Traffic Trace Info
DumpFile: 200907271400.dump
FileSize: 1777.68MB
Id: 200907271400
StartTime: Mon Jul 27 14:00:01 2009
EndTime: Mon Jul 27 14:15:01 2009
TotalTime: 900.14 seconds
TotalCapSize: 1379.66MB CapLen: 96 bytes
# of packets: 26083776 (16268.84MB)
AvgRate: 151.62Mbps stddev:19.37M
IP flow (unique src/dst pair) Information
# of flows: 1401237 (avg. 18.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 1.4% 1.2% 1.0% 0.9% 0.9% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 821947
Top 10 bandwidth usage (bytes/total in %):
13.2% 7.3% 5.8% 4.8% 4.7% 3.3% 3.3% 3.0% 2.9% 2.3%
# of IPv6 addresses: 973
Top 10 bandwidth usage (bytes/total in %):
25.1% 25.1% 12.9% 12.9% 7.0% 7.0% 6.5% 5.8% 3.4% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200907271400.pktlen.png)
detailed numbers
[ 32- 63]: 5720260
[ 64- 127]: 6392197
[ 128- 255]: 1727053
[ 256- 511]: 1039669
[ 512- 1023]: 723538
[ 1024- 2047]: 10481059
Protocol Breakdown
![[protocol breakdown chart]](200907271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26083776 (100.00%) 17059119218 (100.00%) 654.01
ip 26058794 ( 99.90%) 17052421228 ( 99.96%) 654.38
tcp 18219353 ( 69.85%) 13960877180 ( 81.84%) 766.27
http(s) 6888197 ( 26.41%) 9078865352 ( 53.22%) 1318.03
http(c) 4581879 ( 17.57%) 858924377 ( 5.03%) 187.46
squid 461221 ( 1.77%) 202976063 ( 1.19%) 440.08
smtp 308737 ( 1.18%) 82243349 ( 0.48%) 266.39
ftp 107038 ( 0.41%) 27317186 ( 0.16%) 255.21
pop3 106469 ( 0.41%) 17776793 ( 0.10%) 166.97
imap 7118 ( 0.03%) 6583693 ( 0.04%) 924.94
telnet 827 ( 0.00%) 80739 ( 0.00%) 97.63
ssh 30828 ( 0.12%) 6431165 ( 0.04%) 208.61
dns 6591 ( 0.03%) 6744343 ( 0.04%) 1023.27
bgp 139 ( 0.00%) 50958 ( 0.00%) 366.60
napster 448 ( 0.00%) 162952 ( 0.00%) 363.73
realaud 702 ( 0.00%) 77954 ( 0.00%) 111.05
rtsp 122485 ( 0.47%) 43352394 ( 0.25%) 353.94
icecast 25369 ( 0.10%) 17662893 ( 0.10%) 696.24
hotline 25 ( 0.00%) 2630 ( 0.00%) 105.20
other 5571222 ( 21.36%) 3611577123 ( 21.17%) 648.26
udp 6986561 ( 26.79%) 2882980403 ( 16.90%) 412.65
dns 1902825 ( 7.30%) 268055002 ( 1.57%) 140.87
realaud 3121 ( 0.01%) 231543 ( 0.00%) 74.19
halflif 117 ( 0.00%) 19475 ( 0.00%) 166.45
starcra 3521 ( 0.01%) 297018 ( 0.00%) 84.36
everque 778 ( 0.00%) 305864 ( 0.00%) 393.14
unreal 122 ( 0.00%) 22596 ( 0.00%) 185.21
quake 99 ( 0.00%) 13730 ( 0.00%) 138.69
cuseeme 14 ( 0.00%) 2033 ( 0.00%) 145.21
other 5075334 ( 19.46%) 2613670551 ( 15.32%) 514.98
icmp 541425 ( 2.08%) 46526933 ( 0.27%) 85.93
ipip 345 ( 0.00%) 41490 ( 0.00%) 120.26
ip6 304749 ( 1.17%) 159787829 ( 0.94%) 524.33
other 6361 ( 0.02%) 2207393 ( 0.01%) 347.02
frag 6787 ( 0.03%) 6502409 ( 0.04%) 958.07
ip6 24982 ( 0.10%) 6697990 ( 0.04%) 268.11
tcp6 10990 ( 0.04%) 4202065 ( 0.02%) 382.35
http(s) 570 ( 0.00%) 662785 ( 0.00%) 1162.78
http(c) 3188 ( 0.01%) 295106 ( 0.00%) 92.57
smtp 937 ( 0.00%) 472149 ( 0.00%) 503.89
ssh 3043 ( 0.01%) 869762 ( 0.01%) 285.82
bgp 396 ( 0.00%) 35678 ( 0.00%) 90.10
other 2856 ( 0.01%) 1866585 ( 0.01%) 653.57
udp6 10940 ( 0.04%) 2130152 ( 0.01%) 194.71
dns 10926 ( 0.04%) 2128622 ( 0.01%) 194.82
realaud 1 ( 0.00%) 100 ( 0.00%) 100.00
other 13 ( 0.00%) 1430 ( 0.00%) 110.00
icmp6 3017 ( 0.01%) 357628 ( 0.00%) 118.54
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4 ( 0.00%) 3929 ( 0.00%) 982.25
tcpdump file: 200907271400.dump.gz (653.53 MB)