Traffic Trace Info
DumpFile: 200907171400.dump
FileSize: 1805.53MB
Id: 200907171400
StartTime: Fri Jul 17 14:00:00 2009
EndTime: Fri Jul 17 14:15:01 2009
TotalTime: 900.17 seconds
TotalCapSize: 1400.67MB CapLen: 96 bytes
# of packets: 26531775 (16096.50MB)
AvgRate: 150.01Mbps stddev:14.62M
IP flow (unique src/dst pair) Information
# of flows: 1243150 (avg. 21.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.5% 1.3% 1.1% 1.1% 1.0% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 719552
Top 10 bandwidth usage (bytes/total in %):
18.6% 6.7% 5.4% 5.0% 4.7% 3.7% 3.5% 3.2% 2.9% 2.4%
# of IPv6 addresses: 1038
Top 10 bandwidth usage (bytes/total in %):
97.1% 84.2% 13.7% 0.7% 0.2% 0.2% 0.1% 0.1% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200907171400.pktlen.png)
detailed numbers
[ 32- 63]: 4961312
[ 64- 127]: 6134650
[ 128- 255]: 3233813
[ 256- 511]: 1232214
[ 512- 1023]: 848941
[ 1024- 2047]: 10120845
Protocol Breakdown
![[protocol breakdown chart]](200907171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26531775 (100.00%) 16878400590 (100.00%) 636.16
ip 26366017 ( 99.38%) 16669687460 ( 98.76%) 632.24
tcp 17804529 ( 67.11%) 13767393448 ( 81.57%) 773.25
http(s) 6808299 ( 25.66%) 9000949622 ( 53.33%) 1322.06
http(c) 4211666 ( 15.87%) 603897133 ( 3.58%) 143.39
squid 302514 ( 1.14%) 152527052 ( 0.90%) 504.20
smtp 398829 ( 1.50%) 103184167 ( 0.61%) 258.72
nntp 4 ( 0.00%) 258 ( 0.00%) 64.50
ftp 25708 ( 0.10%) 5724920 ( 0.03%) 222.69
pop3 17347 ( 0.07%) 6948545 ( 0.04%) 400.56
imap 3871 ( 0.01%) 479322 ( 0.00%) 123.82
telnet 492 ( 0.00%) 37211 ( 0.00%) 75.63
ssh 62891 ( 0.24%) 12449418 ( 0.07%) 197.95
dns 5818 ( 0.02%) 6634324 ( 0.04%) 1140.31
bgp 174 ( 0.00%) 71015 ( 0.00%) 408.13
napster 48 ( 0.00%) 5711 ( 0.00%) 118.98
realaud 515 ( 0.00%) 59274 ( 0.00%) 115.10
rtsp 189093 ( 0.71%) 129111263 ( 0.76%) 682.79
icecast 10837 ( 0.04%) 5170041 ( 0.03%) 477.07
hotline 18 ( 0.00%) 1128 ( 0.00%) 62.67
other 5766335 ( 21.73%) 3740081510 ( 22.16%) 648.61
udp 7563499 ( 28.51%) 2619531199 ( 15.52%) 346.34
dns 1430445 ( 5.39%) 257519157 ( 1.53%) 180.03
realaud 65 ( 0.00%) 9485 ( 0.00%) 145.92
halflif 2624 ( 0.01%) 254812 ( 0.00%) 97.11
starcra 48430 ( 0.18%) 3680266 ( 0.02%) 75.99
everque 1874 ( 0.01%) 682475 ( 0.00%) 364.18
unreal 325 ( 0.00%) 120889 ( 0.00%) 371.97
quake 39 ( 0.00%) 5038 ( 0.00%) 129.18
cuseeme 12 ( 0.00%) 1697 ( 0.00%) 141.42
other 6070883 ( 22.88%) 2351288453 ( 13.93%) 387.31
icmp 542171 ( 2.04%) 52750633 ( 0.31%) 97.30
ipip 305 ( 0.00%) 39014 ( 0.00%) 127.91
ip6 322457 ( 1.22%) 212899638 ( 1.26%) 660.24
other 133056 ( 0.50%) 17073528 ( 0.10%) 128.32
frag 65761 ( 0.25%) 71680177 ( 0.42%) 1090.01
ip6 165758 ( 0.62%) 208713130 ( 1.24%) 1259.14
tcp6 149647 ( 0.56%) 205812537 ( 1.22%) 1375.32
http(s) 1186 ( 0.00%) 309758 ( 0.00%) 261.18
http(c) 1820 ( 0.01%) 169351 ( 0.00%) 93.05
smtp 1112 ( 0.00%) 525394 ( 0.00%) 472.48
ssh 1295 ( 0.00%) 224826 ( 0.00%) 173.61
bgp 371 ( 0.00%) 31351 ( 0.00%) 84.50
other 143863 ( 0.54%) 204551857 ( 1.21%) 1421.85
udp6 11322 ( 0.04%) 2321432 ( 0.01%) 205.04
dns 11314 ( 0.04%) 2320552 ( 0.01%) 205.10
other 8 ( 0.00%) 880 ( 0.00%) 110.00
icmp6 4752 ( 0.02%) 568461 ( 0.00%) 119.63
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6 ( 0.00%) 6484 ( 0.00%) 1080.67
tcpdump file: 200907171400.dump.gz (653.66 MB)