Traffic Trace Info
DumpFile: 200908011400.dump
FileSize: 1466.29MB
Id: 200908011400
StartTime: Sat Aug 1 14:00:00 2009
EndTime: Sat Aug 1 14:15:00 2009
TotalTime: 900.24 seconds
TotalCapSize: 1131.65MB CapLen: 96 bytes
# of packets: 21930860 (14453.77MB)
AvgRate: 134.69Mbps stddev:15.16M
IP flow (unique src/dst pair) Information
# of flows: 1139031 (avg. 19.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 2.8% 2.7% 2.0% 1.1% 1.0% 1.0% 1.0% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 667957
Top 10 bandwidth usage (bytes/total in %):
21.6% 13.0% 4.5% 4.1% 4.1% 4.1% 2.9% 2.9% 2.7% 2.7%
# of IPv6 addresses: 839
Top 10 bandwidth usage (bytes/total in %):
37.4% 37.4% 13.9% 7.2% 5.1% 4.5% 4.4% 4.3% 3.5% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200908011400.pktlen.png)
detailed numbers
[ 32- 63]: 5285945
[ 64- 127]: 4350446
[ 128- 255]: 1277590
[ 256- 511]: 615222
[ 512- 1023]: 856030
[ 1024- 2047]: 9545627
Protocol Breakdown
![[protocol breakdown chart]](200908011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21930860 (100.00%) 15155874169 (100.00%) 691.08
ip 21914994 ( 99.93%) 15151638607 ( 99.97%) 691.38
tcp 15631169 ( 71.27%) 12262914991 ( 80.91%) 784.52
http(s) 4396375 ( 20.05%) 5765551836 ( 38.04%) 1311.43
http(c) 2539348 ( 11.58%) 382991216 ( 2.53%) 150.82
squid 398377 ( 1.82%) 182879449 ( 1.21%) 459.06
smtp 236545 ( 1.08%) 62536820 ( 0.41%) 264.38
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 107176 ( 0.49%) 8989396 ( 0.06%) 83.88
pop3 16102 ( 0.07%) 7019880 ( 0.05%) 435.96
imap 2016 ( 0.01%) 482566 ( 0.00%) 239.37
telnet 554 ( 0.00%) 38930 ( 0.00%) 70.27
ssh 715641 ( 3.26%) 1026992178 ( 6.78%) 1435.07
dns 5409 ( 0.02%) 6648123 ( 0.04%) 1229.09
bgp 151 ( 0.00%) 47520 ( 0.00%) 314.70
napster 8336 ( 0.04%) 681419 ( 0.00%) 81.74
realaud 329 ( 0.00%) 37437 ( 0.00%) 113.79
rtsp 317572 ( 1.45%) 38336205 ( 0.25%) 120.72
icecast 8124 ( 0.04%) 3941541 ( 0.03%) 485.17
hotline 12 ( 0.00%) 1726 ( 0.00%) 143.83
other 6879080 ( 31.37%) 4775737427 ( 31.51%) 694.24
udp 5537618 ( 25.25%) 2826099581 ( 18.65%) 510.35
dns 860942 ( 3.93%) 157874161 ( 1.04%) 183.37
realaud 43 ( 0.00%) 7247 ( 0.00%) 168.53
halflif 102 ( 0.00%) 16135 ( 0.00%) 158.19
starcra 350 ( 0.00%) 69202 ( 0.00%) 197.72
everque 299 ( 0.00%) 58392 ( 0.00%) 195.29
unreal 77 ( 0.00%) 15857 ( 0.00%) 205.94
quake 27 ( 0.00%) 3756 ( 0.00%) 139.11
cuseeme 16 ( 0.00%) 2678 ( 0.00%) 167.38
other 4675417 ( 21.32%) 2667909804 ( 17.60%) 570.62
icmp 727462 ( 3.32%) 57088048 ( 0.38%) 78.48
ipip 312 ( 0.00%) 37928 ( 0.00%) 121.56
ipsec 66 ( 0.00%) 10428 ( 0.00%) 158.00
ip6 12271 ( 0.06%) 3986664 ( 0.03%) 324.89
other 6096 ( 0.03%) 1500967 ( 0.01%) 246.22
frag 4899 ( 0.02%) 4353783 ( 0.03%) 888.71
ip6 15866 ( 0.07%) 4235562 ( 0.03%) 266.96
tcp6 6201 ( 0.03%) 2588487 ( 0.02%) 417.43
http(s) 5 ( 0.00%) 585 ( 0.00%) 117.00
http(c) 1794 ( 0.01%) 165721 ( 0.00%) 92.38
smtp 1184 ( 0.01%) 602479 ( 0.00%) 508.85
ftp 137 ( 0.00%) 12295 ( 0.00%) 89.74
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 17 ( 0.00%) 2924 ( 0.00%) 172.00
bgp 376 ( 0.00%) 32273 ( 0.00%) 85.83
other 2687 ( 0.01%) 1772136 ( 0.01%) 659.52
udp6 6646 ( 0.03%) 1283514 ( 0.01%) 193.13
dns 6623 ( 0.03%) 1280984 ( 0.01%) 193.41
other 23 ( 0.00%) 2530 ( 0.00%) 110.00
icmp6 2984 ( 0.01%) 355954 ( 0.00%) 119.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4 ( 0.00%) 3391 ( 0.00%) 847.75
tcpdump file: 200908011400.dump.gz (533.96 MB)