Traffic Trace Info
DumpFile: 200908131400.dump
FileSize: 1363.73MB
Id: 200908131400
StartTime: Thu Aug 13 14:00:01 2009
EndTime: Thu Aug 13 14:15:01 2009
TotalTime: 899.89 seconds
TotalCapSize: 1054.36MB CapLen: 96 bytes
# of packets: 20274440 (13014.01MB)
AvgRate: 121.30Mbps stddev:16.36M
IP flow (unique src/dst pair) Information
# of flows: 1087143 (avg. 18.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 3.4% 2.9% 2.2% 2.2% 1.7% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 624525
Top 10 bandwidth usage (bytes/total in %):
16.6% 12.8% 6.8% 4.9% 4.3% 3.9% 3.8% 3.7% 3.6% 3.4%
# of IPv6 addresses: 896
Top 10 bandwidth usage (bytes/total in %):
24.7% 13.8% 13.8% 8.5% 7.3% 6.3% 5.7% 5.6% 5.1% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200908131400.pktlen.png)
detailed numbers
[ 32- 63]: 4898476
[ 64- 127]: 4413385
[ 128- 255]: 1211345
[ 256- 511]: 663379
[ 512- 1023]: 564922
[ 1024- 2047]: 8522933
Protocol Breakdown
![[protocol breakdown chart]](200908131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20274440 (100.00%) 13646178627 (100.00%) 673.07
ip 20255943 ( 99.91%) 13641702343 ( 99.97%) 673.47
tcp 14910600 ( 73.54%) 11628952152 ( 85.22%) 779.91
http(s) 6043395 ( 29.81%) 7675151265 ( 56.24%) 1270.01
http(c) 2747815 ( 13.55%) 792450305 ( 5.81%) 288.39
squid 605884 ( 2.99%) 134194390 ( 0.98%) 221.49
smtp 271457 ( 1.34%) 37515481 ( 0.27%) 138.20
nntp 22 ( 0.00%) 1396 ( 0.00%) 63.45
ftp 44725 ( 0.22%) 5329982 ( 0.04%) 119.17
pop3 10584 ( 0.05%) 3683749 ( 0.03%) 348.05
imap 2193 ( 0.01%) 308106 ( 0.00%) 140.50
telnet 884 ( 0.00%) 60677 ( 0.00%) 68.64
ssh 271083 ( 1.34%) 302672880 ( 2.22%) 1116.53
dns 6014 ( 0.03%) 6753561 ( 0.05%) 1122.97
bgp 170 ( 0.00%) 73797 ( 0.00%) 434.10
napster 1883 ( 0.01%) 174791 ( 0.00%) 92.83
realaud 206 ( 0.00%) 23562 ( 0.00%) 114.38
rtsp 76117 ( 0.38%) 66367572 ( 0.49%) 871.92
icecast 10034 ( 0.05%) 5974221 ( 0.04%) 595.40
hotline 11 ( 0.00%) 914 ( 0.00%) 83.09
other 4818078 ( 23.76%) 2598212803 ( 19.04%) 539.26
udp 4876184 ( 24.05%) 1963734216 ( 14.39%) 402.72
dns 1498569 ( 7.39%) 252776183 ( 1.85%) 168.68
realaud 68 ( 0.00%) 9454 ( 0.00%) 139.03
halflif 154 ( 0.00%) 17524 ( 0.00%) 113.79
starcra 248 ( 0.00%) 49089 ( 0.00%) 197.94
everque 265 ( 0.00%) 53253 ( 0.00%) 200.95
unreal 83 ( 0.00%) 13311 ( 0.00%) 160.37
quake 55 ( 0.00%) 6170 ( 0.00%) 112.18
cuseeme 19 ( 0.00%) 2993 ( 0.00%) 157.53
other 3375889 ( 16.65%) 1710571152 ( 12.54%) 506.70
icmp 405584 ( 2.00%) 35210323 ( 0.26%) 86.81
ipip 314 ( 0.00%) 39464 ( 0.00%) 125.68
ipsec 62 ( 0.00%) 9796 ( 0.00%) 158.00
ip6 12077 ( 0.06%) 3315152 ( 0.02%) 274.50
other 51122 ( 0.25%) 10441240 ( 0.08%) 204.24
frag 5857 ( 0.03%) 4585103 ( 0.03%) 782.84
ip6 18497 ( 0.09%) 4476284 ( 0.03%) 242.00
tcp6 5224 ( 0.03%) 1989024 ( 0.01%) 380.75
http(s) 492 ( 0.00%) 635234 ( 0.00%) 1291.13
http(c) 1735 ( 0.01%) 163289 ( 0.00%) 94.11
smtp 2163 ( 0.01%) 1111595 ( 0.01%) 513.91
dns 9 ( 0.00%) 1008 ( 0.00%) 112.00
bgp 103 ( 0.00%) 12714 ( 0.00%) 123.44
other 722 ( 0.00%) 65184 ( 0.00%) 90.28
udp6 10270 ( 0.05%) 2109221 ( 0.02%) 205.38
dns 10252 ( 0.05%) 2107241 ( 0.02%) 205.54
other 18 ( 0.00%) 1980 ( 0.00%) 110.00
icmp6 2946 ( 0.01%) 342842 ( 0.00%) 116.38
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 27 ( 0.00%) 31117 ( 0.00%) 1152.48
tcpdump file: 200908131400.dump.gz (510.21 MB)