Traffic Trace Info
DumpFile: 200709121400.dump
FileSize: 1676.78MB
Id: 200709121400
StartTime: Wed Sep 12 14:00:00 2007
EndTime: Wed Sep 12 14:15:00 2007
TotalTime: 899.99 seconds
TotalCapSize: 1311.36MB CapLen: 96 bytes
# of packets: 23943317 (15839.99MB)
AvgRate: 147.64Mbps stddev:17.52M
IP flow (unique src/dst pair) Information
# of flows: 772346 (avg. 31.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.4% 1.3% 1.1% 0.9% 0.8% 0.8% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 431038
Top 10 bandwidth usage (bytes/total in %):
15.6% 10.2% 10.0% 5.3% 2.9% 2.5% 1.7% 1.4% 1.4% 1.4%
# of IPv6 addresses: 2730
Top 10 bandwidth usage (bytes/total in %):
40.8% 40.8% 19.7% 19.7% 11.6% 11.6% 2.4% 2.1% 1.6% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709121400.pktlen.png)
detailed numbers
[ 32- 63]: 5714757
[ 64- 127]: 6051054
[ 128- 255]: 752600
[ 256- 511]: 568912
[ 512- 1023]: 685693
[ 1024- 2047]: 10170301
Protocol Breakdown
![[protocol breakdown chart]](200709121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23943317 (100.00%) 16609437785 (100.00%) 693.70
ip 23725353 ( 99.09%) 16560073790 ( 99.70%) 697.99
tcp 19910751 ( 83.16%) 15732694120 ( 94.72%) 790.16
http(s) 8807944 ( 36.79%) 11631724472 ( 70.03%) 1320.59
http(c) 6743614 ( 28.16%) 1604764927 ( 9.66%) 237.97
squid 657739 ( 2.75%) 563648264 ( 3.39%) 856.95
smtp 538503 ( 2.25%) 140476808 ( 0.85%) 260.87
ftp 170651 ( 0.71%) 221215489 ( 1.33%) 1296.30
pop3 15328 ( 0.06%) 6240759 ( 0.04%) 407.15
imap 9379 ( 0.04%) 4918635 ( 0.03%) 524.43
telnet 385 ( 0.00%) 42901 ( 0.00%) 111.43
ssh 112318 ( 0.47%) 43216622 ( 0.26%) 384.77
dns 6220 ( 0.03%) 502282 ( 0.00%) 80.75
bgp 322 ( 0.00%) 108883 ( 0.00%) 338.15
napster 11 ( 0.00%) 931 ( 0.00%) 84.64
realaud 161 ( 0.00%) 59596 ( 0.00%) 370.16
rtsp 200946 ( 0.84%) 35748098 ( 0.22%) 177.90
icecast 1477 ( 0.01%) 153743 ( 0.00%) 104.09
other 2645751 ( 11.05%) 1479871590 ( 8.91%) 559.34
udp 2865864 ( 11.97%) 680538308 ( 4.10%) 237.46
dns 1776124 ( 7.42%) 223971502 ( 1.35%) 126.10
realaud 1877 ( 0.01%) 137261 ( 0.00%) 73.13
halflif 23 ( 0.00%) 2807 ( 0.00%) 122.04
starcra 29 ( 0.00%) 4735 ( 0.00%) 163.28
everque 65 ( 0.00%) 9945 ( 0.00%) 153.00
unreal 21 ( 0.00%) 2654 ( 0.00%) 126.38
quake 38 ( 0.00%) 4127 ( 0.00%) 108.61
cuseeme 5 ( 0.00%) 487 ( 0.00%) 97.40
other 1087667 ( 4.54%) 456395810 ( 2.75%) 419.61
icmp 608310 ( 2.54%) 52218041 ( 0.31%) 85.84
ipip 329 ( 0.00%) 38794 ( 0.00%) 117.91
ipsec 518 ( 0.00%) 182076 ( 0.00%) 351.50
ip6 7536 ( 0.03%) 4008192 ( 0.02%) 531.87
other 332045 ( 1.39%) 90394259 ( 0.54%) 272.23
frag 8666 ( 0.04%) 7890557 ( 0.05%) 910.52
ip6 217964 ( 0.91%) 49363995 ( 0.30%) 226.48
tcp6 145495 ( 0.61%) 20149184 ( 0.12%) 138.49
http(s) 879 ( 0.00%) 641214 ( 0.00%) 729.48
http(c) 14405 ( 0.06%) 1590387 ( 0.01%) 110.41
smtp 525 ( 0.00%) 196705 ( 0.00%) 374.68
ftp 54 ( 0.00%) 4978 ( 0.00%) 92.19
ssh 868 ( 0.00%) 109730 ( 0.00%) 126.42
dns 21 ( 0.00%) 2140 ( 0.00%) 101.90
bgp 124 ( 0.00%) 14135 ( 0.00%) 113.99
rtsp 542 ( 0.00%) 313159 ( 0.00%) 577.78
other 128077 ( 0.53%) 17276736 ( 0.10%) 134.89
udp6 61396 ( 0.26%) 27680172 ( 0.17%) 450.85
dns 38747 ( 0.16%) 7215212 ( 0.04%) 186.21
starcra 2 ( 0.00%) 713 ( 0.00%) 356.50
everque 24 ( 0.00%) 7415 ( 0.00%) 308.96
other 22623 ( 0.09%) 20456832 ( 0.12%) 904.25
icmp6 10182 ( 0.04%) 1359052 ( 0.01%) 133.48
ip6 793 ( 0.00%) 109705 ( 0.00%) 138.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 68 ( 0.00%) 61802 ( 0.00%) 908.85
tcpdump file: 200709121400.dump.gz (620.62 MB)