Traffic Trace Info
DumpFile: 200709011400.dump
FileSize: 1335.17MB
Id: 200709011400
StartTime: Sat Sep 1 14:00:01 2007
EndTime: Sat Sep 1 14:15:01 2007
TotalTime: 899.92 seconds
TotalCapSize: 1041.37MB CapLen: 96 bytes
# of packets: 19249661 (12134.71MB)
AvgRate: 113.12Mbps stddev:9.83M
IP flow (unique src/dst pair) Information
# of flows: 729689 (avg. 26.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 3.4% 1.9% 1.8% 1.7% 1.3% 1.2% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 405491
Top 10 bandwidth usage (bytes/total in %):
18.6% 12.8% 11.8% 7.5% 6.4% 3.9% 2.5% 2.2% 2.0% 2.0%
# of IPv6 addresses: 2265
Top 10 bandwidth usage (bytes/total in %):
25.3% 25.3% 10.7% 7.5% 5.7% 4.9% 3.8% 3.5% 3.4% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709011400.pktlen.png)
detailed numbers
[ 32- 63]: 4106143
[ 64- 127]: 5650080
[ 128- 255]: 777163
[ 256- 511]: 487676
[ 512- 1023]: 453195
[ 1024- 2047]: 7775404
Protocol Breakdown
![[protocol breakdown chart]](200709011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19249661 (100.00%) 12724162475 (100.00%) 661.01
ip 19179222 ( 99.63%) 12709874417 ( 99.89%) 662.69
tcp 15588925 ( 80.98%) 11935367222 ( 93.80%) 765.63
http(s) 6825228 ( 35.46%) 9464672202 ( 74.38%) 1386.72
http(c) 3830582 ( 19.90%) 375109226 ( 2.95%) 97.92
squid 701982 ( 3.65%) 499335526 ( 3.92%) 711.32
smtp 337330 ( 1.75%) 59909582 ( 0.47%) 177.60
nntp 1 ( 0.00%) 74 ( 0.00%) 74.00
ftp 249515 ( 1.30%) 309340957 ( 2.43%) 1239.77
pop3 10939 ( 0.06%) 5391144 ( 0.04%) 492.84
imap 4936 ( 0.03%) 548486 ( 0.00%) 111.12
telnet 70 ( 0.00%) 5288 ( 0.00%) 75.54
ssh 1422191 ( 7.39%) 264636812 ( 2.08%) 186.08
dns 5046 ( 0.03%) 350117 ( 0.00%) 69.39
bgp 202 ( 0.00%) 50828 ( 0.00%) 251.62
napster 5 ( 0.00%) 659 ( 0.00%) 131.80
realaud 3 ( 0.00%) 180 ( 0.00%) 60.00
rtsp 315531 ( 1.64%) 78591483 ( 0.62%) 249.08
icecast 634 ( 0.00%) 63152 ( 0.00%) 99.61
other 1884730 ( 9.79%) 877361506 ( 6.90%) 465.51
udp 2716754 ( 14.11%) 682686707 ( 5.37%) 251.29
dns 1485927 ( 7.72%) 179985640 ( 1.41%) 121.13
realaud 484 ( 0.00%) 41375 ( 0.00%) 85.49
halflif 17 ( 0.00%) 2003 ( 0.00%) 117.82
starcra 9 ( 0.00%) 1625 ( 0.00%) 180.56
everque 46 ( 0.00%) 7078 ( 0.00%) 153.87
unreal 5 ( 0.00%) 456 ( 0.00%) 91.20
quake 11 ( 0.00%) 960 ( 0.00%) 87.27
cuseeme 2 ( 0.00%) 171 ( 0.00%) 85.50
other 1230249 ( 6.39%) 502645413 ( 3.95%) 408.57
icmp 758270 ( 3.94%) 63860401 ( 0.50%) 84.22
ipip 345 ( 0.00%) 41794 ( 0.00%) 121.14
ipsec 179 ( 0.00%) 19690 ( 0.00%) 110.00
ip6 7398 ( 0.04%) 3955014 ( 0.03%) 534.61
other 107351 ( 0.56%) 23943589 ( 0.19%) 223.04
frag 1072 ( 0.01%) 867776 ( 0.01%) 809.49
ip6 70439 ( 0.37%) 14288058 ( 0.11%) 202.84
tcp6 28616 ( 0.15%) 6853501 ( 0.05%) 239.50
http(s) 171 ( 0.00%) 125175 ( 0.00%) 732.02
http(c) 14930 ( 0.08%) 1579221 ( 0.01%) 105.78
squid 32 ( 0.00%) 2624 ( 0.00%) 82.00
smtp 388 ( 0.00%) 91402 ( 0.00%) 235.57
pop3 30 ( 0.00%) 2748 ( 0.00%) 91.60
ssh 1688 ( 0.01%) 283878 ( 0.00%) 168.17
dns 16 ( 0.00%) 1748 ( 0.00%) 109.25
bgp 114 ( 0.00%) 12363 ( 0.00%) 108.45
icecast 16 ( 0.00%) 1312 ( 0.00%) 82.00
other 11231 ( 0.06%) 4753030 ( 0.04%) 423.21
udp6 33645 ( 0.17%) 6379906 ( 0.05%) 189.62
dns 31507 ( 0.16%) 6003091 ( 0.05%) 190.53
starcra 8 ( 0.00%) 1435 ( 0.00%) 179.38
everque 7 ( 0.00%) 930 ( 0.00%) 132.86
other 2123 ( 0.01%) 374450 ( 0.00%) 176.38
icmp6 7886 ( 0.04%) 933868 ( 0.01%) 118.42
ip6 160 ( 0.00%) 22850 ( 0.00%) 142.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 102 ( 0.00%) 93853 ( 0.00%) 920.13
tcpdump file: 200709011400.dump.gz (478.79 MB)