Traffic Trace Info
DumpFile: 200907071400.dump
FileSize: 1952.51MB
Id: 200907071400
StartTime: Tue Jul 7 14:00:01 2009
EndTime: Tue Jul 7 14:15:01 2009
TotalTime: 900.35 seconds
TotalCapSize: 1522.04MB CapLen: 96 bytes
# of packets: 28210823 (18300.24MB)
AvgRate: 170.47Mbps stddev:19.79M
IP flow (unique src/dst pair) Information
# of flows: 1332188 (avg. 21.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.4% 1.2% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 784853
Top 10 bandwidth usage (bytes/total in %):
10.4% 6.4% 6.1% 4.8% 3.6% 2.9% 2.9% 2.9% 2.5% 2.4%
# of IPv6 addresses: 998
Top 10 bandwidth usage (bytes/total in %):
23.9% 23.9% 14.5% 6.1% 5.1% 4.6% 4.5% 4.0% 4.0% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200907071400.pktlen.png)
detailed numbers
[ 32- 63]: 6613325
[ 64- 127]: 6695223
[ 128- 255]: 1355149
[ 256- 511]: 850733
[ 512- 1023]: 830767
[ 1024- 2047]: 11865626
Protocol Breakdown
![[protocol breakdown chart]](200907071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28210823 (100.00%) 19189196006 (100.00%) 680.21
ip 28187203 ( 99.92%) 19183006583 ( 99.97%) 680.56
tcp 22114785 ( 78.39%) 16720252162 ( 87.13%) 756.07
http(s) 8870855 ( 31.44%) 11849470858 ( 61.75%) 1335.78
http(c) 6368488 ( 22.57%) 719362135 ( 3.75%) 112.96
squid 415785 ( 1.47%) 228481744 ( 1.19%) 549.52
smtp 333189 ( 1.18%) 136834944 ( 0.71%) 410.68
ftp 42226 ( 0.15%) 19320590 ( 0.10%) 457.55
pop3 21900 ( 0.08%) 7749576 ( 0.04%) 353.86
imap 3733 ( 0.01%) 365244 ( 0.00%) 97.84
telnet 9026 ( 0.03%) 664137 ( 0.00%) 73.58
ssh 133781 ( 0.47%) 12659906 ( 0.07%) 94.63
dns 52785 ( 0.19%) 74631966 ( 0.39%) 1413.89
bgp 155 ( 0.00%) 59591 ( 0.00%) 384.46
napster 199 ( 0.00%) 22827 ( 0.00%) 114.71
realaud 534 ( 0.00%) 75268 ( 0.00%) 140.95
rtsp 125667 ( 0.45%) 22254734 ( 0.12%) 177.09
icecast 24704 ( 0.09%) 11957180 ( 0.06%) 484.02
hotline 5 ( 0.00%) 308 ( 0.00%) 61.60
other 5711676 ( 20.25%) 3636244671 ( 18.95%) 636.63
udp 5233833 ( 18.55%) 2266181758 ( 11.81%) 432.99
dns 1357105 ( 4.81%) 266025456 ( 1.39%) 196.02
realaud 4733 ( 0.02%) 322939 ( 0.00%) 68.23
halflif 93 ( 0.00%) 16446 ( 0.00%) 176.84
starcra 321 ( 0.00%) 61944 ( 0.00%) 192.97
everque 528 ( 0.00%) 287404 ( 0.00%) 544.33
unreal 132 ( 0.00%) 28785 ( 0.00%) 218.07
quake 56 ( 0.00%) 8426 ( 0.00%) 150.46
cuseeme 5 ( 0.00%) 711 ( 0.00%) 142.20
other 3869731 ( 13.72%) 1999206580 ( 10.42%) 516.63
icmp 607376 ( 2.15%) 52641278 ( 0.27%) 86.67
ipip 324 ( 0.00%) 40806 ( 0.00%) 125.94
ipsec 6 ( 0.00%) 660 ( 0.00%) 110.00
ip6 199718 ( 0.71%) 133889281 ( 0.70%) 670.39
other 31161 ( 0.11%) 10000638 ( 0.05%) 320.93
frag 8420 ( 0.03%) 6831357 ( 0.04%) 811.33
ip6 23620 ( 0.08%) 6189423 ( 0.03%) 262.04
tcp6 8163 ( 0.03%) 3264947 ( 0.02%) 399.97
http(s) 531 ( 0.00%) 240937 ( 0.00%) 453.74
http(c) 1544 ( 0.01%) 141346 ( 0.00%) 91.55
smtp 1801 ( 0.01%) 916283 ( 0.00%) 508.76
ssh 10 ( 0.00%) 1548 ( 0.00%) 154.80
dns 9 ( 0.00%) 991 ( 0.00%) 110.11
bgp 370 ( 0.00%) 31149 ( 0.00%) 84.19
other 3898 ( 0.01%) 1932693 ( 0.01%) 495.82
udp6 11620 ( 0.04%) 2445731 ( 0.01%) 210.48
dns 11568 ( 0.04%) 2439686 ( 0.01%) 210.90
other 52 ( 0.00%) 6045 ( 0.00%) 116.25
icmp6 3782 ( 0.01%) 458642 ( 0.00%) 121.27
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 25 ( 0.00%) 16023 ( 0.00%) 640.92
tcpdump file: 200907071400.dump.gz (700.37 MB)