Traffic Trace Info
DumpFile: 200709101400.dump
FileSize: 1941.55MB
Id: 200709101400
StartTime: Mon Sep 10 14:00:00 2007
EndTime: Mon Sep 10 14:15:00 2007
TotalTime: 900.15 seconds
TotalCapSize: 1516.60MB CapLen: 96 bytes
# of packets: 27844911 (18661.45MB)
AvgRate: 173.91Mbps stddev:18.59M
IP flow (unique src/dst pair) Information
# of flows: 760192 (avg. 36.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 1.6% 1.4% 1.2% 1.1% 1.0% 1.0% 1.0% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 402835
Top 10 bandwidth usage (bytes/total in %):
11.9% 8.5% 8.5% 8.2% 8.0% 2.6% 2.5% 2.4% 1.8% 1.7%
# of IPv6 addresses: 2517
Top 10 bandwidth usage (bytes/total in %):
29.7% 26.5% 26.5% 8.5% 6.5% 6.2% 5.4% 3.7% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709101400.pktlen.png)
detailed numbers
[ 32- 63]: 6051047
[ 64- 127]: 7210855
[ 128- 255]: 1061883
[ 256- 511]: 652303
[ 512- 1023]: 832657
[ 1024- 2047]: 12036166
Protocol Breakdown
![[protocol breakdown chart]](200709101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27844911 (100.00%) 19567945360 (100.00%) 702.75
ip 27669338 ( 99.37%) 19535051034 ( 99.83%) 706.02
tcp 22761221 ( 81.74%) 17121855152 ( 87.50%) 752.24
http(s) 9898147 ( 35.55%) 13620126659 ( 69.60%) 1376.03
http(c) 6880048 ( 24.71%) 1022631959 ( 5.23%) 148.64
squid 815578 ( 2.93%) 649743776 ( 3.32%) 796.67
smtp 508549 ( 1.83%) 154061094 ( 0.79%) 302.94
nntp 175 ( 0.00%) 19198 ( 0.00%) 109.70
ftp 75643 ( 0.27%) 75420038 ( 0.39%) 997.05
pop3 25414 ( 0.09%) 23293414 ( 0.12%) 916.56
imap 5772 ( 0.02%) 1493838 ( 0.01%) 258.81
telnet 2058 ( 0.01%) 216159 ( 0.00%) 105.03
ssh 1539302 ( 5.53%) 267060218 ( 1.36%) 173.49
dns 7862 ( 0.03%) 590921 ( 0.00%) 75.16
bgp 341 ( 0.00%) 71705 ( 0.00%) 210.28
napster 181 ( 0.00%) 17108 ( 0.00%) 94.52
realaud 29 ( 0.00%) 3700 ( 0.00%) 127.59
rtsp 278392 ( 1.00%) 78516171 ( 0.40%) 282.03
icecast 12265 ( 0.04%) 4839962 ( 0.02%) 394.62
hotline 16 ( 0.00%) 1038 ( 0.00%) 64.88
other 2711433 ( 9.74%) 1223747234 ( 6.25%) 451.33
udp 3930075 ( 14.11%) 2297781068 ( 11.74%) 584.67
dns 1693123 ( 6.08%) 216117217 ( 1.10%) 127.64
realaud 917 ( 0.00%) 56125 ( 0.00%) 61.21
halflif 17 ( 0.00%) 1644 ( 0.00%) 96.71
starcra 19 ( 0.00%) 3077 ( 0.00%) 161.95
everque 77 ( 0.00%) 14663 ( 0.00%) 190.43
unreal 36 ( 0.00%) 6122 ( 0.00%) 170.06
quake 13 ( 0.00%) 1208 ( 0.00%) 92.92
cuseeme 5 ( 0.00%) 717 ( 0.00%) 143.40
other 2235845 ( 8.03%) 2081576445 ( 10.64%) 931.00
icmp 538967 ( 1.94%) 48456621 ( 0.25%) 89.91
ipip 341 ( 0.00%) 42054 ( 0.00%) 123.33
ipsec 180 ( 0.00%) 19800 ( 0.00%) 110.00
ip6 7522 ( 0.03%) 3983836 ( 0.02%) 529.62
other 431032 ( 1.55%) 62912503 ( 0.32%) 145.96
frag 8978 ( 0.03%) 8242830 ( 0.04%) 918.11
ip6 175571 ( 0.63%) 32894206 ( 0.17%) 187.36
tcp6 122107 ( 0.44%) 23791038 ( 0.12%) 194.84
http(s) 3162 ( 0.01%) 3136292 ( 0.02%) 991.87
http(c) 101565 ( 0.36%) 10341732 ( 0.05%) 101.82
squid 9 ( 0.00%) 702 ( 0.00%) 78.00
smtp 714 ( 0.00%) 225419 ( 0.00%) 315.71
ssh 319 ( 0.00%) 82584 ( 0.00%) 258.88
bgp 119 ( 0.00%) 13105 ( 0.00%) 110.13
other 16219 ( 0.06%) 9991204 ( 0.05%) 616.02
udp6 40383 ( 0.15%) 7452828 ( 0.04%) 184.55
dns 37985 ( 0.14%) 6915607 ( 0.04%) 182.06
halflif 3 ( 0.00%) 1052 ( 0.00%) 350.67
other 2395 ( 0.01%) 536169 ( 0.00%) 223.87
icmp6 10974 ( 0.04%) 1326163 ( 0.01%) 120.85
ip6 2030 ( 0.01%) 277135 ( 0.00%) 136.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 47 ( 0.00%) 42962 ( 0.00%) 914.09
tcpdump file: 200709101400.dump.gz (722.12 MB)