Traffic Trace Info
DumpFile: 200908211400.dump
FileSize: 1673.00MB
Id: 200908211400
StartTime: Fri Aug 21 14:00:00 2009
EndTime: Fri Aug 21 14:15:01 2009
TotalTime: 900.75 seconds
TotalCapSize: 1299.31MB CapLen: 96 bytes
# of packets: 24489179 (14492.20MB)
AvgRate: 134.96Mbps stddev:13.47M
IP flow (unique src/dst pair) Information
# of flows: 1314018 (avg. 18.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.3% 1.1% 1.0% 1.0% 1.0% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 787962
Top 10 bandwidth usage (bytes/total in %):
19.8% 9.6% 6.4% 6.4% 3.2% 2.8% 2.5% 2.1% 1.9% 1.7%
# of IPv6 addresses: 891
Top 10 bandwidth usage (bytes/total in %):
54.0% 54.0% 9.9% 9.9% 4.9% 4.7% 3.5% 3.5% 3.5% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200908211400.pktlen.png)
detailed numbers
[ 32- 63]: 6983757
[ 64- 127]: 5329748
[ 128- 255]: 1317416
[ 256- 511]: 861799
[ 512- 1023]: 912385
[ 1024- 2047]: 9084074
Protocol Breakdown
![[protocol breakdown chart]](200908211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24489179 (100.00%) 15196176234 (100.00%) 620.53
ip 24459468 ( 99.88%) 15182412131 ( 99.91%) 620.72
tcp 19394810 ( 79.20%) 13430436307 ( 88.38%) 692.48
http(s) 7079264 ( 28.91%) 8890285936 ( 58.50%) 1255.82
http(c) 4410341 ( 18.01%) 816353064 ( 5.37%) 185.10
squid 979988 ( 4.00%) 245935454 ( 1.62%) 250.96
smtp 319702 ( 1.31%) 57516651 ( 0.38%) 179.91
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 44545 ( 0.18%) 21001338 ( 0.14%) 471.46
pop3 11153 ( 0.05%) 3084227 ( 0.02%) 276.54
imap 30364 ( 0.12%) 16337297 ( 0.11%) 538.05
telnet 320 ( 0.00%) 45904 ( 0.00%) 143.45
ssh 111736 ( 0.46%) 34639124 ( 0.23%) 310.01
dns 5393 ( 0.02%) 6699019 ( 0.04%) 1242.17
bgp 131 ( 0.00%) 45126 ( 0.00%) 344.47
napster 168 ( 0.00%) 12502 ( 0.00%) 74.42
realaud 826 ( 0.00%) 105717 ( 0.00%) 127.99
rtsp 187720 ( 0.77%) 22441994 ( 0.15%) 119.55
icecast 6288 ( 0.03%) 4642346 ( 0.03%) 738.29
hotline 57 ( 0.00%) 3955 ( 0.00%) 69.39
other 6206777 ( 25.34%) 3311240192 ( 21.79%) 533.49
udp 4263050 ( 17.41%) 1677591458 ( 11.04%) 393.52
dns 1087209 ( 4.44%) 212020042 ( 1.40%) 195.01
realaud 245 ( 0.00%) 33512 ( 0.00%) 136.78
halflif 111 ( 0.00%) 18841 ( 0.00%) 169.74
starcra 380 ( 0.00%) 73798 ( 0.00%) 194.21
everque 379 ( 0.00%) 65928 ( 0.00%) 173.95
unreal 197 ( 0.00%) 80618 ( 0.00%) 409.23
quake 47 ( 0.00%) 10606 ( 0.00%) 225.66
cuseeme 24 ( 0.00%) 5047 ( 0.00%) 210.29
other 3173181 ( 12.96%) 1464939309 ( 9.64%) 461.66
icmp 731648 ( 2.99%) 57993677 ( 0.38%) 79.26
ipip 319 ( 0.00%) 38712 ( 0.00%) 121.35
ipsec 64 ( 0.00%) 10112 ( 0.00%) 158.00
ip6 14578 ( 0.06%) 4250176 ( 0.03%) 291.55
other 54999 ( 0.22%) 12091689 ( 0.08%) 219.85
frag 6543 ( 0.03%) 5824815 ( 0.04%) 890.24
ip6 29711 ( 0.12%) 13764103 ( 0.09%) 463.27
tcp6 14189 ( 0.06%) 10922834 ( 0.07%) 769.81
http(s) 7128 ( 0.03%) 8321811 ( 0.05%) 1167.48
http(c) 2037 ( 0.01%) 208865 ( 0.00%) 102.54
smtp 1290 ( 0.01%) 466680 ( 0.00%) 361.77
ssh 1925 ( 0.01%) 487918 ( 0.00%) 253.46
dns 9 ( 0.00%) 1136 ( 0.00%) 126.22
bgp 128 ( 0.00%) 18370 ( 0.00%) 143.52
other 1672 ( 0.01%) 1418054 ( 0.01%) 848.12
udp6 10850 ( 0.04%) 2219587 ( 0.01%) 204.57
dns 10824 ( 0.04%) 2214935 ( 0.01%) 204.63
other 26 ( 0.00%) 4652 ( 0.00%) 178.92
icmp6 4631 ( 0.02%) 606986 ( 0.00%) 131.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 11 ( 0.00%) 10616 ( 0.00%) 965.09
tcpdump file: 200908211400.dump.gz (623.75 MB)