Traffic Trace Info
DumpFile: 200709211400.dump
FileSize: 1812.99MB
Id: 200709211400
StartTime: Fri Sep 21 14:00:00 2007
EndTime: Fri Sep 21 14:15:01 2007
TotalTime: 900.78 seconds
TotalCapSize: 1419.50MB CapLen: 96 bytes
# of packets: 25782989 (16940.35MB)
AvgRate: 157.78Mbps stddev:22.36M
IP flow (unique src/dst pair) Information
# of flows: 791556 (avg. 32.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.5% 2.0% 1.3% 1.2% 1.2% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 412408
Top 10 bandwidth usage (bytes/total in %):
10.5% 9.9% 9.0% 3.9% 3.2% 2.8% 2.6% 2.6% 2.6% 2.6%
# of IPv6 addresses: 2688
Top 10 bandwidth usage (bytes/total in %):
28.8% 28.8% 11.9% 11.3% 11.3% 7.0% 7.0% 4.6% 3.4% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709211400.pktlen.png)
detailed numbers
[ 32- 63]: 6380332
[ 64- 127]: 6248021
[ 128- 255]: 833981
[ 256- 511]: 555618
[ 512- 1023]: 944396
[ 1024- 2047]: 10820641
Protocol Breakdown
![[protocol breakdown chart]](200709211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25782989 (100.00%) 17763246062 (100.00%) 688.95
ip 25551527 ( 99.10%) 17730434830 ( 99.82%) 693.91
tcp 20885130 ( 81.00%) 16758483668 ( 94.34%) 802.41
http(s) 9844853 ( 38.18%) 13532572925 ( 76.18%) 1374.58
http(c) 6498576 ( 25.20%) 776565346 ( 4.37%) 119.50
squid 454018 ( 1.76%) 270362341 ( 1.52%) 595.49
smtp 561829 ( 2.18%) 181096335 ( 1.02%) 322.33
nntp 6 ( 0.00%) 444 ( 0.00%) 74.00
ftp 24419 ( 0.09%) 2048793 ( 0.01%) 83.90
pop3 16930 ( 0.07%) 8628197 ( 0.05%) 509.64
imap 5484 ( 0.02%) 2017877 ( 0.01%) 367.96
telnet 1132 ( 0.00%) 95252 ( 0.00%) 84.14
ssh 507894 ( 1.97%) 311495760 ( 1.75%) 613.31
dns 7327 ( 0.03%) 2279252 ( 0.01%) 311.08
bgp 290 ( 0.00%) 83728 ( 0.00%) 288.72
napster 34 ( 0.00%) 5904 ( 0.00%) 173.65
realaud 116 ( 0.00%) 12589 ( 0.00%) 108.53
rtsp 485620 ( 1.88%) 71357785 ( 0.40%) 146.94
icecast 7454 ( 0.03%) 717137 ( 0.00%) 96.21
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2469134 ( 9.58%) 1599143163 ( 9.00%) 647.65
udp 3717904 ( 14.42%) 843602907 ( 4.75%) 226.90
dns 1961047 ( 7.61%) 234583723 ( 1.32%) 119.62
realaud 1608 ( 0.01%) 114542 ( 0.00%) 71.23
halflif 18 ( 0.00%) 2182 ( 0.00%) 121.22
starcra 17 ( 0.00%) 2994 ( 0.00%) 176.12
everque 50 ( 0.00%) 8473 ( 0.00%) 169.46
unreal 16 ( 0.00%) 2471 ( 0.00%) 154.44
quake 37 ( 0.00%) 4456 ( 0.00%) 120.43
cuseeme 7 ( 0.00%) 597 ( 0.00%) 85.29
other 1754914 ( 6.81%) 608856431 ( 3.43%) 346.94
icmp 818793 ( 3.18%) 107344210 ( 0.60%) 131.10
ipip 362 ( 0.00%) 44444 ( 0.00%) 122.77
ipsec 180 ( 0.00%) 19800 ( 0.00%) 110.00
ip6 8877 ( 0.03%) 4231862 ( 0.02%) 476.72
other 120281 ( 0.47%) 16707939 ( 0.09%) 138.91
frag 8869 ( 0.03%) 10706942 ( 0.06%) 1207.23
ip6 231462 ( 0.90%) 32811232 ( 0.18%) 141.76
tcp6 172257 ( 0.67%) 22542347 ( 0.13%) 130.86
http(s) 385 ( 0.00%) 343708 ( 0.00%) 892.75
http(c) 40379 ( 0.16%) 4592910 ( 0.03%) 113.75
smtp 1055 ( 0.00%) 275572 ( 0.00%) 261.21
nntp 2236 ( 0.01%) 216130 ( 0.00%) 96.66
ssh 351 ( 0.00%) 40804 ( 0.00%) 116.25
bgp 136 ( 0.00%) 15860 ( 0.00%) 116.62
other 127715 ( 0.50%) 17057363 ( 0.10%) 133.56
udp6 43435 ( 0.17%) 8100686 ( 0.05%) 186.50
dns 40546 ( 0.16%) 7516425 ( 0.04%) 185.38
everque 15 ( 0.00%) 2343 ( 0.00%) 156.20
other 2874 ( 0.01%) 581918 ( 0.00%) 202.48
icmp6 15528 ( 0.06%) 2126693 ( 0.01%) 136.96
ip6 157 ( 0.00%) 22627 ( 0.00%) 144.12
pim6 74 ( 0.00%) 8304 ( 0.00%) 112.22
other6 11 ( 0.00%) 10575 ( 0.00%) 961.36
tcpdump file: 200709211400.dump.gz (660.83 MB)