Traffic Trace Info
DumpFile: 200908081400.dump
FileSize: 1219.41MB
Id: 200908081400
StartTime: Sat Aug 8 14:00:00 2009
EndTime: Sat Aug 8 14:15:01 2009
TotalTime: 900.19 seconds
TotalCapSize: 942.78MB CapLen: 96 bytes
# of packets: 18128376 (10375.19MB)
AvgRate: 96.68Mbps stddev:23.37M
IP flow (unique src/dst pair) Information
# of flows: 1206054 (avg. 15.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.0% 2.0% 2.0% 1.4% 1.4% 1.1% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 732292
Top 10 bandwidth usage (bytes/total in %):
16.8% 7.6% 6.4% 4.4% 4.3% 4.2% 3.3% 2.8% 2.4% 2.4%
# of IPv6 addresses: 871
Top 10 bandwidth usage (bytes/total in %):
32.2% 32.2% 11.1% 8.9% 8.8% 6.8% 4.2% 3.6% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200908081400.pktlen.png)
detailed numbers
[ 32- 63]: 5259349
[ 64- 127]: 4029031
[ 128- 255]: 1108644
[ 256- 511]: 716889
[ 512- 1023]: 395864
[ 1024- 2047]: 6618599
Protocol Breakdown
![[protocol breakdown chart]](200908081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18128376 (100.00%) 10879172656 (100.00%) 600.12
ip 18106378 ( 99.88%) 10874042645 ( 99.95%) 600.56
tcp 12978444 ( 71.59%) 9211091834 ( 84.67%) 709.72
http(s) 4409716 ( 24.32%) 5898114526 ( 54.21%) 1337.53
http(c) 2278765 ( 12.57%) 234865352 ( 2.16%) 103.07
squid 827473 ( 4.56%) 285199469 ( 2.62%) 344.66
smtp 312016 ( 1.72%) 55384336 ( 0.51%) 177.50
ftp 41383 ( 0.23%) 23151762 ( 0.21%) 559.45
pop3 9221 ( 0.05%) 2886380 ( 0.03%) 313.02
imap 965 ( 0.01%) 100557 ( 0.00%) 104.20
telnet 944 ( 0.01%) 85832 ( 0.00%) 90.92
ssh 87741 ( 0.48%) 43283289 ( 0.40%) 493.31
dns 5532 ( 0.03%) 6667106 ( 0.06%) 1205.19
bgp 157 ( 0.00%) 51964 ( 0.00%) 330.98
napster 1106 ( 0.01%) 178993 ( 0.00%) 161.84
realaud 190 ( 0.00%) 19507 ( 0.00%) 102.67
rtsp 267930 ( 1.48%) 16574834 ( 0.15%) 61.86
icecast 7463 ( 0.04%) 567252 ( 0.01%) 76.01
hotline 8 ( 0.00%) 515 ( 0.00%) 64.38
other 4727723 ( 26.08%) 2643947684 ( 24.30%) 559.24
udp 4414419 ( 24.35%) 1599502960 ( 14.70%) 362.34
dns 1263881 ( 6.97%) 207805083 ( 1.91%) 164.42
rip 1 ( 0.00%) 140 ( 0.00%) 140.00
realaud 99 ( 0.00%) 22346 ( 0.00%) 225.72
halflif 131 ( 0.00%) 22110 ( 0.00%) 168.78
starcra 329 ( 0.00%) 68622 ( 0.00%) 208.58
everque 392 ( 0.00%) 114431 ( 0.00%) 291.92
unreal 95 ( 0.00%) 18094 ( 0.00%) 190.46
quake 52 ( 0.00%) 7043 ( 0.00%) 135.44
cuseeme 12 ( 0.00%) 1435 ( 0.00%) 119.58
other 3149083 ( 17.37%) 1391275734 ( 12.79%) 441.80
icmp 689557 ( 3.80%) 54320859 ( 0.50%) 78.78
ipip 292 ( 0.00%) 35968 ( 0.00%) 123.18
ipsec 64 ( 0.00%) 10112 ( 0.00%) 158.00
ip6 20740 ( 0.11%) 8526508 ( 0.08%) 411.11
other 2862 ( 0.02%) 554404 ( 0.01%) 193.71
frag 2590 ( 0.01%) 2483507 ( 0.02%) 958.88
ip6 21998 ( 0.12%) 5130011 ( 0.05%) 233.20
tcp6 10001 ( 0.06%) 3056732 ( 0.03%) 305.64
http(c) 1674 ( 0.01%) 155129 ( 0.00%) 92.67
smtp 1258 ( 0.01%) 616846 ( 0.01%) 490.34
ftp 2531 ( 0.01%) 260548 ( 0.00%) 102.94
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 6 ( 0.00%) 512 ( 0.00%) 85.33
bgp 127 ( 0.00%) 36219 ( 0.00%) 285.19
other 4404 ( 0.02%) 1987392 ( 0.02%) 451.27
udp6 8486 ( 0.05%) 1653993 ( 0.02%) 194.91
dns 8419 ( 0.05%) 1646623 ( 0.02%) 195.58
other 67 ( 0.00%) 7370 ( 0.00%) 110.00
icmp6 3468 ( 0.02%) 404657 ( 0.00%) 116.68
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13 ( 0.00%) 10549 ( 0.00%) 811.46
tcpdump file: 200908081400.dump.gz (459.49 MB)