Traffic Trace Info
DumpFile: 200709301400.dump
FileSize: 1198.81MB
Id: 200709301400
StartTime: Sun Sep 30 14:00:00 2007
EndTime: Sun Sep 30 14:15:00 2007
TotalTime: 900.15 seconds
TotalCapSize: 936.20MB CapLen: 96 bytes
# of packets: 17205634 (10739.30MB)
AvgRate: 100.10Mbps stddev:14.48M
IP flow (unique src/dst pair) Information
# of flows: 698569 (avg. 24.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 5.8% 4.8% 2.9% 1.7% 1.3% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 377057
Top 10 bandwidth usage (bytes/total in %):
19.7% 13.7% 13.1% 8.1% 6.1% 6.0% 4.8% 4.1% 2.9% 2.9%
# of IPv6 addresses: 4477
Top 10 bandwidth usage (bytes/total in %):
47.8% 47.8% 10.6% 5.8% 5.1% 2.9% 2.8% 2.7% 2.6% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200709301400.pktlen.png)
detailed numbers
[ 32- 63]: 3996082
[ 64- 127]: 4875961
[ 128- 255]: 666243
[ 256- 511]: 416113
[ 512- 1023]: 407596
[ 1024- 2047]: 6843639
Protocol Breakdown
![[protocol breakdown chart]](200709301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17205634 (100.00%) 11260974644 (100.00%) 654.49
ip 17092047 ( 99.34%) 11229435548 ( 99.72%) 657.00
tcp 13573613 ( 78.89%) 10639544077 ( 94.48%) 783.84
http(s) 6209858 ( 36.09%) 8621722942 ( 76.56%) 1388.39
http(c) 3933101 ( 22.86%) 340178366 ( 3.02%) 86.49
squid 479603 ( 2.79%) 389944863 ( 3.46%) 813.06
smtp 591124 ( 3.44%) 91139518 ( 0.81%) 154.18
ftp 20179 ( 0.12%) 4423920 ( 0.04%) 219.23
pop3 15579 ( 0.09%) 12562814 ( 0.11%) 806.39
imap 3734 ( 0.02%) 637179 ( 0.01%) 170.64
telnet 313 ( 0.00%) 20016 ( 0.00%) 63.95
ssh 170096 ( 0.99%) 45351193 ( 0.40%) 266.62
dns 4972 ( 0.03%) 399939 ( 0.00%) 80.44
bgp 257 ( 0.00%) 61807 ( 0.00%) 240.49
napster 3 ( 0.00%) 186 ( 0.00%) 62.00
realaud 6 ( 0.00%) 360 ( 0.00%) 60.00
rtsp 481408 ( 2.80%) 31460517 ( 0.28%) 65.35
icecast 1090 ( 0.01%) 103861 ( 0.00%) 95.29
hotline 25 ( 0.00%) 11472 ( 0.00%) 458.88
other 1662262 ( 9.66%) 1101524944 ( 9.78%) 662.67
udp 2912617 ( 16.93%) 530272946 ( 4.71%) 182.06
dns 1602863 ( 9.32%) 199741375 ( 1.77%) 124.62
realaud 2060 ( 0.01%) 134348 ( 0.00%) 65.22
halflif 21 ( 0.00%) 2559 ( 0.00%) 121.86
starcra 24 ( 0.00%) 4260 ( 0.00%) 177.50
everque 89 ( 0.00%) 12716 ( 0.00%) 142.88
unreal 20 ( 0.00%) 3294 ( 0.00%) 164.70
quake 10 ( 0.00%) 752 ( 0.00%) 75.20
cuseeme 4 ( 0.00%) 376 ( 0.00%) 94.00
other 1307471 ( 7.60%) 330341166 ( 2.93%) 252.66
icmp 587386 ( 3.41%) 54138910 ( 0.48%) 92.17
ipip 364 ( 0.00%) 43888 ( 0.00%) 120.57
ipsec 180 ( 0.00%) 19800 ( 0.00%) 110.00
ip6 7645 ( 0.04%) 4010044 ( 0.04%) 524.53
other 10242 ( 0.06%) 1405883 ( 0.01%) 137.27
frag 10622 ( 0.06%) 9173074 ( 0.08%) 863.59
ip6 113587 ( 0.66%) 31539096 ( 0.28%) 277.66
tcp6 48163 ( 0.28%) 19820928 ( 0.18%) 411.54
http(s) 242 ( 0.00%) 172405 ( 0.00%) 712.42
http(c) 29295 ( 0.17%) 3501590 ( 0.03%) 119.53
squid 67 ( 0.00%) 6026 ( 0.00%) 89.94
smtp 905 ( 0.01%) 219843 ( 0.00%) 242.92
ftp 16 ( 0.00%) 1498 ( 0.00%) 93.62
ssh 62 ( 0.00%) 10402 ( 0.00%) 167.77
dns 4 ( 0.00%) 536 ( 0.00%) 134.00
bgp 120 ( 0.00%) 11055 ( 0.00%) 92.12
other 17452 ( 0.10%) 15897573 ( 0.14%) 910.93
udp6 51685 ( 0.30%) 10166621 ( 0.09%) 196.70
dns 45856 ( 0.27%) 8770929 ( 0.08%) 191.27
starcra 21 ( 0.00%) 5603 ( 0.00%) 266.81
unreal 3 ( 0.00%) 795 ( 0.00%) 265.00
cuseeme 1 ( 0.00%) 516 ( 0.00%) 516.00
other 5804 ( 0.03%) 1388778 ( 0.01%) 239.28
icmp6 13487 ( 0.08%) 1506316 ( 0.01%) 111.69
ip6 154 ( 0.00%) 22065 ( 0.00%) 143.28
pim6 82 ( 0.00%) 9072 ( 0.00%) 110.63
other6 16 ( 0.00%) 14094 ( 0.00%) 880.88
tcpdump file: 200709301400.dump.gz (428.54 MB)