Traffic Trace Info
DumpFile: 200908201400.dump
FileSize: 1921.21MB
Id: 200908201400
StartTime: Thu Aug 20 14:00:00 2009
EndTime: Thu Aug 20 14:15:01 2009
TotalTime: 900.41 seconds
TotalCapSize: 1496.89MB CapLen: 96 bytes
# of packets: 27807706 (17737.26MB)
AvgRate: 165.25Mbps stddev:15.66M
IP flow (unique src/dst pair) Information
# of flows: 1257450 (avg. 22.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.3% 1.3% 1.1% 1.1% 1.1% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 725130
Top 10 bandwidth usage (bytes/total in %):
15.8% 11.9% 11.5% 4.4% 4.0% 2.7% 2.7% 2.5% 1.9% 1.8%
# of IPv6 addresses: 955
Top 10 bandwidth usage (bytes/total in %):
20.1% 19.5% 14.5% 7.9% 5.9% 5.6% 5.5% 5.2% 4.6% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200908201400.pktlen.png)
detailed numbers
[ 32- 63]: 6556289
[ 64- 127]: 7142064
[ 128- 255]: 1099720
[ 256- 511]: 820449
[ 512- 1023]: 801464
[ 1024- 2047]: 11387720
Protocol Breakdown
![[protocol breakdown chart]](200908201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27807706 (100.00%) 18598868503 (100.00%) 668.84
ip 27788195 ( 99.93%) 18593956439 ( 99.97%) 669.13
tcp 22040350 ( 79.26%) 16607861687 ( 89.30%) 753.52
http(s) 8393147 ( 30.18%) 10674490634 ( 57.39%) 1271.81
http(c) 5100597 ( 18.34%) 938595169 ( 5.05%) 184.02
squid 884274 ( 3.18%) 192299803 ( 1.03%) 217.47
smtp 264199 ( 0.95%) 89000320 ( 0.48%) 336.87
ftp 37345 ( 0.13%) 7795007 ( 0.04%) 208.73
pop3 23865 ( 0.09%) 5388026 ( 0.03%) 225.77
imap 1242 ( 0.00%) 255928 ( 0.00%) 206.06
telnet 785 ( 0.00%) 150669 ( 0.00%) 191.94
ssh 6749 ( 0.02%) 1417214 ( 0.01%) 209.99
dns 7939 ( 0.03%) 6846577 ( 0.04%) 862.40
bgp 5550 ( 0.02%) 4622251 ( 0.02%) 832.84
napster 949 ( 0.00%) 591547 ( 0.00%) 623.34
realaud 1779 ( 0.01%) 291824 ( 0.00%) 164.04
rtsp 323937 ( 1.16%) 122600823 ( 0.66%) 378.47
icecast 26520 ( 0.10%) 23392044 ( 0.13%) 882.05
hotline 5 ( 0.00%) 653 ( 0.00%) 130.60
other 6961462 ( 25.03%) 4540122838 ( 24.41%) 652.18
udp 4862235 ( 17.49%) 1902331472 ( 10.23%) 391.25
dns 1131105 ( 4.07%) 219586322 ( 1.18%) 194.13
realaud 194 ( 0.00%) 20433 ( 0.00%) 105.32
halflif 82 ( 0.00%) 10015 ( 0.00%) 122.13
starcra 250 ( 0.00%) 43480 ( 0.00%) 173.92
everque 238 ( 0.00%) 52328 ( 0.00%) 219.87
unreal 68 ( 0.00%) 12865 ( 0.00%) 189.19
quake 57 ( 0.00%) 9264 ( 0.00%) 162.53
cuseeme 17 ( 0.00%) 2532 ( 0.00%) 148.94
other 3728969 ( 13.41%) 1682258341 ( 9.04%) 451.13
icmp 795596 ( 2.86%) 63772104 ( 0.34%) 80.16
ipip 330 ( 0.00%) 38626 ( 0.00%) 117.05
ipsec 62 ( 0.00%) 9796 ( 0.00%) 158.00
ip6 15034 ( 0.05%) 4946429 ( 0.03%) 329.02
other 74588 ( 0.27%) 14996325 ( 0.08%) 201.06
frag 15146 ( 0.05%) 16526683 ( 0.09%) 1091.16
ip6 19511 ( 0.07%) 4912064 ( 0.03%) 251.76
tcp6 4487 ( 0.02%) 2133302 ( 0.01%) 475.44
http(s) 822 ( 0.00%) 1161184 ( 0.01%) 1412.63
http(c) 1265 ( 0.00%) 119035 ( 0.00%) 94.10
smtp 1643 ( 0.01%) 767976 ( 0.00%) 467.42
ssh 7 ( 0.00%) 698 ( 0.00%) 99.71
dns 13 ( 0.00%) 3987 ( 0.00%) 306.69
bgp 124 ( 0.00%) 19044 ( 0.00%) 153.58
napster 3 ( 0.00%) 254 ( 0.00%) 84.67
other 610 ( 0.00%) 61124 ( 0.00%) 100.20
udp6 11459 ( 0.04%) 2357628 ( 0.01%) 205.74
dns 11445 ( 0.04%) 2356088 ( 0.01%) 205.86
other 14 ( 0.00%) 1540 ( 0.00%) 110.00
icmp6 3522 ( 0.01%) 406241 ( 0.00%) 115.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13 ( 0.00%) 10813 ( 0.00%) 831.77
tcpdump file: 200908201400.dump.gz (715.49 MB)