Traffic Trace Info
DumpFile: 200908121400.dump
FileSize: 1431.98MB
Id: 200908121400
StartTime: Wed Aug 12 14:00:00 2009
EndTime: Wed Aug 12 14:15:01 2009
TotalTime: 900.50 seconds
TotalCapSize: 1110.99MB CapLen: 96 bytes
# of packets: 21035450 (13448.03MB)
AvgRate: 125.28Mbps stddev:12.69M
IP flow (unique src/dst pair) Information
# of flows: 1341779 (avg. 15.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 1.2% 1.2% 1.1% 1.1% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 785831
Top 10 bandwidth usage (bytes/total in %):
14.8% 8.6% 8.5% 6.3% 5.0% 4.9% 4.3% 3.1% 2.7% 2.4%
# of IPv6 addresses: 963
Top 10 bandwidth usage (bytes/total in %):
61.8% 60.6% 8.6% 8.6% 6.0% 5.1% 5.1% 4.2% 2.7% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200908121400.pktlen.png)
detailed numbers
[ 32- 63]: 5084449
[ 64- 127]: 4578047
[ 128- 255]: 1288324
[ 256- 511]: 727465
[ 512- 1023]: 624230
[ 1024- 2047]: 8732935
Protocol Breakdown
![[protocol breakdown chart]](200908121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21035450 (100.00%) 14101284025 (100.00%) 670.36
ip 20990192 ( 99.78%) 14078022637 ( 99.84%) 670.70
tcp 15781482 ( 75.02%) 12360904251 ( 87.66%) 783.25
http(s) 6273436 ( 29.82%) 8230655682 ( 58.37%) 1311.99
http(c) 2878642 ( 13.68%) 496386224 ( 3.52%) 172.44
squid 668212 ( 3.18%) 226548761 ( 1.61%) 339.04
smtp 230622 ( 1.10%) 45491633 ( 0.32%) 197.26
nntp 9 ( 0.00%) 558 ( 0.00%) 62.00
ftp 39929 ( 0.19%) 12632150 ( 0.09%) 316.37
pop3 9578 ( 0.05%) 4807308 ( 0.03%) 501.91
imap 1444 ( 0.01%) 254330 ( 0.00%) 176.13
telnet 256 ( 0.00%) 31350 ( 0.00%) 122.46
ssh 31263 ( 0.15%) 9007422 ( 0.06%) 288.12
dns 5937 ( 0.03%) 6724293 ( 0.05%) 1132.61
bgp 195 ( 0.00%) 77246 ( 0.00%) 396.13
napster 199 ( 0.00%) 30234 ( 0.00%) 151.93
realaud 549 ( 0.00%) 62955 ( 0.00%) 114.67
rtsp 81046 ( 0.39%) 23049244 ( 0.16%) 284.40
icecast 13311 ( 0.06%) 8132844 ( 0.06%) 610.99
other 5546733 ( 26.37%) 3297004625 ( 23.38%) 594.40
udp 4516938 ( 21.47%) 1639612086 ( 11.63%) 362.99
dns 1422918 ( 6.76%) 246597959 ( 1.75%) 173.30
realaud 2386 ( 0.01%) 530980 ( 0.00%) 222.54
halflif 151 ( 0.00%) 21375 ( 0.00%) 141.56
starcra 412 ( 0.00%) 88236 ( 0.00%) 214.17
everque 305 ( 0.00%) 58896 ( 0.00%) 193.10
unreal 118 ( 0.00%) 22630 ( 0.00%) 191.78
quake 267 ( 0.00%) 30941 ( 0.00%) 115.88
cuseeme 15 ( 0.00%) 2441 ( 0.00%) 162.73
other 3089852 ( 14.69%) 1392034549 ( 9.87%) 450.52
icmp 591285 ( 2.81%) 47597286 ( 0.34%) 80.50
ipip 297 ( 0.00%) 35422 ( 0.00%) 119.27
ipsec 62 ( 0.00%) 9796 ( 0.00%) 158.00
ip6 11806 ( 0.06%) 2509698 ( 0.02%) 212.58
other 88322 ( 0.42%) 27354098 ( 0.19%) 309.71
frag 10664 ( 0.05%) 6768112 ( 0.05%) 634.67
ip6 45258 ( 0.22%) 23261388 ( 0.16%) 513.97
tcp6 29951 ( 0.14%) 20434554 ( 0.14%) 682.27
http(s) 1441 ( 0.01%) 1370505 ( 0.01%) 951.08
http(c) 2066 ( 0.01%) 194306 ( 0.00%) 94.05
smtp 2804 ( 0.01%) 1432288 ( 0.01%) 510.80
ftp 94 ( 0.00%) 11161 ( 0.00%) 118.73
ssh 12027 ( 0.06%) 1999822 ( 0.01%) 166.28
dns 10 ( 0.00%) 1164 ( 0.00%) 116.40
bgp 93 ( 0.00%) 14564 ( 0.00%) 156.60
other 11416 ( 0.05%) 15410744 ( 0.11%) 1349.93
udp6 11978 ( 0.06%) 2388956 ( 0.02%) 199.45
dns 11957 ( 0.06%) 2384014 ( 0.02%) 199.38
other 21 ( 0.00%) 4942 ( 0.00%) 235.33
icmp6 3253 ( 0.02%) 390815 ( 0.00%) 120.14
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 45 ( 0.00%) 42847 ( 0.00%) 952.16
tcpdump file: 200908121400.dump.gz (529.35 MB)