Traffic Trace Info
DumpFile: 200907161400.dump
FileSize: 1758.35MB
Id: 200907161400
StartTime: Thu Jul 16 14:00:00 2009
EndTime: Thu Jul 16 14:15:00 2009
TotalTime: 899.95 seconds
TotalCapSize: 1369.47MB CapLen: 96 bytes
# of packets: 25484942 (15540.04MB)
AvgRate: 144.86Mbps stddev:13.21M
IP flow (unique src/dst pair) Information
# of flows: 1351446 (avg. 18.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.3% 1.3% 1.1% 1.1% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 837960
Top 10 bandwidth usage (bytes/total in %):
12.0% 7.8% 7.2% 6.0% 5.7% 5.1% 2.9% 2.6% 2.5% 2.3%
# of IPv6 addresses: 1061
Top 10 bandwidth usage (bytes/total in %):
95.3% 95.3% 2.1% 2.1% 0.7% 0.6% 0.4% 0.4% 0.3% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200907161400.pktlen.png)
detailed numbers
[ 32- 63]: 5967937
[ 64- 127]: 6549306
[ 128- 255]: 1311996
[ 256- 511]: 848663
[ 512- 1023]: 808954
[ 1024- 2047]: 9998086
Protocol Breakdown
![[protocol breakdown chart]](200907161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25484942 (100.00%) 16294908425 (100.00%) 639.39
ip 25212600 ( 98.93%) 15931450612 ( 97.77%) 631.88
tcp 18133290 ( 71.15%) 13115143228 ( 80.49%) 723.26
http(s) 6184652 ( 24.27%) 8027938909 ( 49.27%) 1298.04
http(c) 4710301 ( 18.48%) 617699205 ( 3.79%) 131.14
squid 450475 ( 1.77%) 262258110 ( 1.61%) 582.18
smtp 432012 ( 1.70%) 162419385 ( 1.00%) 375.96
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 27549 ( 0.11%) 3812604 ( 0.02%) 138.39
pop3 23312 ( 0.09%) 6754987 ( 0.04%) 289.76
imap 3418 ( 0.01%) 379502 ( 0.00%) 111.03
telnet 431 ( 0.00%) 32766 ( 0.00%) 76.02
ssh 11325 ( 0.04%) 1963293 ( 0.01%) 173.36
dns 5884 ( 0.02%) 6640141 ( 0.04%) 1128.51
bgp 171 ( 0.00%) 65383 ( 0.00%) 382.36
napster 34 ( 0.00%) 2769 ( 0.00%) 81.44
realaud 64 ( 0.00%) 8411 ( 0.00%) 131.42
rtsp 85717 ( 0.34%) 83687454 ( 0.51%) 976.32
icecast 1595 ( 0.01%) 141374 ( 0.00%) 88.64
hotline 2 ( 0.00%) 156 ( 0.00%) 78.00
other 6196344 ( 24.31%) 3941338539 ( 24.19%) 636.07
udp 6185398 ( 24.27%) 2614027652 ( 16.04%) 422.61
dns 1517085 ( 5.95%) 286372552 ( 1.76%) 188.77
realaud 1475 ( 0.01%) 95310 ( 0.00%) 64.62
halflif 128 ( 0.00%) 12456 ( 0.00%) 97.31
starcra 244 ( 0.00%) 47363 ( 0.00%) 194.11
everque 316 ( 0.00%) 57041 ( 0.00%) 180.51
unreal 127 ( 0.00%) 22759 ( 0.00%) 179.20
quake 57 ( 0.00%) 9131 ( 0.00%) 160.19
cuseeme 17 ( 0.00%) 2827 ( 0.00%) 166.29
other 4663488 ( 18.30%) 2327194108 ( 14.28%) 499.02
icmp 610283 ( 2.39%) 51019616 ( 0.31%) 83.60
ipip 311 ( 0.00%) 39034 ( 0.00%) 125.51
ipsec 278 ( 0.00%) 47540 ( 0.00%) 171.01
ip6 263295 ( 1.03%) 140289182 ( 0.86%) 532.82
other 19745 ( 0.08%) 10884360 ( 0.07%) 551.25
frag 21183 ( 0.08%) 16510738 ( 0.10%) 779.43
ip6 272342 ( 1.07%) 363457813 ( 2.23%) 1334.56
tcp6 257497 ( 1.01%) 360673922 ( 2.21%) 1400.69
http(s) 7800 ( 0.03%) 8317212 ( 0.05%) 1066.31
http(c) 1982 ( 0.01%) 185710 ( 0.00%) 93.70
squid 10 ( 0.00%) 3221 ( 0.00%) 322.10
smtp 2427 ( 0.01%) 1116598 ( 0.01%) 460.07
ftp 604 ( 0.00%) 115747 ( 0.00%) 191.63
ssh 206 ( 0.00%) 64432 ( 0.00%) 312.78
dns 3 ( 0.00%) 456 ( 0.00%) 152.00
bgp 379 ( 0.00%) 32836 ( 0.00%) 86.64
other 244086 ( 0.96%) 350837710 ( 2.15%) 1437.35
udp6 11339 ( 0.04%) 2351671 ( 0.01%) 207.40
dns 11321 ( 0.04%) 2349691 ( 0.01%) 207.55
other 18 ( 0.00%) 1980 ( 0.00%) 110.00
icmp6 3472 ( 0.01%) 423672 ( 0.00%) 122.03
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 4468 ( 0.00%) 1117.00
tcpdump file: 200907161400.dump.gz (644.00 MB)