Traffic Trace Info
DumpFile: 200709231400.dump
FileSize: 1257.03MB
Id: 200709231400
StartTime: Sun Sep 23 14:00:00 2007
EndTime: Sun Sep 23 14:15:00 2007
TotalTime: 900.22 seconds
TotalCapSize: 986.39MB CapLen: 96 bytes
# of packets: 17731598 (10282.45MB)
AvgRate: 95.84Mbps stddev:12.53M
IP flow (unique src/dst pair) Information
# of flows: 681103 (avg. 26.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.5% 1.2% 1.1% 1.1% 1.0% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 392488
Top 10 bandwidth usage (bytes/total in %):
14.5% 14.5% 9.6% 7.1% 4.1% 3.7% 1.8% 1.7% 1.7% 1.6%
# of IPv6 addresses: 2620
Top 10 bandwidth usage (bytes/total in %):
30.2% 30.1% 26.7% 26.7% 11.6% 11.6% 3.7% 3.4% 2.3% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709231400.pktlen.png)
detailed numbers
[ 32- 63]: 3824981
[ 64- 127]: 5764749
[ 128- 255]: 866678
[ 256- 511]: 393779
[ 512- 1023]: 476753
[ 1024- 2047]: 6404658
Protocol Breakdown
![[protocol breakdown chart]](200709231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17731598 (100.00%) 10781931931 (100.00%) 608.06
ip 17536280 ( 98.90%) 10748938899 ( 99.69%) 612.95
tcp 14157082 ( 79.84%) 10147328235 ( 94.11%) 716.77
http(s) 5669958 ( 31.98%) 7963406397 ( 73.86%) 1404.49
http(c) 3564193 ( 20.10%) 325289733 ( 3.02%) 91.27
squid 473520 ( 2.67%) 327407510 ( 3.04%) 691.43
smtp 382014 ( 2.15%) 65168458 ( 0.60%) 170.59
ftp 21231 ( 0.12%) 2023731 ( 0.02%) 95.32
pop3 10320 ( 0.06%) 6491912 ( 0.06%) 629.06
imap 3734 ( 0.02%) 1832010 ( 0.02%) 490.63
telnet 250 ( 0.00%) 15876 ( 0.00%) 63.50
ssh 1346193 ( 7.59%) 214722921 ( 1.99%) 159.50
dns 4410 ( 0.02%) 310570 ( 0.00%) 70.42
bgp 250 ( 0.00%) 54068 ( 0.00%) 216.27
napster 41 ( 0.00%) 5712 ( 0.00%) 139.32
rtsp 226820 ( 1.28%) 38330266 ( 0.36%) 168.99
icecast 6522 ( 0.04%) 489862 ( 0.00%) 75.11
other 2447622 ( 13.80%) 1201778969 ( 11.15%) 491.00
udp 2697381 ( 15.21%) 532936932 ( 4.94%) 197.58
dns 1533814 ( 8.65%) 176301552 ( 1.64%) 114.94
realaud 349 ( 0.00%) 34989 ( 0.00%) 100.26
halflif 22 ( 0.00%) 2445 ( 0.00%) 111.14
starcra 18 ( 0.00%) 3585 ( 0.00%) 199.17
everque 222 ( 0.00%) 44227 ( 0.00%) 199.22
unreal 19 ( 0.00%) 5089 ( 0.00%) 267.84
quake 11 ( 0.00%) 914 ( 0.00%) 83.09
cuseeme 5 ( 0.00%) 453 ( 0.00%) 90.60
other 1162803 ( 6.56%) 356462877 ( 3.31%) 306.55
icmp 665726 ( 3.75%) 59534171 ( 0.55%) 89.43
ipip 361 ( 0.00%) 43222 ( 0.00%) 119.73
ipsec 4264 ( 0.02%) 4455672 ( 0.04%) 1044.95
ip6 7646 ( 0.04%) 4030958 ( 0.04%) 527.20
other 3820 ( 0.02%) 609709 ( 0.01%) 159.61
frag 2071 ( 0.01%) 1701665 ( 0.02%) 821.66
ip6 195318 ( 1.10%) 32993032 ( 0.31%) 168.92
tcp6 153547 ( 0.87%) 25658775 ( 0.24%) 167.11
http(s) 218 ( 0.00%) 166328 ( 0.00%) 762.97
http(c) 11624 ( 0.07%) 1295072 ( 0.01%) 111.41
smtp 275 ( 0.00%) 63775 ( 0.00%) 231.91
ftp 16 ( 0.00%) 1498 ( 0.00%) 93.62
ssh 13611 ( 0.08%) 9100833 ( 0.08%) 668.64
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 108 ( 0.00%) 11173 ( 0.00%) 103.45
other 127688 ( 0.72%) 15019461 ( 0.14%) 117.63
udp6 31967 ( 0.18%) 6099630 ( 0.06%) 190.81
dns 29014 ( 0.16%) 5497477 ( 0.05%) 189.48
realaud 1 ( 0.00%) 137 ( 0.00%) 137.00
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
everque 20 ( 0.00%) 3092 ( 0.00%) 154.60
unreal 1 ( 0.00%) 564 ( 0.00%) 564.00
other 2930 ( 0.02%) 598223 ( 0.01%) 204.17
icmp6 9552 ( 0.05%) 1189014 ( 0.01%) 124.48
ip6 156 ( 0.00%) 22301 ( 0.00%) 142.96
pim6 80 ( 0.00%) 8880 ( 0.00%) 111.00
other6 16 ( 0.00%) 14432 ( 0.00%) 902.00
tcpdump file: 200709231400.dump.gz (470.21 MB)