Traffic Trace Info
DumpFile: 200709041400.dump
FileSize: 1757.73MB
Id: 200709041400
StartTime: Tue Sep 4 14:00:00 2007
EndTime: Tue Sep 4 14:15:00 2007
TotalTime: 899.78 seconds
TotalCapSize: 1374.98MB CapLen: 96 bytes
# of packets: 25079257 (17707.03MB)
AvgRate: 165.09Mbps stddev:21.10M
IP flow (unique src/dst pair) Information
# of flows: 826242 (avg. 30.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 2.3% 2.1% 0.9% 0.7% 0.7% 0.6% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 453892
Top 10 bandwidth usage (bytes/total in %):
15.4% 9.5% 8.3% 5.7% 5.4% 5.3% 2.8% 2.5% 2.4% 2.3%
# of IPv6 addresses: 2501
Top 10 bandwidth usage (bytes/total in %):
34.6% 34.6% 15.0% 15.0% 9.8% 6.2% 6.2% 4.0% 3.7% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709041400.pktlen.png)
detailed numbers
[ 32- 63]: 5774118
[ 64- 127]: 5722080
[ 128- 255]: 763196
[ 256- 511]: 547400
[ 512- 1023]: 777463
[ 1024- 2047]: 11495000
Protocol Breakdown
![[protocol breakdown chart]](200709041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25079257 (100.00%) 18567161968 (100.00%) 740.34
ip 24938975 ( 99.44%) 18534116789 ( 99.82%) 743.18
tcp 21142890 ( 84.30%) 17561828028 ( 94.59%) 830.63
http(s) 10150070 ( 40.47%) 13616253216 ( 73.34%) 1341.49
http(c) 6898577 ( 27.51%) 1545153545 ( 8.32%) 223.98
squid 443845 ( 1.77%) 343933929 ( 1.85%) 774.90
smtp 520010 ( 2.07%) 189332679 ( 1.02%) 364.09
nntp 22 ( 0.00%) 1389 ( 0.00%) 63.14
ftp 29272 ( 0.12%) 2908777 ( 0.02%) 99.37
pop3 14576 ( 0.06%) 6256724 ( 0.03%) 429.25
imap 12079 ( 0.05%) 7894318 ( 0.04%) 653.56
telnet 545 ( 0.00%) 46196 ( 0.00%) 84.76
ssh 101840 ( 0.41%) 38665125 ( 0.21%) 379.67
dns 6748 ( 0.03%) 2229601 ( 0.01%) 330.41
bgp 241 ( 0.00%) 54618 ( 0.00%) 226.63
napster 2417 ( 0.01%) 896358 ( 0.00%) 370.86
realaud 12 ( 0.00%) 1494 ( 0.00%) 124.50
rtsp 134026 ( 0.53%) 62079014 ( 0.33%) 463.19
icecast 44793 ( 0.18%) 30366963 ( 0.16%) 677.94
hotline 18 ( 0.00%) 1843 ( 0.00%) 102.39
other 2783795 ( 11.10%) 1715751999 ( 9.24%) 616.34
udp 2921602 ( 11.65%) 880581653 ( 4.74%) 301.40
dns 1704716 ( 6.80%) 210206162 ( 1.13%) 123.31
realaud 1913 ( 0.01%) 115875 ( 0.00%) 60.57
halflif 16 ( 0.00%) 1742 ( 0.00%) 108.88
starcra 10 ( 0.00%) 1209 ( 0.00%) 120.90
everque 92 ( 0.00%) 13798 ( 0.00%) 149.98
unreal 23 ( 0.00%) 1878 ( 0.00%) 81.65
quake 13 ( 0.00%) 1143 ( 0.00%) 87.92
cuseeme 6 ( 0.00%) 774 ( 0.00%) 129.00
other 1214805 ( 4.84%) 670236908 ( 3.61%) 551.72
icmp 740133 ( 2.95%) 63170346 ( 0.34%) 85.35
ipip 337 ( 0.00%) 39962 ( 0.00%) 118.58
ipsec 1336 ( 0.01%) 1297944 ( 0.01%) 971.51
ip6 10476 ( 0.04%) 4468455 ( 0.02%) 426.54
other 122201 ( 0.49%) 22730401 ( 0.12%) 186.01
frag 882 ( 0.00%) 745406 ( 0.00%) 845.13
ip6 140282 ( 0.56%) 33045179 ( 0.18%) 235.56
tcp6 84425 ( 0.34%) 24384523 ( 0.13%) 288.83
http(s) 4411 ( 0.02%) 5791714 ( 0.03%) 1313.02
http(c) 33934 ( 0.14%) 3511092 ( 0.02%) 103.47
smtp 433 ( 0.00%) 247075 ( 0.00%) 570.61
ftp 62 ( 0.00%) 6349 ( 0.00%) 102.40
pop3 48 ( 0.00%) 4368 ( 0.00%) 91.00
ssh 574 ( 0.00%) 64366 ( 0.00%) 112.14
dns 4 ( 0.00%) 536 ( 0.00%) 134.00
bgp 148 ( 0.00%) 14854 ( 0.00%) 100.36
other 44811 ( 0.18%) 14744169 ( 0.08%) 329.03
udp6 48111 ( 0.19%) 7670572 ( 0.04%) 159.43
dns 46399 ( 0.19%) 7284261 ( 0.04%) 156.99
starcra 13 ( 0.00%) 3596 ( 0.00%) 276.62
everque 18 ( 0.00%) 3642 ( 0.00%) 202.33
other 1681 ( 0.01%) 379073 ( 0.00%) 225.50
icmp6 7518 ( 0.03%) 925630 ( 0.00%) 123.12
ip6 157 ( 0.00%) 22469 ( 0.00%) 143.11
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 41 ( 0.00%) 37905 ( 0.00%) 924.51
tcpdump file: 200709041400.dump.gz (651.52 MB)