Traffic Trace Info
DumpFile: 200908271400.dump
FileSize: 1687.32MB
Id: 200908271400
StartTime: Thu Aug 27 14:00:01 2009
EndTime: Thu Aug 27 14:15:00 2009
TotalTime: 899.44 seconds
TotalCapSize: 1306.56MB CapLen: 96 bytes
# of packets: 24953149 (14024.08MB)
AvgRate: 130.82Mbps stddev:12.48M
IP flow (unique src/dst pair) Information
# of flows: 1462208 (avg. 17.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.2% 1.0% 0.9% 0.9% 0.8% 0.8% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 885785
Top 10 bandwidth usage (bytes/total in %):
19.9% 8.8% 8.6% 5.0% 2.6% 2.5% 2.0% 1.9% 1.8% 1.7%
# of IPv6 addresses: 970
Top 10 bandwidth usage (bytes/total in %):
10.7% 9.4% 8.3% 7.9% 7.6% 5.4% 4.0% 3.9% 3.9% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200908271400.pktlen.png)
detailed numbers
[ 32- 63]: 6268306
[ 64- 127]: 6350815
[ 128- 255]: 1625376
[ 256- 511]: 994181
[ 512- 1023]: 999175
[ 1024- 2047]: 8715296
Protocol Breakdown
![[protocol breakdown chart]](200908271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24953149 (100.00%) 14705312804 (100.00%) 589.32
ip 24931774 ( 99.91%) 14701177743 ( 99.97%) 589.66
tcp 18000096 ( 72.14%) 11966364059 ( 81.37%) 664.79
http(s) 6335343 ( 25.39%) 8212694496 ( 55.85%) 1296.33
http(c) 4278326 ( 17.15%) 525227494 ( 3.57%) 122.76
squid 774419 ( 3.10%) 218436176 ( 1.49%) 282.06
smtp 293480 ( 1.18%) 69861634 ( 0.48%) 238.05
ftp 82171 ( 0.33%) 52970231 ( 0.36%) 644.63
pop3 20636 ( 0.08%) 4835080 ( 0.03%) 234.30
imap 2046 ( 0.01%) 1602653 ( 0.01%) 783.31
telnet 1025 ( 0.00%) 576603 ( 0.00%) 562.54
ssh 413186 ( 1.66%) 72274567 ( 0.49%) 174.92
dns 6528 ( 0.03%) 6791667 ( 0.05%) 1040.39
bgp 185 ( 0.00%) 85959 ( 0.00%) 464.64
napster 88 ( 0.00%) 9796 ( 0.00%) 111.32
realaud 512 ( 0.00%) 59878 ( 0.00%) 116.95
rtsp 113846 ( 0.46%) 43966659 ( 0.30%) 386.19
icecast 22634 ( 0.09%) 15883561 ( 0.11%) 701.76
other 5655451 ( 22.66%) 2740949983 ( 18.64%) 484.66
udp 6165460 ( 24.71%) 2661447005 ( 18.10%) 431.67
dns 1130654 ( 4.53%) 209957209 ( 1.43%) 185.70
realaud 757 ( 0.00%) 53439 ( 0.00%) 70.59
halflif 1564 ( 0.01%) 105923 ( 0.00%) 67.73
starcra 420 ( 0.00%) 87989 ( 0.00%) 209.50
everque 307 ( 0.00%) 56228 ( 0.00%) 183.15
unreal 125 ( 0.00%) 26390 ( 0.00%) 211.12
quake 81 ( 0.00%) 13476 ( 0.00%) 166.37
cuseeme 25 ( 0.00%) 4165 ( 0.00%) 166.60
other 5023220 ( 20.13%) 2450384061 ( 16.66%) 487.81
icmp 670632 ( 2.69%) 53653783 ( 0.36%) 80.00
ipip 321 ( 0.00%) 38442 ( 0.00%) 119.76
ipsec 107 ( 0.00%) 16906 ( 0.00%) 158.00
ip6 14912 ( 0.06%) 3805342 ( 0.03%) 255.19
other 80246 ( 0.32%) 15852206 ( 0.11%) 197.55
frag 22347 ( 0.09%) 17325602 ( 0.12%) 775.30
ip6 21375 ( 0.09%) 4135061 ( 0.03%) 193.45
tcp6 4796 ( 0.02%) 1062790 ( 0.01%) 221.60
http(s) 868 ( 0.00%) 320397 ( 0.00%) 369.12
http(c) 1677 ( 0.01%) 155598 ( 0.00%) 92.78
smtp 1074 ( 0.00%) 473682 ( 0.00%) 441.04
dns 11 ( 0.00%) 1412 ( 0.00%) 128.36
bgp 114 ( 0.00%) 15299 ( 0.00%) 134.20
other 1052 ( 0.00%) 96402 ( 0.00%) 91.64
udp6 12821 ( 0.05%) 2606823 ( 0.02%) 203.32
dns 12794 ( 0.05%) 2602066 ( 0.02%) 203.38
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 24 ( 0.00%) 4432 ( 0.00%) 184.67
icmp6 3706 ( 0.01%) 440270 ( 0.00%) 118.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 22 ( 0.00%) 21098 ( 0.00%) 959.00
tcpdump file: 200908271400.dump.gz (640.30 MB)