Traffic Trace Info
DumpFile: 200709271400.dump
FileSize: 1845.42MB
Id: 200709271400
StartTime: Thu Sep 27 14:00:00 2007
EndTime: Thu Sep 27 14:15:01 2007
TotalTime: 900.63 seconds
TotalCapSize: 1445.26MB CapLen: 96 bytes
# of packets: 26220025 (15949.50MB)
AvgRate: 148.56Mbps stddev:21.43M
IP flow (unique src/dst pair) Information
# of flows: 854526 (avg. 30.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.6% 1.2% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8% 0.6%
IP address Information
# of IPv4 addresses: 440255
Top 10 bandwidth usage (bytes/total in %):
15.0% 9.9% 9.6% 4.6% 3.8% 2.9% 2.8% 2.0% 1.6% 1.6%
# of IPv6 addresses: 2762
Top 10 bandwidth usage (bytes/total in %):
22.7% 16.1% 16.1% 8.2% 5.5% 4.7% 3.9% 3.8% 3.8% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709271400.pktlen.png)
detailed numbers
[ 32- 63]: 6333706
[ 64- 127]: 7443142
[ 128- 255]: 996056
[ 256- 511]: 706980
[ 512- 1023]: 685902
[ 1024- 2047]: 10054239
Protocol Breakdown
![[protocol breakdown chart]](200709271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26220025 (100.00%) 16724259185 (100.00%) 637.84
ip 26085488 ( 99.49%) 16701215105 ( 99.86%) 640.25
tcp 21598804 ( 82.38%) 16054469376 ( 96.00%) 743.30
http(s) 9579006 ( 36.53%) 12575736480 ( 75.19%) 1312.84
http(c) 7529357 ( 28.72%) 1501764219 ( 8.98%) 199.45
squid 319481 ( 1.22%) 202319889 ( 1.21%) 633.28
smtp 537524 ( 2.05%) 155083676 ( 0.93%) 288.51
nntp 257 ( 0.00%) 31343 ( 0.00%) 121.96
ftp 21391 ( 0.08%) 1914813 ( 0.01%) 89.51
pop3 31087 ( 0.12%) 20863192 ( 0.12%) 671.12
imap 10289 ( 0.04%) 2475922 ( 0.01%) 240.64
telnet 150 ( 0.00%) 9664 ( 0.00%) 64.43
ssh 594486 ( 2.27%) 96554168 ( 0.58%) 162.42
dns 6245 ( 0.02%) 430118 ( 0.00%) 68.87
bgp 300 ( 0.00%) 90795 ( 0.00%) 302.65
napster 12 ( 0.00%) 2082 ( 0.00%) 173.50
realaud 5416 ( 0.02%) 4311499 ( 0.03%) 796.07
rtsp 324503 ( 1.24%) 29852255 ( 0.18%) 91.99
icecast 26068 ( 0.10%) 16187723 ( 0.10%) 620.98
hotline 3 ( 0.00%) 184 ( 0.00%) 61.33
other 2613227 ( 9.97%) 1446841234 ( 8.65%) 553.66
udp 3458898 ( 13.19%) 510342278 ( 3.05%) 147.54
dns 2498836 ( 9.53%) 282357587 ( 1.69%) 113.00
realaud 16422 ( 0.06%) 11683151 ( 0.07%) 711.43
halflif 16 ( 0.00%) 2335 ( 0.00%) 145.94
starcra 25 ( 0.00%) 3893 ( 0.00%) 155.72
everque 58 ( 0.00%) 10834 ( 0.00%) 186.79
unreal 17 ( 0.00%) 2568 ( 0.00%) 151.06
quake 52 ( 0.00%) 4689 ( 0.00%) 90.17
cuseeme 4 ( 0.00%) 339 ( 0.00%) 84.75
other 943352 ( 3.60%) 216245197 ( 1.29%) 229.23
icmp 845600 ( 3.23%) 71362615 ( 0.43%) 84.39
ipip 337 ( 0.00%) 40686 ( 0.00%) 120.73
ipsec 305 ( 0.00%) 163414 ( 0.00%) 535.78
ip6 7904 ( 0.03%) 4057210 ( 0.02%) 513.31
other 173640 ( 0.66%) 60779526 ( 0.36%) 350.03
frag 2773 ( 0.01%) 2134731 ( 0.01%) 769.83
ip6 134537 ( 0.51%) 23044080 ( 0.14%) 171.28
tcp6 80923 ( 0.31%) 13384611 ( 0.08%) 165.40
http(s) 506 ( 0.00%) 429509 ( 0.00%) 848.83
http(c) 54882 ( 0.21%) 5934344 ( 0.04%) 108.13
squid 49 ( 0.00%) 4385 ( 0.00%) 89.49
smtp 810 ( 0.00%) 347123 ( 0.00%) 428.55
ftp 90 ( 0.00%) 10205 ( 0.00%) 113.39
ssh 64 ( 0.00%) 10562 ( 0.00%) 165.03
dns 16 ( 0.00%) 1901 ( 0.00%) 118.81
bgp 125 ( 0.00%) 11879 ( 0.00%) 95.03
icecast 11 ( 0.00%) 1002 ( 0.00%) 91.09
other 24370 ( 0.09%) 6633701 ( 0.04%) 272.21
udp6 43791 ( 0.17%) 8370479 ( 0.05%) 191.15
dns 40890 ( 0.16%) 7716804 ( 0.05%) 188.72
realaud 1 ( 0.00%) 137 ( 0.00%) 137.00
starcra 12 ( 0.00%) 1997 ( 0.00%) 166.42
everque 18 ( 0.00%) 3313 ( 0.00%) 184.06
other 2870 ( 0.01%) 648228 ( 0.00%) 225.86
icmp6 9582 ( 0.04%) 1252306 ( 0.01%) 130.69
ip6 154 ( 0.00%) 22065 ( 0.00%) 143.28
pim6 81 ( 0.00%) 8976 ( 0.00%) 110.81
other6 6 ( 0.00%) 5643 ( 0.00%) 940.50
tcpdump file: 200709271400.dump.gz (682.68 MB)