Traffic Trace Info
DumpFile: 200908101400.dump
FileSize: 1448.99MB
Id: 200908101400
StartTime: Mon Aug 10 14:00:00 2009
EndTime: Mon Aug 10 14:15:00 2009
TotalTime: 899.88 seconds
TotalCapSize: 1125.08MB CapLen: 96 bytes
# of packets: 21227060 (12220.95MB)
AvgRate: 113.93Mbps stddev:15.17M
IP flow (unique src/dst pair) Information
# of flows: 1275232 (avg. 16.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.5% 1.3% 1.2% 1.2% 1.2% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 762698
Top 10 bandwidth usage (bytes/total in %):
13.5% 6.9% 5.2% 5.0% 4.9% 3.8% 3.4% 3.0% 3.0% 2.6%
# of IPv6 addresses: 940
Top 10 bandwidth usage (bytes/total in %):
29.8% 29.8% 10.2% 6.5% 5.6% 5.6% 4.9% 3.9% 3.9% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200908101400.pktlen.png)
detailed numbers
[ 32- 63]: 5653853
[ 64- 127]: 5140075
[ 128- 255]: 1212290
[ 256- 511]: 848762
[ 512- 1023]: 498751
[ 1024- 2047]: 7873329
Protocol Breakdown
![[protocol breakdown chart]](200908101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21227060 (100.00%) 12814598038 (100.00%) 603.69
ip 21206190 ( 99.90%) 12808952559 ( 99.96%) 604.02
tcp 15473400 ( 72.89%) 10618601541 ( 82.86%) 686.25
http(s) 5434662 ( 25.60%) 6967640650 ( 54.37%) 1282.07
http(c) 3250235 ( 15.31%) 352061980 ( 2.75%) 108.32
squid 571141 ( 2.69%) 179814102 ( 1.40%) 314.83
smtp 240811 ( 1.13%) 65604631 ( 0.51%) 272.43
ftp 56315 ( 0.27%) 10728960 ( 0.08%) 190.52
pop3 8363 ( 0.04%) 2985019 ( 0.02%) 356.93
imap 2070 ( 0.01%) 605995 ( 0.00%) 292.75
telnet 645 ( 0.00%) 67486 ( 0.00%) 104.63
ssh 64802 ( 0.31%) 11886993 ( 0.09%) 183.44
dns 5813 ( 0.03%) 6723371 ( 0.05%) 1156.61
bgp 171 ( 0.00%) 74521 ( 0.00%) 435.80
napster 71672 ( 0.34%) 57685083 ( 0.45%) 804.85
realaud 468 ( 0.00%) 68314 ( 0.00%) 145.97
rtsp 24342 ( 0.11%) 2569565 ( 0.02%) 105.56
icecast 17264 ( 0.08%) 8973580 ( 0.07%) 519.79
other 5724613 ( 26.97%) 2951095971 ( 23.03%) 515.51
udp 4978507 ( 23.45%) 2115344081 ( 16.51%) 424.90
dns 1358823 ( 6.40%) 242212986 ( 1.89%) 178.25
realaud 1006 ( 0.00%) 69773 ( 0.00%) 69.36
halflif 855 ( 0.00%) 254422 ( 0.00%) 297.57
starcra 348 ( 0.00%) 66888 ( 0.00%) 192.21
everque 233 ( 0.00%) 46782 ( 0.00%) 200.78
unreal 366 ( 0.00%) 118197 ( 0.00%) 322.94
quake 43 ( 0.00%) 5968 ( 0.00%) 138.79
cuseeme 18 ( 0.00%) 3280 ( 0.00%) 182.22
other 3615627 ( 17.03%) 1872324034 ( 14.61%) 517.84
icmp 720691 ( 3.40%) 57466829 ( 0.45%) 79.74
ipip 318 ( 0.00%) 40176 ( 0.00%) 126.34
ipsec 62 ( 0.00%) 9796 ( 0.00%) 158.00
ip6 14053 ( 0.07%) 4352053 ( 0.03%) 309.69
other 19159 ( 0.09%) 13138083 ( 0.10%) 685.74
frag 10688 ( 0.05%) 11003327 ( 0.09%) 1029.50
ip6 20868 ( 0.10%) 5645359 ( 0.04%) 270.53
tcp6 8257 ( 0.04%) 3372788 ( 0.03%) 408.48
http(s) 423 ( 0.00%) 534412 ( 0.00%) 1263.39
http(c) 4275 ( 0.02%) 444386 ( 0.00%) 103.95
squid 14 ( 0.00%) 5952 ( 0.00%) 425.14
smtp 1221 ( 0.01%) 593653 ( 0.00%) 486.20
ssh 24 ( 0.00%) 10160 ( 0.00%) 423.33
bgp 84 ( 0.00%) 9768 ( 0.00%) 116.29
other 2216 ( 0.01%) 1774457 ( 0.01%) 800.75
udp6 9489 ( 0.04%) 1896689 ( 0.01%) 199.88
dns 9429 ( 0.04%) 1890305 ( 0.01%) 200.48
other 60 ( 0.00%) 6384 ( 0.00%) 106.40
icmp6 3083 ( 0.01%) 362702 ( 0.00%) 117.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 9 ( 0.00%) 9100 ( 0.00%) 1011.11
tcpdump file: 200908101400.dump.gz (546.56 MB)