Traffic Trace Info
DumpFile: 200709051400.dump
FileSize: 1803.58MB
Id: 200709051400
StartTime: Wed Sep 5 14:00:01 2007
EndTime: Wed Sep 5 14:15:01 2007
TotalTime: 899.56 seconds
TotalCapSize: 1410.58MB CapLen: 96 bytes
# of packets: 25751083 (17449.51MB)
AvgRate: 162.73Mbps stddev:29.20M
IP flow (unique src/dst pair) Information
# of flows: 849422 (avg. 30.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.6% 1.4% 1.4% 1.3% 1.1% 1.0% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 436751
Top 10 bandwidth usage (bytes/total in %):
12.8% 8.9% 8.6% 6.0% 3.6% 3.0% 2.8% 1.8% 1.7% 1.6%
# of IPv6 addresses: 2477
Top 10 bandwidth usage (bytes/total in %):
26.2% 26.2% 10.3% 6.1% 4.7% 4.5% 4.2% 4.1% 3.7% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709051400.pktlen.png)
detailed numbers
[ 32- 63]: 6484316
[ 64- 127]: 6097465
[ 128- 255]: 756048
[ 256- 511]: 561234
[ 512- 1023]: 567227
[ 1024- 2047]: 11284793
Protocol Breakdown
![[protocol breakdown chart]](200709051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25751083 (100.00%) 18297139488 (100.00%) 710.54
ip 25681038 ( 99.73%) 18282842270 ( 99.92%) 711.92
tcp 22212598 ( 86.26%) 17725174559 ( 96.87%) 797.98
http(s) 10162282 ( 39.46%) 13711837102 ( 74.94%) 1349.29
http(c) 7432412 ( 28.86%) 1580053258 ( 8.64%) 212.59
squid 323829 ( 1.26%) 195072148 ( 1.07%) 602.39
smtp 766914 ( 2.98%) 156426608 ( 0.85%) 203.97
nntp 256 ( 0.00%) 105118 ( 0.00%) 410.62
ftp 6200 ( 0.02%) 516720 ( 0.00%) 83.34
pop3 18130 ( 0.07%) 7701742 ( 0.04%) 424.81
imap 10528 ( 0.04%) 4601875 ( 0.03%) 437.11
telnet 257 ( 0.00%) 28341 ( 0.00%) 110.28
ssh 106752 ( 0.41%) 45811381 ( 0.25%) 429.14
dns 4577 ( 0.02%) 318029 ( 0.00%) 69.48
bgp 288 ( 0.00%) 65986 ( 0.00%) 229.12
napster 32 ( 0.00%) 2492 ( 0.00%) 77.88
rtsp 315677 ( 1.23%) 19701461 ( 0.11%) 62.41
icecast 73058 ( 0.28%) 61022301 ( 0.33%) 835.26
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 2991399 ( 11.62%) 1941909575 ( 10.61%) 649.16
udp 2566510 ( 9.97%) 459350038 ( 2.51%) 178.98
dns 1781601 ( 6.92%) 231498977 ( 1.27%) 129.94
realaud 4909 ( 0.02%) 770802 ( 0.00%) 157.02
halflif 25 ( 0.00%) 2558 ( 0.00%) 102.32
starcra 16 ( 0.00%) 2194 ( 0.00%) 137.12
everque 1437 ( 0.01%) 278941 ( 0.00%) 194.11
unreal 21 ( 0.00%) 2447 ( 0.00%) 116.52
quake 14 ( 0.00%) 1182 ( 0.00%) 84.43
cuseeme 3 ( 0.00%) 255 ( 0.00%) 85.00
other 778478 ( 3.02%) 226788747 ( 1.24%) 291.32
icmp 700927 ( 2.72%) 59439523 ( 0.32%) 84.80
ipip 337 ( 0.00%) 39814 ( 0.00%) 118.14
ipsec 180 ( 0.00%) 19800 ( 0.00%) 110.00
ip6 7782 ( 0.03%) 4038830 ( 0.02%) 519.00
other 192704 ( 0.75%) 34779706 ( 0.19%) 180.48
frag 956 ( 0.00%) 793275 ( 0.00%) 829.79
ip6 70045 ( 0.27%) 14297218 ( 0.08%) 204.11
tcp6 23528 ( 0.09%) 6662214 ( 0.04%) 283.16
http(s) 628 ( 0.00%) 499793 ( 0.00%) 795.85
http(c) 12553 ( 0.05%) 1363054 ( 0.01%) 108.58
smtp 400 ( 0.00%) 103352 ( 0.00%) 258.38
ftp 11 ( 0.00%) 814 ( 0.00%) 74.00
pop3 46 ( 0.00%) 4204 ( 0.00%) 91.39
ssh 75 ( 0.00%) 11568 ( 0.00%) 154.24
dns 24 ( 0.00%) 2262 ( 0.00%) 94.25
bgp 110 ( 0.00%) 11510 ( 0.00%) 104.64
other 9681 ( 0.04%) 4665657 ( 0.03%) 481.94
udp6 37269 ( 0.14%) 6568934 ( 0.04%) 176.26
dns 35551 ( 0.14%) 6246144 ( 0.03%) 175.70
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
unreal 6 ( 0.00%) 822 ( 0.00%) 137.00
other 1711 ( 0.01%) 321831 ( 0.00%) 188.10
icmp6 9049 ( 0.04%) 1028700 ( 0.01%) 113.68
ip6 157 ( 0.00%) 22419 ( 0.00%) 142.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 10871 ( 0.00%) 905.92
tcpdump file: 200709051400.dump.gz (652.64 MB)