Traffic Trace Info
DumpFile: 200709061400.dump
FileSize: 1633.43MB
Id: 200709061400
StartTime: Thu Sep 6 14:00:00 2007
EndTime: Thu Sep 6 14:15:00 2007
TotalTime: 899.98 seconds
TotalCapSize: 1278.13MB CapLen: 96 bytes
# of packets: 23280169 (14990.43MB)
AvgRate: 139.69Mbps stddev:26.56M
IP flow (unique src/dst pair) Information
# of flows: 686584 (avg. 33.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 1.6% 1.5% 1.4% 1.4% 1.3% 1.1% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 364172
Top 10 bandwidth usage (bytes/total in %):
13.9% 10.3% 10.1% 5.1% 4.1% 3.8% 3.1% 2.6% 2.5% 2.4%
# of IPv6 addresses: 1830
Top 10 bandwidth usage (bytes/total in %):
28.0% 28.0% 19.9% 4.8% 4.2% 3.9% 3.7% 3.7% 3.4% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709061400.pktlen.png)
detailed numbers
[ 32- 63]: 6328389
[ 64- 127]: 5439919
[ 128- 255]: 721025
[ 256- 511]: 571559
[ 512- 1023]: 660752
[ 1024- 2047]: 9558525
Protocol Breakdown
![[protocol breakdown chart]](200709061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23280169 (100.00%) 15718606822 (100.00%) 675.19
ip 23155945 ( 99.47%) 15695404752 ( 99.85%) 677.81
tcp 20253270 ( 87.00%) 15164155619 ( 96.47%) 748.73
http(s) 9251640 ( 39.74%) 12741035914 ( 81.06%) 1377.17
http(c) 7198669 ( 30.92%) 807831132 ( 5.14%) 112.22
squid 544097 ( 2.34%) 322594041 ( 2.05%) 592.90
smtp 433412 ( 1.86%) 148240008 ( 0.94%) 342.03
nntp 32 ( 0.00%) 3022 ( 0.00%) 94.44
ftp 85858 ( 0.37%) 111395054 ( 0.71%) 1297.43
pop3 25458 ( 0.11%) 14783571 ( 0.09%) 580.70
imap 4413 ( 0.02%) 1036994 ( 0.01%) 234.99
telnet 163 ( 0.00%) 23781 ( 0.00%) 145.90
ssh 454183 ( 1.95%) 107490420 ( 0.68%) 236.67
dns 5246 ( 0.02%) 404596 ( 0.00%) 77.12
bgp 289 ( 0.00%) 91936 ( 0.00%) 318.12
napster 106 ( 0.00%) 10299 ( 0.00%) 97.16
realaud 82 ( 0.00%) 6850 ( 0.00%) 83.54
rtsp 217507 ( 0.93%) 28177559 ( 0.18%) 129.55
icecast 1346 ( 0.01%) 168907 ( 0.00%) 125.49
other 2030766 ( 8.72%) 880861355 ( 5.60%) 433.76
udp 2260413 ( 9.71%) 466780463 ( 2.97%) 206.50
dns 1445423 ( 6.21%) 190228596 ( 1.21%) 131.61
realaud 2404 ( 0.01%) 145694 ( 0.00%) 60.60
halflif 16 ( 0.00%) 1509 ( 0.00%) 94.31
starcra 11 ( 0.00%) 1422 ( 0.00%) 129.27
everque 43 ( 0.00%) 7375 ( 0.00%) 171.51
unreal 11 ( 0.00%) 1586 ( 0.00%) 144.18
quake 20 ( 0.00%) 1870 ( 0.00%) 93.50
cuseeme 11 ( 0.00%) 2502 ( 0.00%) 227.45
other 812472 ( 3.49%) 276388776 ( 1.76%) 340.18
icmp 562534 ( 2.42%) 49859394 ( 0.32%) 88.63
ipip 332 ( 0.00%) 40448 ( 0.00%) 121.83
ipsec 177 ( 0.00%) 19470 ( 0.00%) 110.00
ip6 7819 ( 0.03%) 4091070 ( 0.03%) 523.22
other 71400 ( 0.31%) 10458288 ( 0.07%) 146.47
frag 2394 ( 0.01%) 1932615 ( 0.01%) 807.27
ip6 124224 ( 0.53%) 23202070 ( 0.15%) 186.78
tcp6 74734 ( 0.32%) 15057819 ( 0.10%) 201.49
http(s) 1166 ( 0.01%) 1494907 ( 0.01%) 1282.08
http(c) 41634 ( 0.18%) 4727020 ( 0.03%) 113.54
squid 5 ( 0.00%) 742 ( 0.00%) 148.40
smtp 667 ( 0.00%) 152859 ( 0.00%) 229.17
ftp 38 ( 0.00%) 3069 ( 0.00%) 80.76
ssh 10538 ( 0.05%) 6619347 ( 0.04%) 628.14
bgp 98 ( 0.00%) 13100 ( 0.00%) 133.67
other 20588 ( 0.09%) 2046775 ( 0.01%) 99.42
udp6 39004 ( 0.17%) 6825980 ( 0.04%) 175.01
dns 37974 ( 0.16%) 6635979 ( 0.04%) 174.75
everque 16 ( 0.00%) 3697 ( 0.00%) 231.06
other 1014 ( 0.00%) 186304 ( 0.00%) 183.73
icmp6 8555 ( 0.04%) 1043067 ( 0.01%) 121.92
ip6 1887 ( 0.01%) 258013 ( 0.00%) 136.73
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14 ( 0.00%) 13111 ( 0.00%) 936.50
tcpdump file: 200709061400.dump.gz (594.43 MB)