Traffic Trace Info
DumpFile: 200709141400.dump
FileSize: 1590.32MB
Id: 200709141400
StartTime: Fri Sep 14 14:00:01 2007
EndTime: Fri Sep 14 14:15:00 2007
TotalTime: 899.79 seconds
TotalCapSize: 1244.68MB CapLen: 96 bytes
# of packets: 22647287 (13948.64MB)
AvgRate: 130.01Mbps stddev:22.17M
IP flow (unique src/dst pair) Information
# of flows: 644974 (avg. 35.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 1.5% 1.0% 0.8% 0.8% 0.8% 0.8% 0.7% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 326272
Top 10 bandwidth usage (bytes/total in %):
11.7% 11.5% 11.1% 3.9% 3.8% 3.7% 2.1% 1.8% 1.7% 1.7%
# of IPv6 addresses: 2618
Top 10 bandwidth usage (bytes/total in %):
39.3% 38.6% 19.2% 19.2% 16.5% 7.0% 2.9% 2.0% 2.0% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709141400.pktlen.png)
detailed numbers
[ 32- 63]: 5400353
[ 64- 127]: 6104439
[ 128- 255]: 983340
[ 256- 511]: 564706
[ 512- 1023]: 701927
[ 1024- 2047]: 8892522
Protocol Breakdown
![[protocol breakdown chart]](200709141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22647287 (100.00%) 14626211022 (100.00%) 645.83
ip 22382576 ( 98.83%) 14579320735 ( 99.68%) 651.37
tcp 18250706 ( 80.59%) 13490931041 ( 92.24%) 739.20
http(s) 7470655 ( 32.99%) 10123508468 ( 69.21%) 1355.10
http(c) 5774364 ( 25.50%) 667902025 ( 4.57%) 115.67
squid 794466 ( 3.51%) 694111554 ( 4.75%) 873.68
smtp 433622 ( 1.91%) 128379907 ( 0.88%) 296.06
nntp 14 ( 0.00%) 862 ( 0.00%) 61.57
ftp 18905 ( 0.08%) 1818150 ( 0.01%) 96.17
pop3 21202 ( 0.09%) 11178297 ( 0.08%) 527.23
imap 10132 ( 0.04%) 6267993 ( 0.04%) 618.63
telnet 760 ( 0.00%) 84302 ( 0.00%) 110.92
ssh 988450 ( 4.36%) 692454122 ( 4.73%) 700.55
dns 6583 ( 0.03%) 2226943 ( 0.02%) 338.29
bgp 348 ( 0.00%) 114487 ( 0.00%) 328.99
napster 86 ( 0.00%) 12427 ( 0.00%) 144.50
realaud 1533 ( 0.01%) 152249 ( 0.00%) 99.31
rtsp 195282 ( 0.86%) 67669682 ( 0.46%) 346.52
icecast 10083 ( 0.04%) 715419 ( 0.00%) 70.95
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 2524208 ( 11.15%) 1094333372 ( 7.48%) 433.54
udp 3431749 ( 15.15%) 1012461460 ( 6.92%) 295.03
dns 1901964 ( 8.40%) 237147951 ( 1.62%) 124.69
realaud 4463 ( 0.02%) 285462 ( 0.00%) 63.96
halflif 15 ( 0.00%) 1797 ( 0.00%) 119.80
starcra 22 ( 0.00%) 2792 ( 0.00%) 126.91
everque 75 ( 0.00%) 14394 ( 0.00%) 191.92
unreal 63 ( 0.00%) 4147 ( 0.00%) 65.83
quake 12 ( 0.00%) 976 ( 0.00%) 81.33
cuseeme 2 ( 0.00%) 241 ( 0.00%) 120.50
other 1525072 ( 6.73%) 774993323 ( 5.30%) 508.17
icmp 619876 ( 2.74%) 60880883 ( 0.42%) 98.21
ipip 355 ( 0.00%) 42606 ( 0.00%) 120.02
ipsec 160 ( 0.00%) 17600 ( 0.00%) 110.00
ip6 7203 ( 0.03%) 3960574 ( 0.03%) 549.85
other 72527 ( 0.32%) 11026571 ( 0.08%) 152.03
frag 19947 ( 0.09%) 17057529 ( 0.12%) 855.14
ip6 264711 ( 1.17%) 46890287 ( 0.32%) 177.14
tcp6 212082 ( 0.94%) 37990208 ( 0.26%) 179.13
http(s) 368 ( 0.00%) 309261 ( 0.00%) 840.38
http(c) 82153 ( 0.36%) 8552375 ( 0.06%) 104.10
smtp 921 ( 0.00%) 307164 ( 0.00%) 333.51
ssh 799 ( 0.00%) 80828 ( 0.00%) 101.16
dns 12 ( 0.00%) 1122 ( 0.00%) 93.50
bgp 119 ( 0.00%) 12899 ( 0.00%) 108.39
other 127710 ( 0.56%) 28726559 ( 0.20%) 224.94
udp6 41231 ( 0.18%) 7436432 ( 0.05%) 180.36
dns 38319 ( 0.17%) 6842992 ( 0.05%) 178.58
starcra 15 ( 0.00%) 4358 ( 0.00%) 290.53
everque 93 ( 0.00%) 22545 ( 0.00%) 242.42
other 2804 ( 0.01%) 566537 ( 0.00%) 202.05
icmp6 11208 ( 0.05%) 1418331 ( 0.01%) 126.55
ip6 127 ( 0.00%) 18293 ( 0.00%) 144.04
pim6 40 ( 0.00%) 5040 ( 0.00%) 126.00
other6 23 ( 0.00%) 21983 ( 0.00%) 955.78
tcpdump file: 200709141400.dump.gz (591.17 MB)