Traffic Trace Info
DumpFile: 200709131400.dump
FileSize: 1733.85MB
Id: 200709131400
StartTime: Thu Sep 13 14:00:00 2007
EndTime: Thu Sep 13 14:15:00 2007
TotalTime: 899.98 seconds
TotalCapSize: 1355.90MB CapLen: 96 bytes
# of packets: 24764552 (16903.37MB)
AvgRate: 157.55Mbps stddev:22.66M
IP flow (unique src/dst pair) Information
# of flows: 848480 (avg. 29.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.4% 2.3% 1.4% 1.3% 1.3% 1.2% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 468062
Top 10 bandwidth usage (bytes/total in %):
15.8% 8.7% 8.4% 3.9% 3.9% 3.0% 2.5% 2.5% 2.4% 2.1%
# of IPv6 addresses: 2683
Top 10 bandwidth usage (bytes/total in %):
31.4% 31.4% 19.1% 19.1% 10.8% 7.8% 7.8% 4.3% 4.1% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709131400.pktlen.png)
detailed numbers
[ 32- 63]: 5751690
[ 64- 127]: 5888924
[ 128- 255]: 930407
[ 256- 511]: 598266
[ 512- 1023]: 668291
[ 1024- 2047]: 10926974
Protocol Breakdown
![[protocol breakdown chart]](200709131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24764552 (100.00%) 17724466870 (100.00%) 715.72
ip 24618985 ( 99.41%) 17676181085 ( 99.73%) 717.99
tcp 21001985 ( 84.81%) 16873523676 ( 95.20%) 803.43
http(s) 9838494 ( 39.73%) 13409797244 ( 75.66%) 1362.99
http(c) 6058582 ( 24.46%) 839736665 ( 4.74%) 138.60
squid 663874 ( 2.68%) 491849044 ( 2.77%) 740.88
smtp 521600 ( 2.11%) 149230599 ( 0.84%) 286.10
nntp 8 ( 0.00%) 496 ( 0.00%) 62.00
ftp 92068 ( 0.37%) 119270621 ( 0.67%) 1295.46
pop3 18770 ( 0.08%) 10508271 ( 0.06%) 559.84
imap 6260 ( 0.03%) 2398895 ( 0.01%) 383.21
telnet 508 ( 0.00%) 37275 ( 0.00%) 73.38
ssh 107581 ( 0.43%) 39741868 ( 0.22%) 369.41
dns 6716 ( 0.03%) 463570 ( 0.00%) 69.02
bgp 344 ( 0.00%) 116349 ( 0.00%) 338.22
realaud 316 ( 0.00%) 87357 ( 0.00%) 276.45
rtsp 555472 ( 2.24%) 157987272 ( 0.89%) 284.42
icecast 16024 ( 0.06%) 5741087 ( 0.03%) 358.28
hotline 46 ( 0.00%) 30546 ( 0.00%) 664.04
other 3115318 ( 12.58%) 1646526277 ( 9.29%) 528.53
udp 2841344 ( 11.47%) 716089340 ( 4.04%) 252.02
dns 1843627 ( 7.44%) 228907875 ( 1.29%) 124.16
realaud 10806 ( 0.04%) 7814394 ( 0.04%) 723.15
halflif 22 ( 0.00%) 2341 ( 0.00%) 106.41
starcra 31 ( 0.00%) 5111 ( 0.00%) 164.87
everque 78 ( 0.00%) 12751 ( 0.00%) 163.47
unreal 14 ( 0.00%) 1854 ( 0.00%) 132.43
quake 16 ( 0.00%) 1927 ( 0.00%) 120.44
cuseeme 6 ( 0.00%) 684 ( 0.00%) 114.00
other 986725 ( 3.98%) 479335284 ( 2.70%) 485.78
icmp 641886 ( 2.59%) 54549975 ( 0.31%) 84.98
ipip 343 ( 0.00%) 40950 ( 0.00%) 119.39
ipsec 370 ( 0.00%) 164340 ( 0.00%) 444.16
ip6 7361 ( 0.03%) 3994936 ( 0.02%) 542.72
other 125696 ( 0.51%) 27817868 ( 0.16%) 221.31
frag 10153 ( 0.04%) 9394352 ( 0.05%) 925.28
ip6 145567 ( 0.59%) 48285785 ( 0.27%) 331.71
tcp6 73399 ( 0.30%) 24183976 ( 0.14%) 329.49
http(s) 9740 ( 0.04%) 13096715 ( 0.07%) 1344.63
http(c) 50443 ( 0.20%) 5600995 ( 0.03%) 111.04
squid 15 ( 0.00%) 2855 ( 0.00%) 190.33
smtp 1058 ( 0.00%) 338845 ( 0.00%) 320.27
ssh 342 ( 0.00%) 105638 ( 0.00%) 308.88
dns 18 ( 0.00%) 2085 ( 0.00%) 115.83
bgp 125 ( 0.00%) 13431 ( 0.00%) 107.45
rtsp 405 ( 0.00%) 242898 ( 0.00%) 599.75
other 11253 ( 0.05%) 4780514 ( 0.03%) 424.82
udp6 60791 ( 0.25%) 22627648 ( 0.13%) 372.22
dns 43073 ( 0.17%) 7199039 ( 0.04%) 167.14
starcra 4 ( 0.00%) 865 ( 0.00%) 216.25
everque 66 ( 0.00%) 21383 ( 0.00%) 323.98
other 17648 ( 0.07%) 15406361 ( 0.09%) 872.98
icmp6 9506 ( 0.04%) 1188972 ( 0.01%) 125.08
ip6 1803 ( 0.01%) 246207 ( 0.00%) 136.55
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 37 ( 0.00%) 34766 ( 0.00%) 939.62
tcpdump file: 200709131400.dump.gz (639.49 MB)