Traffic Trace Info
DumpFile: 200907121400.dump
FileSize: 1214.26MB
Id: 200907121400
StartTime: Sun Jul 12 14:00:00 2009
EndTime: Sun Jul 12 14:15:00 2009
TotalTime: 900.13 seconds
TotalCapSize: 948.91MB CapLen: 96 bytes
# of packets: 17389730 (11333.50MB)
AvgRate: 105.58Mbps stddev:12.06M
IP flow (unique src/dst pair) Information
# of flows: 919610 (avg. 18.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 2.4% 1.7% 1.7% 1.5% 1.4% 1.4% 1.2% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 544395
Top 10 bandwidth usage (bytes/total in %):
19.1% 11.9% 6.2% 3.6% 3.2% 2.1% 2.1% 2.0% 2.0% 1.9%
# of IPv6 addresses: 987
Top 10 bandwidth usage (bytes/total in %):
99.1% 70.9% 28.4% 0.4% 0.4% 0.1% 0.1% 0.0% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200907121400.pktlen.png)
detailed numbers
[ 32- 63]: 3878174
[ 64- 127]: 4060862
[ 128- 255]: 999594
[ 256- 511]: 537808
[ 512- 1023]: 561613
[ 1024- 2047]: 7351679
Protocol Breakdown
![[protocol breakdown chart]](200907121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17389730 (100.00%) 11884037789 (100.00%) 683.39
ip 16635181 ( 95.66%) 10889197583 ( 91.63%) 654.59
tcp 12746364 ( 73.30%) 9595880279 ( 80.75%) 752.83
http(s) 3786327 ( 21.77%) 4947719088 ( 41.63%) 1306.73
http(c) 2202975 ( 12.67%) 268234411 ( 2.26%) 121.76
squid 354480 ( 2.04%) 181647384 ( 1.53%) 512.43
smtp 245616 ( 1.41%) 39390601 ( 0.33%) 160.37
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 28903 ( 0.17%) 3542080 ( 0.03%) 122.55
pop3 9532 ( 0.05%) 7661127 ( 0.06%) 803.73
imap 1232 ( 0.01%) 486696 ( 0.00%) 395.05
telnet 478 ( 0.00%) 36695 ( 0.00%) 76.77
ssh 35824 ( 0.21%) 4873925 ( 0.04%) 136.05
dns 5482 ( 0.03%) 6594498 ( 0.06%) 1202.94
bgp 138 ( 0.00%) 46410 ( 0.00%) 336.30
napster 60 ( 0.00%) 5886 ( 0.00%) 98.10
realaud 323 ( 0.00%) 46034 ( 0.00%) 142.52
rtsp 227770 ( 1.31%) 185174545 ( 1.56%) 812.99
icecast 1874 ( 0.01%) 297510 ( 0.00%) 158.76
other 5845270 ( 33.61%) 3950022439 ( 33.24%) 675.76
udp 3334453 ( 19.17%) 1233419248 ( 10.38%) 369.90
dns 1088501 ( 6.26%) 198823420 ( 1.67%) 182.66
realaud 5528 ( 0.03%) 373920 ( 0.00%) 67.64
halflif 79 ( 0.00%) 11081 ( 0.00%) 140.27
starcra 259 ( 0.00%) 51553 ( 0.00%) 199.05
everque 362 ( 0.00%) 53096 ( 0.00%) 146.67
unreal 178 ( 0.00%) 40977 ( 0.00%) 230.21
quake 28 ( 0.00%) 4591 ( 0.00%) 163.96
cuseeme 9 ( 0.00%) 1489 ( 0.00%) 165.44
other 2239194 ( 12.88%) 1033979456 ( 8.70%) 461.76
icmp 484984 ( 2.79%) 43512705 ( 0.37%) 89.72
ipip 293 ( 0.00%) 36678 ( 0.00%) 125.18
ip6 66428 ( 0.38%) 15897697 ( 0.13%) 239.32
other 2659 ( 0.02%) 450976 ( 0.00%) 169.60
frag 5074 ( 0.03%) 4194482 ( 0.04%) 826.66
ip6 754549 ( 4.34%) 994840206 ( 8.37%) 1318.46
tcp6 741847 ( 4.27%) 992762992 ( 8.35%) 1338.23
http(s) 1055 ( 0.01%) 177824 ( 0.00%) 168.55
http(c) 56802 ( 0.33%) 4334080 ( 0.04%) 76.30
smtp 1865 ( 0.01%) 992158 ( 0.01%) 531.99
ssh 40 ( 0.00%) 4144 ( 0.00%) 103.60
bgp 376 ( 0.00%) 33664 ( 0.00%) 89.53
other 681709 ( 3.92%) 987221122 ( 8.31%) 1448.16
udp6 8130 ( 0.05%) 1542539 ( 0.01%) 189.73
dns 8040 ( 0.05%) 1530284 ( 0.01%) 190.33
other 90 ( 0.00%) 12255 ( 0.00%) 136.17
icmp6 4525 ( 0.03%) 514385 ( 0.00%) 113.68
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 17 ( 0.00%) 16210 ( 0.00%) 953.53
tcpdump file: 200907121400.dump.gz (440.24 MB)