Traffic Trace Info
DumpFile: 200907281400.dump
FileSize: 1859.69MB
Id: 200907281400
StartTime: Tue Jul 28 14:00:00 2009
EndTime: Tue Jul 28 14:15:01 2009
TotalTime: 900.15 seconds
TotalCapSize: 1439.90MB CapLen: 96 bytes
# of packets: 27510444 (17580.54MB)
AvgRate: 163.84Mbps stddev:17.09M
IP flow (unique src/dst pair) Information
# of flows: 1231633 (avg. 22.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 1.3% 1.3% 1.3% 1.3% 1.2% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 755280
Top 10 bandwidth usage (bytes/total in %):
15.7% 7.3% 5.5% 5.4% 4.0% 3.5% 3.2% 3.1% 3.0% 2.7%
# of IPv6 addresses: 981
Top 10 bandwidth usage (bytes/total in %):
82.5% 82.5% 4.4% 4.4% 1.6% 1.6% 1.0% 0.9% 0.9% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200907281400.pktlen.png)
detailed numbers
[ 32- 63]: 6449386
[ 64- 127]: 6128416
[ 128- 255]: 1517194
[ 256- 511]: 1088288
[ 512- 1023]: 928358
[ 1024- 2047]: 11398802
Protocol Breakdown
![[protocol breakdown chart]](200907281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27510444 (100.00%) 18434535090 (100.00%) 670.09
ip 27470320 ( 99.85%) 18398575864 ( 99.80%) 669.76
tcp 19053105 ( 69.26%) 14627798042 ( 79.35%) 767.74
http(s) 7991383 ( 29.05%) 10692799242 ( 58.00%) 1338.04
http(c) 4881819 ( 17.75%) 719611097 ( 3.90%) 147.41
squid 490086 ( 1.78%) 215665200 ( 1.17%) 440.06
smtp 380135 ( 1.38%) 158247142 ( 0.86%) 416.29
ftp 139332 ( 0.51%) 28011415 ( 0.15%) 201.04
pop3 105986 ( 0.39%) 13122201 ( 0.07%) 123.81
imap 3785 ( 0.01%) 750317 ( 0.00%) 198.23
telnet 923 ( 0.00%) 194550 ( 0.00%) 210.78
ssh 91556 ( 0.33%) 16526530 ( 0.09%) 180.51
dns 6805 ( 0.02%) 6685417 ( 0.04%) 982.43
bgp 200 ( 0.00%) 85379 ( 0.00%) 426.89
napster 187 ( 0.00%) 29697 ( 0.00%) 158.81
realaud 279 ( 0.00%) 36459 ( 0.00%) 130.68
rtsp 200771 ( 0.73%) 62655821 ( 0.34%) 312.08
icecast 5277 ( 0.02%) 2735921 ( 0.01%) 518.46
other 4754405 ( 17.28%) 2710501196 ( 14.70%) 570.10
udp 7480501 ( 27.19%) 3459485769 ( 18.77%) 462.47
dns 1603740 ( 5.83%) 272928443 ( 1.48%) 170.18
realaud 64 ( 0.00%) 10022 ( 0.00%) 156.59
halflif 21286 ( 0.08%) 1578128 ( 0.01%) 74.14
starcra 302 ( 0.00%) 60810 ( 0.00%) 201.36
everque 874 ( 0.00%) 106577 ( 0.00%) 121.94
unreal 73 ( 0.00%) 13477 ( 0.00%) 184.62
quake 75 ( 0.00%) 8530 ( 0.00%) 113.73
cuseeme 18 ( 0.00%) 3313 ( 0.00%) 184.06
other 5853173 ( 21.28%) 3183807194 ( 17.27%) 543.95
icmp 502185 ( 1.83%) 43365308 ( 0.24%) 86.35
ipip 293 ( 0.00%) 36474 ( 0.00%) 124.48
ip6 417830 ( 1.52%) 261206306 ( 1.42%) 625.15
other 16406 ( 0.06%) 6683965 ( 0.04%) 407.41
frag 5036 ( 0.02%) 5851102 ( 0.03%) 1161.86
ip6 40124 ( 0.15%) 35959226 ( 0.20%) 896.20
tcp6 26736 ( 0.10%) 33399992 ( 0.18%) 1249.25
http(s) 810 ( 0.00%) 1094307 ( 0.01%) 1351.00
http(c) 1761 ( 0.01%) 166725 ( 0.00%) 94.68
smtp 742 ( 0.00%) 344880 ( 0.00%) 464.80
ftp 22 ( 0.00%) 3987 ( 0.00%) 181.23
ssh 19714 ( 0.07%) 29682248 ( 0.16%) 1505.64
dns 15 ( 0.00%) 5845 ( 0.00%) 389.67
bgp 388 ( 0.00%) 34781 ( 0.00%) 89.64
other 3284 ( 0.01%) 2067219 ( 0.01%) 629.48
udp6 10473 ( 0.04%) 2182212 ( 0.01%) 208.37
dns 10413 ( 0.04%) 2173046 ( 0.01%) 208.69
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
other 59 ( 0.00%) 9057 ( 0.00%) 153.51
icmp6 2845 ( 0.01%) 334353 ( 0.00%) 117.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 40 ( 0.00%) 38589 ( 0.00%) 964.73
tcpdump file: 200907281400.dump.gz (679.65 MB)