Traffic Trace Info
DumpFile: 200907111400.dump
FileSize: 1530.09MB
Id: 200907111400
StartTime: Sat Jul 11 14:00:01 2009
EndTime: Sat Jul 11 14:15:00 2009
TotalTime: 899.77 seconds
TotalCapSize: 1190.66MB CapLen: 96 bytes
# of packets: 22244200 (16017.15MB)
AvgRate: 149.30Mbps stddev:19.76M
IP flow (unique src/dst pair) Information
# of flows: 1004461 (avg. 22.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 3.1% 2.8% 2.3% 2.3% 2.1% 1.9% 1.5% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 600162
Top 10 bandwidth usage (bytes/total in %):
14.1% 12.2% 6.4% 5.8% 3.8% 3.5% 3.2% 3.0% 3.0% 3.0%
# of IPv6 addresses: 954
Top 10 bandwidth usage (bytes/total in %):
99.0% 67.2% 32.0% 0.3% 0.1% 0.1% 0.1% 0.1% 0.1% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200907111400.pktlen.png)
detailed numbers
[ 32- 63]: 4902075
[ 64- 127]: 3981356
[ 128- 255]: 1520230
[ 256- 511]: 660812
[ 512- 1023]: 553583
[ 1024- 2047]: 10626144
Protocol Breakdown
![[protocol breakdown chart]](200907111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22244200 (100.00%) 16795197802 (100.00%) 755.04
ip 21873049 ( 98.33%) 16281995850 ( 96.94%) 744.39
tcp 17265476 ( 77.62%) 14669294172 ( 87.34%) 849.63
http(s) 6920336 ( 31.11%) 9291605529 ( 55.32%) 1342.65
http(c) 3097615 ( 13.93%) 359567693 ( 2.14%) 116.08
squid 460650 ( 2.07%) 261457936 ( 1.56%) 567.58
smtp 294106 ( 1.32%) 61437112 ( 0.37%) 208.89
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 186053 ( 0.84%) 110165710 ( 0.66%) 592.12
pop3 8143 ( 0.04%) 2640451 ( 0.02%) 324.26
imap 1084 ( 0.00%) 102164 ( 0.00%) 94.25
telnet 775 ( 0.00%) 68390 ( 0.00%) 88.25
ssh 380919 ( 1.71%) 355673780 ( 2.12%) 933.73
dns 5768 ( 0.03%) 6606656 ( 0.04%) 1145.40
bgp 138 ( 0.00%) 52410 ( 0.00%) 379.78
napster 1172 ( 0.01%) 85681 ( 0.00%) 73.11
realaud 169 ( 0.00%) 21406 ( 0.00%) 126.66
rtsp 131660 ( 0.59%) 93727399 ( 0.56%) 711.89
icecast 4802 ( 0.02%) 2547817 ( 0.02%) 530.57
other 5771971 ( 25.95%) 4123484972 ( 24.55%) 714.40
udp 4034126 ( 18.14%) 1551015553 ( 9.23%) 384.47
dns 1063723 ( 4.78%) 196549642 ( 1.17%) 184.78
realaud 6524 ( 0.03%) 429802 ( 0.00%) 65.88
halflif 773 ( 0.00%) 62521 ( 0.00%) 80.88
starcra 265 ( 0.00%) 52611 ( 0.00%) 198.53
everque 248 ( 0.00%) 43241 ( 0.00%) 174.36
unreal 110 ( 0.00%) 27867 ( 0.00%) 253.34
quake 42 ( 0.00%) 9917 ( 0.00%) 236.12
cuseeme 16 ( 0.00%) 2316 ( 0.00%) 144.75
other 2958558 ( 13.30%) 1353134463 ( 8.06%) 457.36
icmp 500912 ( 2.25%) 44735891 ( 0.27%) 89.31
ipip 328 ( 0.00%) 40116 ( 0.00%) 122.30
ip6 67314 ( 0.30%) 15963059 ( 0.10%) 237.14
other 4893 ( 0.02%) 947059 ( 0.01%) 193.55
frag 12140 ( 0.05%) 11912798 ( 0.07%) 981.28
ip6 371151 ( 1.67%) 513201952 ( 3.06%) 1382.73
tcp6 357644 ( 1.61%) 510927373 ( 3.04%) 1428.59
http(s) 1400 ( 0.01%) 639473 ( 0.00%) 456.77
http(c) 1942 ( 0.01%) 176814 ( 0.00%) 91.05
smtp 1072 ( 0.00%) 566082 ( 0.00%) 528.06
ssh 41 ( 0.00%) 4278 ( 0.00%) 104.34
bgp 366 ( 0.00%) 30671 ( 0.00%) 83.80
other 352823 ( 1.59%) 509510055 ( 3.03%) 1444.10
udp6 9021 ( 0.04%) 1742153 ( 0.01%) 193.12
dns 8932 ( 0.04%) 1730091 ( 0.01%) 193.70
other 89 ( 0.00%) 12062 ( 0.00%) 135.53
icmp6 4450 ( 0.02%) 522752 ( 0.00%) 117.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5594 ( 0.00%) 932.33
tcpdump file: 200907111400.dump.gz (533.50 MB)