Traffic Trace Info
DumpFile: 200908031400.dump
FileSize: 1537.12MB
Id: 200908031400
StartTime: Mon Aug 3 14:00:00 2009
EndTime: Mon Aug 3 14:15:01 2009
TotalTime: 900.72 seconds
TotalCapSize: 1198.17MB CapLen: 96 bytes
# of packets: 22212912 (13728.85MB)
AvgRate: 127.86Mbps stddev:12.70M
IP flow (unique src/dst pair) Information
# of flows: 1349588 (avg. 16.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 1.9% 1.9% 1.8% 1.1% 1.1% 1.0% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 812595
Top 10 bandwidth usage (bytes/total in %):
13.2% 8.4% 6.1% 5.8% 5.2% 4.0% 3.9% 3.9% 2.0% 1.9%
# of IPv6 addresses: 948
Top 10 bandwidth usage (bytes/total in %):
97.9% 97.9% 0.6% 0.6% 0.2% 0.2% 0.2% 0.1% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200908031400.pktlen.png)
detailed numbers
[ 32- 63]: 5976191
[ 64- 127]: 4635558
[ 128- 255]: 1315150
[ 256- 511]: 777903
[ 512- 1023]: 809478
[ 1024- 2047]: 8698632
Protocol Breakdown
![[protocol breakdown chart]](200908031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22212912 (100.00%) 14395743858 (100.00%) 648.08
ip 21982503 ( 98.96%) 14116361822 ( 98.06%) 642.16
tcp 17831145 ( 80.27%) 13094691338 ( 90.96%) 734.37
http(s) 6531206 ( 29.40%) 8550859603 ( 59.40%) 1309.23
http(c) 3998686 ( 18.00%) 526733641 ( 3.66%) 131.73
squid 638748 ( 2.88%) 214924322 ( 1.49%) 336.48
smtp 325766 ( 1.47%) 114629318 ( 0.80%) 351.88
ftp 112070 ( 0.50%) 40305685 ( 0.28%) 359.65
pop3 23033 ( 0.10%) 10383233 ( 0.07%) 450.80
imap 2297 ( 0.01%) 367534 ( 0.00%) 160.01
telnet 1245 ( 0.01%) 149549 ( 0.00%) 120.12
ssh 484372 ( 2.18%) 64972105 ( 0.45%) 134.14
dns 5788 ( 0.03%) 6675141 ( 0.05%) 1153.27
bgp 141 ( 0.00%) 41473 ( 0.00%) 294.13
napster 929 ( 0.00%) 572186 ( 0.00%) 615.92
realaud 389 ( 0.00%) 44191 ( 0.00%) 113.60
rtsp 184433 ( 0.83%) 27684255 ( 0.19%) 150.10
icecast 4416 ( 0.02%) 1496997 ( 0.01%) 338.99
other 5517570 ( 24.84%) 3534798570 ( 24.55%) 640.64
udp 3408919 ( 15.35%) 953085740 ( 6.62%) 279.59
dns 1306761 ( 5.88%) 243142025 ( 1.69%) 186.06
realaud 2080 ( 0.01%) 215185 ( 0.00%) 103.45
halflif 97 ( 0.00%) 16398 ( 0.00%) 169.05
starcra 391 ( 0.00%) 78511 ( 0.00%) 200.80
everque 269 ( 0.00%) 64452 ( 0.00%) 239.60
unreal 119 ( 0.00%) 23163 ( 0.00%) 194.65
quake 50 ( 0.00%) 9022 ( 0.00%) 180.44
cuseeme 20 ( 0.00%) 4375 ( 0.00%) 218.75
other 2098673 ( 9.45%) 709383073 ( 4.93%) 338.02
icmp 670055 ( 3.02%) 53488408 ( 0.37%) 79.83
ipip 318 ( 0.00%) 39504 ( 0.00%) 124.23
ipsec 416 ( 0.00%) 85792 ( 0.00%) 206.23
ip6 21930 ( 0.10%) 4144968 ( 0.03%) 189.01
other 49720 ( 0.22%) 10826072 ( 0.08%) 217.74
frag 3773 ( 0.02%) 3457445 ( 0.02%) 916.36
ip6 230409 ( 1.04%) 279382036 ( 1.94%) 1212.55
tcp6 217759 ( 0.98%) 277040403 ( 1.92%) 1272.23
http(s) 858 ( 0.00%) 1133449 ( 0.01%) 1321.04
http(c) 2010 ( 0.01%) 184446 ( 0.00%) 91.76
smtp 1127 ( 0.01%) 570297 ( 0.00%) 506.03
dns 5 ( 0.00%) 1778 ( 0.00%) 355.60
bgp 410 ( 0.00%) 37277 ( 0.00%) 90.92
other 213349 ( 0.96%) 275113156 ( 1.91%) 1289.50
udp6 9446 ( 0.04%) 1951452 ( 0.01%) 206.59
dns 9405 ( 0.04%) 1944837 ( 0.01%) 206.79
starcra 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 39 ( 0.00%) 6404 ( 0.00%) 164.21
icmp6 3169 ( 0.01%) 381757 ( 0.00%) 120.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5 ( 0.00%) 4344 ( 0.00%) 868.80
tcpdump file: 200908031400.dump.gz (574.59 MB)