Traffic Trace Info
DumpFile: 200907221400.dump
FileSize: 1948.59MB
Id: 200907221400
StartTime: Wed Jul 22 14:00:00 2009
EndTime: Wed Jul 22 14:15:01 2009
TotalTime: 900.24 seconds
TotalCapSize: 1520.44MB CapLen: 96 bytes
# of packets: 28058555 (18987.33MB)
AvgRate: 176.92Mbps stddev:19.86M
IP flow (unique src/dst pair) Information
# of flows: 1297570 (avg. 21.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 1.4% 1.3% 1.3% 1.3% 1.3% 1.2% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 768448
Top 10 bandwidth usage (bytes/total in %):
13.1% 6.8% 5.2% 4.5% 3.5% 3.2% 3.0% 2.8% 2.8% 2.7%
# of IPv6 addresses: 999
Top 10 bandwidth usage (bytes/total in %):
99.5% 82.5% 17.0% 0.1% 0.0% 0.0% 0.0% 0.0% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200907221400.pktlen.png)
detailed numbers
[ 32- 63]: 6083948
[ 64- 127]: 6279355
[ 128- 255]: 1528785
[ 256- 511]: 971560
[ 512- 1023]: 818063
[ 1024- 2047]: 12376844
Protocol Breakdown
![[protocol breakdown chart]](200907221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28058555 (100.00%) 19909658764 (100.00%) 709.58
ip 27315858 ( 97.35%) 18854614845 ( 94.70%) 690.24
tcp 19564537 ( 69.73%) 15464610084 ( 77.67%) 790.44
http(s) 7427611 ( 26.47%) 9739813970 ( 48.92%) 1311.30
http(c) 5097388 ( 18.17%) 1187515176 ( 5.96%) 232.97
squid 338079 ( 1.20%) 212034337 ( 1.06%) 627.17
smtp 369728 ( 1.32%) 164245595 ( 0.82%) 444.23
nntp 36 ( 0.00%) 2836 ( 0.00%) 78.78
ftp 33738 ( 0.12%) 4880083 ( 0.02%) 144.65
pop3 108573 ( 0.39%) 11390241 ( 0.06%) 104.91
imap 4303 ( 0.02%) 2063396 ( 0.01%) 479.52
telnet 1999 ( 0.01%) 581747 ( 0.00%) 291.02
ssh 80190 ( 0.29%) 40524610 ( 0.20%) 505.36
dns 6234 ( 0.02%) 6674674 ( 0.03%) 1070.69
bgp 157 ( 0.00%) 55407 ( 0.00%) 352.91
napster 253 ( 0.00%) 101182 ( 0.00%) 399.93
realaud 386 ( 0.00%) 41845 ( 0.00%) 108.41
rtsp 82191 ( 0.29%) 65259365 ( 0.33%) 794.00
icecast 116190 ( 0.41%) 109645817 ( 0.55%) 943.68
other 5897343 ( 21.02%) 3919585776 ( 19.69%) 664.64
udp 6365902 ( 22.69%) 2850961103 ( 14.32%) 447.85
dns 1318547 ( 4.70%) 238329465 ( 1.20%) 180.75
realaud 4807 ( 0.02%) 348204 ( 0.00%) 72.44
halflif 210 ( 0.00%) 26397 ( 0.00%) 125.70
starcra 415 ( 0.00%) 87712 ( 0.00%) 211.35
everque 305 ( 0.00%) 67249 ( 0.00%) 220.49
unreal 126 ( 0.00%) 25377 ( 0.00%) 201.40
quake 5371 ( 0.02%) 3894136 ( 0.02%) 725.03
cuseeme 13 ( 0.00%) 2975 ( 0.00%) 228.85
other 5033324 ( 17.94%) 2607858644 ( 13.10%) 518.12
icmp 724273 ( 2.58%) 60240405 ( 0.30%) 83.17
ipip 327 ( 0.00%) 41072 ( 0.00%) 125.60
ipsec 312 ( 0.00%) 51232 ( 0.00%) 164.21
ip6 638897 ( 2.28%) 468250696 ( 2.35%) 732.90
other 21610 ( 0.08%) 10460253 ( 0.05%) 484.05
frag 9705 ( 0.03%) 7795016 ( 0.04%) 803.20
ip6 742697 ( 2.65%) 1055043919 ( 5.30%) 1420.56
tcp6 726901 ( 2.59%) 1052237906 ( 5.29%) 1447.57
http(s) 751 ( 0.00%) 890731 ( 0.00%) 1186.06
http(c) 1985 ( 0.01%) 182081 ( 0.00%) 91.73
smtp 1419 ( 0.01%) 694740 ( 0.00%) 489.60
ssh 15 ( 0.00%) 4410 ( 0.00%) 294.00
dns 14 ( 0.00%) 1396 ( 0.00%) 99.71
bgp 383 ( 0.00%) 33364 ( 0.00%) 87.11
other 722334 ( 2.57%) 1050431184 ( 5.28%) 1454.22
udp6 10873 ( 0.04%) 2212346 ( 0.01%) 203.47
dns 10862 ( 0.04%) 2211127 ( 0.01%) 203.57
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
cuseeme 1 ( 0.00%) 119 ( 0.00%) 119.00
other 9 ( 0.00%) 990 ( 0.00%) 110.00
icmp6 4882 ( 0.02%) 579385 ( 0.00%) 118.68
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 11 ( 0.00%) 10202 ( 0.00%) 927.45
tcpdump file: 200907221400.dump.gz (700.03 MB)