Traffic Trace Info
DumpFile: 200709181400.dump
FileSize: 2103.03MB
Id: 200709181400
StartTime: Tue Sep 18 14:00:00 2007
EndTime: Tue Sep 18 14:15:00 2007
TotalTime: 899.86 seconds
TotalCapSize: 1647.98MB CapLen: 96 bytes
# of packets: 29817628 (18554.50MB)
AvgRate: 172.98Mbps stddev:20.65M
IP flow (unique src/dst pair) Information
# of flows: 805274 (avg. 37.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 1.1% 1.0% 0.7% 0.7% 0.7% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 404434
Top 10 bandwidth usage (bytes/total in %):
15.7% 8.6% 7.9% 5.7% 4.1% 4.0% 1.8% 1.7% 1.7% 1.6%
# of IPv6 addresses: 2587
Top 10 bandwidth usage (bytes/total in %):
53.3% 53.3% 17.4% 17.4% 4.0% 3.4% 1.7% 1.6% 1.6% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709181400.pktlen.png)
detailed numbers
[ 32- 63]: 6946509
[ 64- 127]: 8138819
[ 128- 255]: 1088900
[ 256- 511]: 593608
[ 512- 1023]: 1419167
[ 1024- 2047]: 11630625
Protocol Breakdown
![[protocol breakdown chart]](200709181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29817628 (100.00%) 19455802327 (100.00%) 652.49
ip 29608383 ( 99.30%) 19405725143 ( 99.74%) 655.41
tcp 24966610 ( 83.73%) 18333365866 ( 94.23%) 734.32
http(s) 10789364 ( 36.18%) 14182103164 ( 72.89%) 1314.45
http(c) 7758999 ( 26.02%) 1865066613 ( 9.59%) 240.37
squid 676748 ( 2.27%) 365431029 ( 1.88%) 539.98
smtp 492919 ( 1.65%) 145074340 ( 0.75%) 294.32
nntp 1376 ( 0.00%) 83248 ( 0.00%) 60.50
ftp 30803 ( 0.10%) 2724545 ( 0.01%) 88.45
pop3 25706 ( 0.09%) 18085956 ( 0.09%) 703.57
imap 6734 ( 0.02%) 2512702 ( 0.01%) 373.14
telnet 241 ( 0.00%) 24326 ( 0.00%) 100.94
ssh 1857492 ( 6.23%) 348502994 ( 1.79%) 187.62
dns 6262 ( 0.02%) 454516 ( 0.00%) 72.58
bgp 272 ( 0.00%) 81969 ( 0.00%) 301.36
napster 65 ( 0.00%) 10436 ( 0.00%) 160.55
realaud 293 ( 0.00%) 68735 ( 0.00%) 234.59
rtsp 359731 ( 1.21%) 85636844 ( 0.44%) 238.06
icecast 11790 ( 0.04%) 1262070 ( 0.01%) 107.05
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2947797 ( 9.89%) 1316241299 ( 6.77%) 446.52
udp 3740524 ( 12.54%) 926908249 ( 4.76%) 247.80
dns 2060822 ( 6.91%) 249775542 ( 1.28%) 121.20
realaud 1144 ( 0.00%) 440314 ( 0.00%) 384.89
halflif 40 ( 0.00%) 5444 ( 0.00%) 136.10
starcra 22 ( 0.00%) 3968 ( 0.00%) 180.36
everque 72 ( 0.00%) 13909 ( 0.00%) 193.18
unreal 39 ( 0.00%) 4751 ( 0.00%) 121.82
quake 14 ( 0.00%) 1472 ( 0.00%) 105.14
cuseeme 3 ( 0.00%) 313 ( 0.00%) 104.33
other 1678242 ( 5.63%) 676647765 ( 3.48%) 403.19
icmp 697801 ( 2.34%) 95578705 ( 0.49%) 136.97
ipip 356 ( 0.00%) 42308 ( 0.00%) 118.84
ipsec 425 ( 0.00%) 299126 ( 0.00%) 703.83
ip6 7371 ( 0.02%) 4021995 ( 0.02%) 545.65
other 195296 ( 0.65%) 45508894 ( 0.23%) 233.03
frag 11493 ( 0.04%) 12517929 ( 0.06%) 1089.18
ip6 209245 ( 0.70%) 50077184 ( 0.26%) 239.32
tcp6 156211 ( 0.52%) 40886115 ( 0.21%) 261.74
http(s) 789 ( 0.00%) 846811 ( 0.00%) 1073.27
http(c) 17615 ( 0.06%) 2152042 ( 0.01%) 122.17
squid 94 ( 0.00%) 7356 ( 0.00%) 78.26
smtp 398 ( 0.00%) 144146 ( 0.00%) 362.18
ssh 299 ( 0.00%) 52952 ( 0.00%) 177.10
dns 10 ( 0.00%) 1114 ( 0.00%) 111.40
bgp 101 ( 0.00%) 12474 ( 0.00%) 123.50
icecast 2 ( 0.00%) 168 ( 0.00%) 84.00
other 136903 ( 0.46%) 37669052 ( 0.19%) 275.15
udp6 42821 ( 0.14%) 7926195 ( 0.04%) 185.10
dns 40242 ( 0.13%) 7439430 ( 0.04%) 184.87
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
everque 21 ( 0.00%) 3634 ( 0.00%) 173.05
other 2557 ( 0.01%) 482994 ( 0.00%) 188.89
icmp6 10104 ( 0.03%) 1246966 ( 0.01%) 123.41
ip6 59 ( 0.00%) 9415 ( 0.00%) 159.58
pim6 46 ( 0.00%) 5616 ( 0.00%) 122.09
other6 4 ( 0.00%) 2877 ( 0.00%) 719.25
tcpdump file: 200709181400.dump.gz (785.28 MB)