Traffic Trace Info
DumpFile: 200908111400.dump
FileSize: 1522.82MB
Id: 200908111400
StartTime: Tue Aug 11 14:00:01 2009
EndTime: Tue Aug 11 14:15:01 2009
TotalTime: 899.76 seconds
TotalCapSize: 1185.04MB CapLen: 96 bytes
# of packets: 22135570 (13841.02MB)
AvgRate: 129.06Mbps stddev:14.04M
IP flow (unique src/dst pair) Information
# of flows: 1205017 (avg. 18.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 2.3% 1.4% 1.2% 1.2% 1.1% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 692503
Top 10 bandwidth usage (bytes/total in %):
17.3% 6.8% 6.7% 6.4% 5.4% 4.8% 4.7% 2.7% 2.4% 2.3%
# of IPv6 addresses: 957
Top 10 bandwidth usage (bytes/total in %):
13.1% 11.5% 9.9% 7.7% 7.7% 5.7% 5.6% 5.1% 4.9% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200908111400.pktlen.png)
detailed numbers
[ 32- 63]: 5126829
[ 64- 127]: 5442910
[ 128- 255]: 1304018
[ 256- 511]: 685885
[ 512- 1023]: 636224
[ 1024- 2047]: 8939704
Protocol Breakdown
![[protocol breakdown chart]](200908111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22135570 (100.00%) 14513357904 (100.00%) 655.66
ip 22114891 ( 99.91%) 14509180891 ( 99.97%) 656.08
tcp 17010138 ( 76.85%) 12852716613 ( 88.56%) 755.59
http(s) 6694423 ( 30.24%) 8903226951 ( 61.35%) 1329.95
http(c) 2958919 ( 13.37%) 353388443 ( 2.43%) 119.43
squid 868290 ( 3.92%) 207701918 ( 1.43%) 239.21
smtp 267432 ( 1.21%) 60947639 ( 0.42%) 227.90
ftp 48617 ( 0.22%) 9930570 ( 0.07%) 204.26
pop3 13766 ( 0.06%) 9043978 ( 0.06%) 656.98
imap 2442 ( 0.01%) 591576 ( 0.00%) 242.25
telnet 630 ( 0.00%) 337429 ( 0.00%) 535.60
ssh 362379 ( 1.64%) 57672449 ( 0.40%) 159.15
dns 6709 ( 0.03%) 6787824 ( 0.05%) 1011.75
bgp 171 ( 0.00%) 75777 ( 0.00%) 443.14
napster 4311 ( 0.02%) 342545 ( 0.00%) 79.46
realaud 297 ( 0.00%) 33076 ( 0.00%) 111.37
rtsp 88974 ( 0.40%) 63146907 ( 0.44%) 709.72
icecast 60068 ( 0.27%) 51991588 ( 0.36%) 865.55
hotline 4 ( 0.00%) 246 ( 0.00%) 61.50
other 5632655 ( 25.45%) 3127480097 ( 21.55%) 555.24
udp 4473842 ( 20.21%) 1602993810 ( 11.04%) 358.30
dns 1808707 ( 8.17%) 290730133 ( 2.00%) 160.74
rip 2 ( 0.00%) 496 ( 0.00%) 248.00
realaud 1948 ( 0.01%) 127621 ( 0.00%) 65.51
halflif 267 ( 0.00%) 23478 ( 0.00%) 87.93
starcra 591 ( 0.00%) 65273 ( 0.00%) 110.45
everque 297 ( 0.00%) 55830 ( 0.00%) 187.98
unreal 68 ( 0.00%) 12144 ( 0.00%) 178.59
quake 43 ( 0.00%) 6584 ( 0.00%) 153.12
cuseeme 13 ( 0.00%) 1752 ( 0.00%) 134.77
other 2661539 ( 12.02%) 1311737544 ( 9.04%) 492.85
icmp 611607 ( 2.76%) 48375329 ( 0.33%) 79.10
ipip 281 ( 0.00%) 35102 ( 0.00%) 124.92
ipsec 62 ( 0.00%) 9796 ( 0.00%) 158.00
ip6 13311 ( 0.06%) 3840942 ( 0.03%) 288.55
other 5650 ( 0.03%) 1209299 ( 0.01%) 214.04
frag 3751 ( 0.02%) 3532862 ( 0.02%) 941.85
ip6 20677 ( 0.09%) 4176893 ( 0.03%) 202.01
tcp6 4190 ( 0.02%) 1086826 ( 0.01%) 259.39
http(s) 210 ( 0.00%) 230342 ( 0.00%) 1096.87
http(c) 1809 ( 0.01%) 167227 ( 0.00%) 92.44
smtp 1105 ( 0.00%) 543014 ( 0.00%) 491.42
ssh 58 ( 0.00%) 6508 ( 0.00%) 112.21
bgp 67 ( 0.00%) 7156 ( 0.00%) 106.81
other 941 ( 0.00%) 132579 ( 0.00%) 140.89
udp6 13104 ( 0.06%) 2680935 ( 0.02%) 204.59
dns 13051 ( 0.06%) 2675105 ( 0.02%) 204.97
other 53 ( 0.00%) 5830 ( 0.00%) 110.00
icmp6 3338 ( 0.02%) 392107 ( 0.00%) 117.47
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 14 ( 0.00%) 12809 ( 0.00%) 914.93
tcpdump file: 200908111400.dump.gz (570.79 MB)