Traffic Trace Info
DumpFile: 200908231400.dump
FileSize: 1626.18MB
Id: 200908231400
StartTime: Sun Aug 23 14:00:01 2009
EndTime: Sun Aug 23 14:15:00 2009
TotalTime: 899.45 seconds
TotalCapSize: 1256.78MB CapLen: 96 bytes
# of packets: 24208212 (14916.70MB)
AvgRate: 139.12Mbps stddev:12.47M
IP flow (unique src/dst pair) Information
# of flows: 1290812 (avg. 18.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 3.6% 1.6% 1.2% 0.9% 0.9% 0.8% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 763103
Top 10 bandwidth usage (bytes/total in %):
19.1% 13.9% 12.2% 6.3% 5.0% 3.7% 3.6% 3.2% 2.4% 2.3%
# of IPv6 addresses: 780
Top 10 bandwidth usage (bytes/total in %):
18.2% 17.5% 13.7% 8.9% 8.6% 6.1% 5.5% 4.9% 4.5% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200908231400.pktlen.png)
detailed numbers
[ 32- 63]: 5745157
[ 64- 127]: 6229271
[ 128- 255]: 1161416
[ 256- 511]: 699000
[ 512- 1023]: 646280
[ 1024- 2047]: 9727088
Protocol Breakdown
![[protocol breakdown chart]](200908231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24208212 (100.00%) 15641290151 (100.00%) 646.12
ip 24191654 ( 99.93%) 15637654959 ( 99.98%) 646.41
tcp 17101888 ( 70.64%) 12935321336 ( 82.70%) 756.37
http(s) 6736717 ( 27.83%) 8231812650 ( 52.63%) 1221.93
http(c) 2446418 ( 10.11%) 314024815 ( 2.01%) 128.36
squid 721323 ( 2.98%) 174785618 ( 1.12%) 242.31
smtp 191447 ( 0.79%) 27705718 ( 0.18%) 144.72
nntp 7 ( 0.00%) 461 ( 0.00%) 65.86
ftp 17665 ( 0.07%) 1975738 ( 0.01%) 111.84
pop3 5970 ( 0.02%) 3565851 ( 0.02%) 597.29
imap 698 ( 0.00%) 398173 ( 0.00%) 570.45
telnet 529 ( 0.00%) 36376 ( 0.00%) 68.76
ssh 83907 ( 0.35%) 6813125 ( 0.04%) 81.20
dns 9299 ( 0.04%) 6918608 ( 0.04%) 744.02
bgp 140 ( 0.00%) 50469 ( 0.00%) 360.49
napster 202 ( 0.00%) 56495 ( 0.00%) 279.68
realaud 109 ( 0.00%) 14178 ( 0.00%) 130.07
rtsp 91257 ( 0.38%) 127587869 ( 0.82%) 1398.12
icecast 45278 ( 0.19%) 39301082 ( 0.25%) 868.00
hotline 49 ( 0.00%) 13420 ( 0.00%) 273.88
other 6750658 ( 27.89%) 4000246336 ( 25.57%) 592.57
udp 6109981 ( 25.24%) 2596732913 ( 16.60%) 425.00
dns 961782 ( 3.97%) 160775756 ( 1.03%) 167.16
realaud 117 ( 0.00%) 19262 ( 0.00%) 164.63
halflif 94 ( 0.00%) 15880 ( 0.00%) 168.94
starcra 6467 ( 0.03%) 471626 ( 0.00%) 72.93
everque 1126 ( 0.00%) 754253 ( 0.00%) 669.85
unreal 123 ( 0.00%) 24758 ( 0.00%) 201.28
quake 2013 ( 0.01%) 1327173 ( 0.01%) 659.30
cuseeme 20 ( 0.00%) 3774 ( 0.00%) 188.70
other 5135957 ( 21.22%) 2432344776 ( 15.55%) 473.59
icmp 930099 ( 3.84%) 92521941 ( 0.59%) 99.48
ipip 334 ( 0.00%) 41836 ( 0.00%) 125.26
ipsec 60 ( 0.00%) 9480 ( 0.00%) 158.00
ip6 15824 ( 0.07%) 5479444 ( 0.04%) 346.27
other 33468 ( 0.14%) 7548009 ( 0.05%) 225.53
frag 15571 ( 0.06%) 15143618 ( 0.10%) 972.55
ip6 16558 ( 0.07%) 3635192 ( 0.02%) 219.54
tcp6 4688 ( 0.02%) 1556150 ( 0.01%) 331.94
http(s) 1108 ( 0.00%) 768369 ( 0.00%) 693.47
http(c) 1876 ( 0.01%) 175956 ( 0.00%) 93.79
smtp 1067 ( 0.00%) 544615 ( 0.00%) 510.42
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 8 ( 0.00%) 1847 ( 0.00%) 230.88
bgp 121 ( 0.00%) 17498 ( 0.00%) 144.61
other 507 ( 0.00%) 47791 ( 0.00%) 94.26
udp6 8022 ( 0.03%) 1595721 ( 0.01%) 198.92
dns 7991 ( 0.03%) 1592304 ( 0.01%) 199.26
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
other 30 ( 0.00%) 3300 ( 0.00%) 110.00
icmp6 3780 ( 0.02%) 448150 ( 0.00%) 118.56
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 38 ( 0.00%) 31091 ( 0.00%) 818.18
tcpdump file: 200908231400.dump.gz (590.35 MB)