Traffic Trace Info
DumpFile: 200709251400.dump
FileSize: 2103.95MB
Id: 200709251400
StartTime: Tue Sep 25 14:00:01 2007
EndTime: Tue Sep 25 14:15:01 2007
TotalTime: 899.71 seconds
TotalCapSize: 1645.86MB CapLen: 96 bytes
# of packets: 30016677 (20725.73MB)
AvgRate: 193.25Mbps stddev:30.84M
IP flow (unique src/dst pair) Information
# of flows: 766208 (avg. 39.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 6.1% 6.1% 1.6% 0.9% 0.7% 0.7% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 377865
Top 10 bandwidth usage (bytes/total in %):
14.9% 7.7% 7.5% 7.0% 6.9% 6.9% 6.3% 6.1% 2.3% 2.0%
# of IPv6 addresses: 2781
Top 10 bandwidth usage (bytes/total in %):
18.9% 17.7% 7.1% 6.2% 6.1% 5.2% 5.2% 4.7% 4.7% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709251400.pktlen.png)
detailed numbers
[ 32- 63]: 7379280
[ 64- 127]: 6890451
[ 128- 255]: 919009
[ 256- 511]: 743435
[ 512- 1023]: 749398
[ 1024- 2047]: 13335104
Protocol Breakdown
![[protocol breakdown chart]](200709251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30016677 (100.00%) 21732503612 (100.00%) 724.01
ip 29912417 ( 99.65%) 21711644278 ( 99.90%) 725.84
tcp 26447496 ( 88.11%) 21204552611 ( 97.57%) 801.76
http(s) 12430628 ( 41.41%) 17241523077 ( 79.34%) 1387.02
http(c) 8515760 ( 28.37%) 953047786 ( 4.39%) 111.92
squid 561613 ( 1.87%) 362451740 ( 1.67%) 645.38
smtp 480796 ( 1.60%) 143316465 ( 0.66%) 298.08
ftp 47273 ( 0.16%) 48115025 ( 0.22%) 1017.81
pop3 19293 ( 0.06%) 10818191 ( 0.05%) 560.73
imap 4494 ( 0.01%) 491163 ( 0.00%) 109.29
telnet 420 ( 0.00%) 69487 ( 0.00%) 165.45
ssh 932917 ( 3.11%) 156091750 ( 0.72%) 167.32
dns 5559 ( 0.02%) 404059 ( 0.00%) 72.69
bgp 289 ( 0.00%) 89941 ( 0.00%) 311.21
napster 98 ( 0.00%) 11917 ( 0.00%) 121.60
realaud 135 ( 0.00%) 55906 ( 0.00%) 414.12
rtsp 260208 ( 0.87%) 75259831 ( 0.35%) 289.23
icecast 131828 ( 0.44%) 112422797 ( 0.52%) 852.80
hotline 21 ( 0.00%) 4091 ( 0.00%) 194.81
other 3056162 ( 10.18%) 2100379265 ( 9.66%) 687.26
udp 2686947 ( 8.95%) 425889462 ( 1.96%) 158.50
dns 1915095 ( 6.38%) 231053485 ( 1.06%) 120.65
realaud 2326 ( 0.01%) 218171 ( 0.00%) 93.80
halflif 32 ( 0.00%) 3328 ( 0.00%) 104.00
starcra 16 ( 0.00%) 2452 ( 0.00%) 153.25
everque 53 ( 0.00%) 10624 ( 0.00%) 200.45
unreal 27 ( 0.00%) 3105 ( 0.00%) 115.00
quake 43 ( 0.00%) 6410 ( 0.00%) 149.07
cuseeme 5 ( 0.00%) 496 ( 0.00%) 99.20
other 769317 ( 2.56%) 194580664 ( 0.90%) 252.93
icmp 625044 ( 2.08%) 53157383 ( 0.24%) 85.05
ipip 321 ( 0.00%) 37838 ( 0.00%) 117.88
ipsec 1705 ( 0.01%) 1765390 ( 0.01%) 1035.42
ip6 8592 ( 0.03%) 4454882 ( 0.02%) 518.49
other 142312 ( 0.47%) 21786712 ( 0.10%) 153.09
frag 2303 ( 0.01%) 1869813 ( 0.01%) 811.90
ip6 104260 ( 0.35%) 20859334 ( 0.10%) 200.07
tcp6 27245 ( 0.09%) 7593193 ( 0.03%) 278.70
http(s) 987 ( 0.00%) 882019 ( 0.00%) 893.64
http(c) 12862 ( 0.04%) 1451572 ( 0.01%) 112.86
smtp 975 ( 0.00%) 349638 ( 0.00%) 358.60
ftp 106 ( 0.00%) 11069 ( 0.00%) 104.42
ssh 75 ( 0.00%) 11568 ( 0.00%) 154.24
dns 4 ( 0.00%) 557 ( 0.00%) 139.25
bgp 111 ( 0.00%) 11708 ( 0.00%) 105.48
other 12125 ( 0.04%) 4875062 ( 0.02%) 402.07
udp6 57964 ( 0.19%) 10647331 ( 0.05%) 183.69
dns 54997 ( 0.18%) 10015652 ( 0.05%) 182.11
starcra 6 ( 0.00%) 791 ( 0.00%) 131.83
everque 21 ( 0.00%) 3108 ( 0.00%) 148.00
other 2940 ( 0.01%) 627780 ( 0.00%) 213.53
icmp6 18760 ( 0.06%) 2555268 ( 0.01%) 136.21
ip6 179 ( 0.00%) 28322 ( 0.00%) 158.22
pim6 82 ( 0.00%) 9072 ( 0.00%) 110.63
other6 30 ( 0.00%) 26148 ( 0.00%) 871.60
tcpdump file: 200709251400.dump.gz (768.69 MB)