Traffic Trace Info
DumpFile: 200709201400.dump
FileSize: 1954.26MB
Id: 200709201400
StartTime: Thu Sep 20 14:00:00 2007
EndTime: Thu Sep 20 14:15:01 2007
TotalTime: 900.28 seconds
TotalCapSize: 1523.44MB CapLen: 96 bytes
# of packets: 28229188 (18630.09MB)
AvgRate: 173.60Mbps stddev:28.05M
IP flow (unique src/dst pair) Information
# of flows: 869400 (avg. 32.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 1.3% 1.0% 1.0% 0.9% 0.8% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 493544
Top 10 bandwidth usage (bytes/total in %):
8.8% 8.5% 8.5% 5.2% 4.9% 4.4% 4.0% 2.7% 2.3% 2.2%
# of IPv6 addresses: 2572
Top 10 bandwidth usage (bytes/total in %):
29.0% 29.0% 7.3% 4.7% 4.4% 4.3% 3.7% 3.4% 2.8% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709201400.pktlen.png)
detailed numbers
[ 32- 63]: 7922110
[ 64- 127]: 6173698
[ 128- 255]: 842552
[ 256- 511]: 579898
[ 512- 1023]: 636777
[ 1024- 2047]: 12074153
Protocol Breakdown
![[protocol breakdown chart]](200709201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28229188 (100.00%) 19535064791 (100.00%) 692.02
ip 28144491 ( 99.70%) 19516451436 ( 99.90%) 693.44
tcp 23317404 ( 82.60%) 18789653749 ( 96.18%) 805.82
http(s) 10165826 ( 36.01%) 13979466207 ( 71.56%) 1375.14
http(c) 7289782 ( 25.82%) 944996557 ( 4.84%) 129.63
squid 620937 ( 2.20%) 372142691 ( 1.90%) 599.32
smtp 488639 ( 1.73%) 145264187 ( 0.74%) 297.28
ftp 226627 ( 0.80%) 188788366 ( 0.97%) 833.04
pop3 21199 ( 0.08%) 13001264 ( 0.07%) 613.30
imap 7404 ( 0.03%) 2606230 ( 0.01%) 352.00
telnet 880 ( 0.00%) 67618 ( 0.00%) 76.84
ssh 214061 ( 0.76%) 83106448 ( 0.43%) 388.24
dns 5914 ( 0.02%) 539000 ( 0.00%) 91.14
bgp 301 ( 0.00%) 81838 ( 0.00%) 271.89
realaud 232 ( 0.00%) 105454 ( 0.00%) 454.54
rtsp 218043 ( 0.77%) 35567563 ( 0.18%) 163.12
icecast 32617 ( 0.12%) 17220545 ( 0.09%) 527.96
other 4024940 ( 14.26%) 3006699661 ( 15.39%) 747.02
udp 4093287 ( 14.50%) 653287682 ( 3.34%) 159.60
dns 1850569 ( 6.56%) 226487910 ( 1.16%) 122.39
realaud 19994 ( 0.07%) 13837909 ( 0.07%) 692.10
halflif 51 ( 0.00%) 4233 ( 0.00%) 83.00
starcra 19 ( 0.00%) 2931 ( 0.00%) 154.26
everque 82 ( 0.00%) 17467 ( 0.00%) 213.01
unreal 5 ( 0.00%) 423 ( 0.00%) 84.60
quake 36 ( 0.00%) 2657 ( 0.00%) 73.81
cuseeme 8 ( 0.00%) 691 ( 0.00%) 86.38
other 2222374 ( 7.87%) 412907393 ( 2.11%) 185.80
icmp 614051 ( 2.18%) 54307388 ( 0.28%) 88.44
ipip 360 ( 0.00%) 43808 ( 0.00%) 121.69
ipsec 180 ( 0.00%) 19800 ( 0.00%) 110.00
ip6 7807 ( 0.03%) 4039722 ( 0.02%) 517.45
other 111402 ( 0.39%) 15099287 ( 0.08%) 135.54
frag 3491 ( 0.01%) 2817404 ( 0.01%) 807.05
ip6 84697 ( 0.30%) 18613355 ( 0.10%) 219.76
tcp6 24525 ( 0.09%) 8529134 ( 0.04%) 347.77
http(s) 833 ( 0.00%) 619157 ( 0.00%) 743.29
http(c) 5507 ( 0.02%) 685529 ( 0.00%) 124.48
smtp 577 ( 0.00%) 185218 ( 0.00%) 321.00
ssh 907 ( 0.00%) 90436 ( 0.00%) 99.71
dns 11 ( 0.00%) 1402 ( 0.00%) 127.45
bgp 127 ( 0.00%) 14462 ( 0.00%) 113.87
other 16563 ( 0.06%) 6932930 ( 0.04%) 418.58
udp6 46394 ( 0.16%) 8180334 ( 0.04%) 176.32
dns 43824 ( 0.16%) 7687018 ( 0.04%) 175.41
everque 22 ( 0.00%) 3341 ( 0.00%) 151.86
other 2548 ( 0.01%) 489975 ( 0.00%) 192.30
icmp6 13518 ( 0.05%) 1849800 ( 0.01%) 136.84
ip6 154 ( 0.00%) 22065 ( 0.00%) 143.28
pim6 81 ( 0.00%) 8976 ( 0.00%) 110.81
other6 25 ( 0.00%) 23046 ( 0.00%) 921.84
tcpdump file: 200709201400.dump.gz (716.31 MB)