Traffic Trace Info
DumpFile: 200709151400.dump
FileSize: 1383.93MB
Id: 200709151400
StartTime: Sat Sep 15 14:00:00 2007
EndTime: Sat Sep 15 14:15:00 2007
TotalTime: 899.90 seconds
TotalCapSize: 1082.12MB CapLen: 96 bytes
# of packets: 19774355 (12294.41MB)
AvgRate: 114.61Mbps stddev:13.62M
IP flow (unique src/dst pair) Information
# of flows: 876821 (avg. 22.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.6% 1.1% 1.1% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 494698
Top 10 bandwidth usage (bytes/total in %):
16.9% 12.3% 11.3% 3.9% 3.5% 3.2% 2.7% 2.6% 1.6% 1.3%
# of IPv6 addresses: 2501
Top 10 bandwidth usage (bytes/total in %):
36.1% 36.1% 22.9% 22.9% 7.4% 3.0% 2.8% 2.7% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709151400.pktlen.png)
detailed numbers
[ 32- 63]: 4495810
[ 64- 127]: 5777291
[ 128- 255]: 800777
[ 256- 511]: 397970
[ 512- 1023]: 416239
[ 1024- 2047]: 7886268
Protocol Breakdown
![[protocol breakdown chart]](200709151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19774355 (100.00%) 12891627007 (100.00%) 651.94
ip 19583975 ( 99.04%) 12863568674 ( 99.78%) 656.84
tcp 14889541 ( 75.30%) 12108882704 ( 93.93%) 813.25
http(s) 6745800 ( 34.11%) 9321858758 ( 72.31%) 1381.88
http(c) 3950743 ( 19.98%) 377626450 ( 2.93%) 95.58
squid 660706 ( 3.34%) 633762557 ( 4.92%) 959.22
smtp 587549 ( 2.97%) 111689750 ( 0.87%) 190.09
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 21350 ( 0.11%) 2755998 ( 0.02%) 129.09
pop3 10100 ( 0.05%) 5222096 ( 0.04%) 517.04
imap 3785 ( 0.02%) 1486474 ( 0.01%) 392.73
telnet 126 ( 0.00%) 17136 ( 0.00%) 136.00
ssh 75070 ( 0.38%) 38339387 ( 0.30%) 510.72
dns 4369 ( 0.02%) 306165 ( 0.00%) 70.08
bgp 245 ( 0.00%) 59037 ( 0.00%) 240.97
realaud 178 ( 0.00%) 57382 ( 0.00%) 322.37
rtsp 279751 ( 1.41%) 44180171 ( 0.34%) 157.93
icecast 5295 ( 0.03%) 3063221 ( 0.02%) 578.51
other 2544470 ( 12.87%) 1568457882 ( 12.17%) 616.42
udp 3220549 ( 16.29%) 605080520 ( 4.69%) 187.88
dns 1551580 ( 7.85%) 186370776 ( 1.45%) 120.12
realaud 2592 ( 0.01%) 832905 ( 0.01%) 321.34
halflif 34 ( 0.00%) 4511 ( 0.00%) 132.68
starcra 46 ( 0.00%) 6538 ( 0.00%) 142.13
everque 95 ( 0.00%) 14387 ( 0.00%) 151.44
unreal 50 ( 0.00%) 6069 ( 0.00%) 121.38
quake 25 ( 0.00%) 2278 ( 0.00%) 91.12
cuseeme 9 ( 0.00%) 1189 ( 0.00%) 132.11
other 1666095 ( 8.43%) 417834486 ( 3.24%) 250.79
icmp 1270636 ( 6.43%) 103352174 ( 0.80%) 81.34
ipip 380 ( 0.00%) 46612 ( 0.00%) 122.66
ipsec 179 ( 0.00%) 19690 ( 0.00%) 110.00
ip6 7513 ( 0.04%) 3997955 ( 0.03%) 532.14
other 195177 ( 0.99%) 42189019 ( 0.33%) 216.16
frag 9903 ( 0.05%) 9050818 ( 0.07%) 913.95
ip6 190380 ( 0.96%) 28058333 ( 0.22%) 147.38
tcp6 145391 ( 0.74%) 20299862 ( 0.16%) 139.62
http(s) 5133 ( 0.03%) 6756815 ( 0.05%) 1316.35
http(c) 7493 ( 0.04%) 1016696 ( 0.01%) 135.69
smtp 452 ( 0.00%) 160541 ( 0.00%) 355.18
ftp 17 ( 0.00%) 1584 ( 0.00%) 93.18
pop3 58 ( 0.00%) 6938 ( 0.00%) 119.62
ssh 66 ( 0.00%) 10722 ( 0.00%) 162.45
dns 14 ( 0.00%) 1270 ( 0.00%) 90.71
bgp 129 ( 0.00%) 14574 ( 0.00%) 112.98
other 132029 ( 0.67%) 12330722 ( 0.10%) 93.39
udp6 33605 ( 0.17%) 6276279 ( 0.05%) 186.77
dns 30810 ( 0.16%) 5718112 ( 0.04%) 185.59
starcra 8 ( 0.00%) 1077 ( 0.00%) 134.62
everque 8 ( 0.00%) 1083 ( 0.00%) 135.38
cuseeme 1 ( 0.00%) 91 ( 0.00%) 91.00
other 2778 ( 0.01%) 555916 ( 0.00%) 200.11
icmp6 11239 ( 0.06%) 1444780 ( 0.01%) 128.55
ip6 78 ( 0.00%) 11693 ( 0.00%) 149.91
pim6 45 ( 0.00%) 5480 ( 0.00%) 121.78
other6 22 ( 0.00%) 20239 ( 0.00%) 919.95
tcpdump file: 200709151400.dump.gz (492.01 MB)