ( 0.00%) 73418 ( 0.00%) 407.88
napster 557 ( 0.00%) 299754 ( 0.00%) 538.16
realaud 1139 ( 0.00%) 143264 ( 0.00%) 125.78
rtsp 44804 ( 0.15%) 32967436 ( 0.20%) 735.81
icecast 9852 ( 0.03%) 1233724 ( 0.01%) 125.23
hotline 12 ( 0.00%) 1485 ( 0.00%) 123.75
other 7548435 ( 26.02%) 4038237339 ( 24.44%) 534.98
udp 8173060 ( 28.17%) 3370131528 ( 20.39%) 412.35
dns 1199401 ( 4.13%) 236119046 ( 1.43%) 196.86
rip 1 ( 0.00%) 104 ( 0.00%) 104.00
realaud 291 ( 0.00%) 38915 ( 0.00%) 133.73
halflif 133 ( 0.00%) 15650 ( 0.00%) 117.67
starcra 530 ( 0.00%) 106428 ( 0.00%) 200.81
everque 7755 ( 0.03%) 6753922 ( 0.04%) 870.91
unreal 114 ( 0.00%) 20603 ( 0.00%) 180.73
quake 416 ( 0.00%) 74753 ( 0.00%) 179.69
cuseeme 16 ( 0.00%) 2849 ( 0.00%) 178.06
other 6954335 ( 23.97%) 3126232866 ( 18.92%) 449.54
icmp 564770 ( 1.95%) 50401971 ( 0.30%) 89.24
ipip 326 ( 0.00%) 38416 ( 0.00%) 117.84
ipsec 70 ( 0.00%) 11060 ( 0.00%) 158.00
ip6 32299 ( 0.11%) 6531368 ( 0.04%) 202.22
other 32477 ( 0.11%) 23545611 ( 0.14%) 724.99
frag 28905 ( 0.10%) 22552170 ( 0.14%) 780.22
ip6 45883 ( 0.16%) 6817970 ( 0.04%) 148.59
tcp6 31139 ( 0.11%) 4003149 ( 0.02%) 128.56
http(s) 135 ( 0.00%) 82838 ( 0.00%) 613.61
http(c) 1581 ( 0.01%) 149760 ( 0.00%) 94.72
smtp 1543 ( 0.01%) 737349 ( 0.00%) 477.87
ssh 14 ( 0.00%) 2268 ( 0.00%) 162.00
dns 5 ( 0.00%) 683 ( 0.00%) 136.60
bgp 117 ( 0.00%) 15754 ( 0.00%) 134.65
other 27744 ( 0.10%) 3014497 ( 0.02%) 108.65
udp6 10511 ( 0.04%) 2225586 ( 0.01%) 211.74
dns 10474 ( 0.04%) 2220876 ( 0.01%) 212.04
other 37 ( 0.00%) 4710 ( 0.00%) 127.30
icmp6 4159 ( 0.01%) 537941 ( 0.00%) 129.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 44 ( 0.00%) 47214 ( 0.00%) 1073.05
tcpdump file: 200910121400.dump.gz (742.69 MB)