Traffic Trace Info
DumpFile: 200908051400.dump
FileSize: 1415.51MB
Id: 200908051400
StartTime: Wed Aug 5 14:00:00 2009
EndTime: Wed Aug 5 14:15:00 2009
TotalTime: 900.29 seconds
TotalCapSize: 1099.81MB CapLen: 96 bytes
# of packets: 20689000 (12656.72MB)
AvgRate: 117.91Mbps stddev:12.35M
IP flow (unique src/dst pair) Information
# of flows: 1279552 (avg. 16.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.1% 1.2% 1.2% 1.1% 1.1% 1.0% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 763160
Top 10 bandwidth usage (bytes/total in %):
14.5% 9.0% 4.9% 4.6% 4.1% 3.7% 3.0% 2.6% 2.2% 2.1%
# of IPv6 addresses: 985
Top 10 bandwidth usage (bytes/total in %):
20.7% 20.7% 15.0% 12.0% 11.8% 7.2% 6.6% 4.8% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200908051400.pktlen.png)
detailed numbers
[ 32- 63]: 5539784
[ 64- 127]: 4215460
[ 128- 255]: 1398495
[ 256- 511]: 811921
[ 512- 1023]: 760046
[ 1024- 2047]: 7963294
Protocol Breakdown
![[protocol breakdown chart]](200908051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20689000 (100.00%) 13271533364 (100.00%) 641.48
ip 20662189 ( 99.87%) 13263584036 ( 99.94%) 641.93
tcp 15939825 ( 77.04%) 11953222207 ( 90.07%) 749.90
http(s) 5901717 ( 28.53%) 7669781117 ( 57.79%) 1299.58
http(c) 3642070 ( 17.60%) 466712480 ( 3.52%) 128.14
squid 621997 ( 3.01%) 360808761 ( 2.72%) 580.08
smtp 278985 ( 1.35%) 63647090 ( 0.48%) 228.14
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 35279 ( 0.17%) 16362425 ( 0.12%) 463.80
pop3 15253 ( 0.07%) 4853969 ( 0.04%) 318.23
imap 7252 ( 0.04%) 1966215 ( 0.01%) 271.13
telnet 1311 ( 0.01%) 412803 ( 0.00%) 314.88
ssh 38916 ( 0.19%) 24255814 ( 0.18%) 623.29
dns 6164 ( 0.03%) 6753966 ( 0.05%) 1095.71
bgp 151 ( 0.00%) 58039 ( 0.00%) 384.36
napster 159 ( 0.00%) 24198 ( 0.00%) 152.19
realaud 289 ( 0.00%) 33926 ( 0.00%) 117.39
rtsp 314004 ( 1.52%) 73857056 ( 0.56%) 235.21
icecast 17216 ( 0.08%) 10361513 ( 0.08%) 601.85
hotline 37 ( 0.00%) 2577 ( 0.00%) 69.65
other 5058770 ( 24.45%) 3253314958 ( 24.51%) 643.10
udp 4002989 ( 19.35%) 1247964354 ( 9.40%) 311.76
dns 1261042 ( 6.10%) 233669884 ( 1.76%) 185.30
realaud 1061 ( 0.01%) 75797 ( 0.00%) 71.44
halflif 133 ( 0.00%) 22130 ( 0.00%) 166.39
starcra 450 ( 0.00%) 108067 ( 0.00%) 240.15
everque 393 ( 0.00%) 91826 ( 0.00%) 233.65
unreal 57 ( 0.00%) 11086 ( 0.00%) 194.49
quake 34 ( 0.00%) 4594 ( 0.00%) 135.12
cuseeme 8 ( 0.00%) 1116 ( 0.00%) 139.50
other 2738531 ( 13.24%) 1013568136 ( 7.64%) 370.11
icmp 678711 ( 3.28%) 54530814 ( 0.41%) 80.34
ipip 340 ( 0.00%) 41646 ( 0.00%) 122.49
ipsec 79 ( 0.00%) 11762 ( 0.00%) 148.89
ip6 19135 ( 0.09%) 3466859 ( 0.03%) 181.18
other 21110 ( 0.10%) 4346394 ( 0.03%) 205.89
frag 9192 ( 0.04%) 8395524 ( 0.06%) 913.35
ip6 26811 ( 0.13%) 7949328 ( 0.06%) 296.50
tcp6 10454 ( 0.05%) 4212196 ( 0.03%) 402.93
http(s) 336 ( 0.00%) 411169 ( 0.00%) 1223.72
http(c) 2167 ( 0.01%) 200665 ( 0.00%) 92.60
squid 1 ( 0.00%) 74 ( 0.00%) 74.00
smtp 1989 ( 0.01%) 996960 ( 0.01%) 501.24
dns 17 ( 0.00%) 2216 ( 0.00%) 130.35
bgp 106 ( 0.00%) 13760 ( 0.00%) 129.81
other 5838 ( 0.03%) 2587352 ( 0.02%) 443.19
udp6 11459 ( 0.06%) 2290462 ( 0.02%) 199.88
dns 11387 ( 0.06%) 2277269 ( 0.02%) 199.99
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
other 71 ( 0.00%) 13085 ( 0.00%) 184.30
icmp6 4844 ( 0.02%) 1426852 ( 0.01%) 294.56
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 24 ( 0.00%) 15738 ( 0.00%) 655.75
tcpdump file: 200908051400.dump.gz (527.36 MB)