Traffic Trace Info
DumpFile: 200709171400.dump
FileSize: 1474.73MB
Id: 200709171400
StartTime: Mon Sep 17 14:00:01 2007
EndTime: Mon Sep 17 14:15:01 2007
TotalTime: 900.01 seconds
TotalCapSize: 1151.25MB CapLen: 96 bytes
# of packets: 21195010 (13084.12MB)
AvgRate: 121.96Mbps stddev:21.28M
IP flow (unique src/dst pair) Information
# of flows: 813912 (avg. 26.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
0.9% 0.8% 0.8% 0.8% 0.7% 0.7% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 439737
Top 10 bandwidth usage (bytes/total in %):
17.8% 12.2% 11.5% 3.9% 1.8% 1.6% 1.6% 1.5% 1.2% 1.1%
# of IPv6 addresses: 3213
Top 10 bandwidth usage (bytes/total in %):
43.6% 43.6% 9.4% 5.8% 5.4% 3.6% 3.3% 3.1% 2.5% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709171400.pktlen.png)
detailed numbers
[ 32- 63]: 5359492
[ 64- 127]: 5718171
[ 128- 255]: 751499
[ 256- 511]: 452051
[ 512- 1023]: 557447
[ 1024- 2047]: 8356350
Protocol Breakdown
![[protocol breakdown chart]](200709171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21195010 (100.00%) 13719693452 (100.00%) 647.31
ip 21103051 ( 99.57%) 13695647974 ( 99.82%) 648.99
tcp 17166513 ( 80.99%) 12935051158 ( 94.28%) 753.50
http(s) 7732487 ( 36.48%) 10560731073 ( 76.97%) 1365.76
http(c) 4715328 ( 22.25%) 502925466 ( 3.67%) 106.66
squid 404343 ( 1.91%) 264567880 ( 1.93%) 654.32
smtp 514237 ( 2.43%) 88859529 ( 0.65%) 172.80
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 26288 ( 0.12%) 2185159 ( 0.02%) 83.12
pop3 14231 ( 0.07%) 9277059 ( 0.07%) 651.89
imap 24240 ( 0.11%) 21733803 ( 0.16%) 896.61
telnet 107 ( 0.00%) 11740 ( 0.00%) 109.72
ssh 63022 ( 0.30%) 35740609 ( 0.26%) 567.11
dns 7919 ( 0.04%) 551176 ( 0.00%) 69.60
bgp 326 ( 0.00%) 114346 ( 0.00%) 350.75
napster 91 ( 0.00%) 7301 ( 0.00%) 80.23
realaud 36 ( 0.00%) 2196 ( 0.00%) 61.00
rtsp 281485 ( 1.33%) 22019633 ( 0.16%) 78.23
icecast 5230 ( 0.02%) 5325133 ( 0.04%) 1018.19
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 3377131 ( 15.93%) 1420998333 ( 10.36%) 420.77
udp 3002037 ( 14.16%) 651641450 ( 4.75%) 217.07
dns 1786267 ( 8.43%) 219392637 ( 1.60%) 122.82
realaud 1983 ( 0.01%) 140106 ( 0.00%) 70.65
halflif 26 ( 0.00%) 3176 ( 0.00%) 122.15
starcra 23 ( 0.00%) 2846 ( 0.00%) 123.74
everque 132 ( 0.00%) 18635 ( 0.00%) 141.17
unreal 63 ( 0.00%) 7047 ( 0.00%) 111.86
quake 12 ( 0.00%) 1077 ( 0.00%) 89.75
cuseeme 10 ( 0.00%) 953 ( 0.00%) 95.30
other 1213510 ( 5.73%) 432068053 ( 3.15%) 356.05
icmp 700723 ( 3.31%) 59053842 ( 0.43%) 84.28
ipip 376 ( 0.00%) 45412 ( 0.00%) 120.78
ip6 7372 ( 0.03%) 4033808 ( 0.03%) 547.18
other 226030 ( 1.07%) 45822304 ( 0.33%) 202.73
frag 2094 ( 0.01%) 1703150 ( 0.01%) 813.35
ip6 91959 ( 0.43%) 24045478 ( 0.18%) 261.48
tcp6 38517 ( 0.18%) 14822592 ( 0.11%) 384.83
http(s) 488 ( 0.00%) 401815 ( 0.00%) 823.39
http(c) 18787 ( 0.09%) 2398920 ( 0.02%) 127.69
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 348 ( 0.00%) 76270 ( 0.00%) 219.17
ssh 66 ( 0.00%) 10722 ( 0.00%) 162.45
dns 7 ( 0.00%) 632 ( 0.00%) 90.29
bgp 128 ( 0.00%) 14524 ( 0.00%) 113.47
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 18690 ( 0.09%) 11919487 ( 0.09%) 637.75
udp6 40886 ( 0.19%) 7719112 ( 0.06%) 188.80
dns 37045 ( 0.17%) 6919679 ( 0.05%) 186.79
starcra 5 ( 0.00%) 1306 ( 0.00%) 261.20
everque 32 ( 0.00%) 4820 ( 0.00%) 150.62
other 3804 ( 0.02%) 793307 ( 0.01%) 208.55
icmp6 12348 ( 0.06%) 1472007 ( 0.01%) 119.21
ip6 157 ( 0.00%) 22469 ( 0.00%) 143.11
pim6 47 ( 0.00%) 5752 ( 0.00%) 122.38
other6 4 ( 0.00%) 3546 ( 0.00%) 886.50
tcpdump file: 200709171400.dump.gz (546.23 MB)