Traffic Trace Info
DumpFile: 200702201400.dump
FileSize: 1144.59MB
Id: 200702201400
StartTime: Tue Feb 20 14:00:01 2007
EndTime: Tue Feb 20 14:15:01 2007
TotalTime: 900.17 seconds
TotalCapSize: 896.97MB CapLen: 96 bytes
# of packets: 16227413 (11192.20MB)
AvgRate: 104.26Mbps stddev:18.03M
IP flow (unique src/dst pair) Information
# of flows: 526547 (avg. 30.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.2% 1.3% 0.9% 0.8% 0.8% 0.8% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 298892
Top 10 bandwidth usage (bytes/total in %):
7.4% 6.5% 6.4% 6.4% 5.5% 3.5% 3.2% 3.1% 2.6% 2.5%
# of IPv6 addresses: 1553
Top 10 bandwidth usage (bytes/total in %):
58.5% 58.5% 18.7% 18.4% 2.1% 2.1% 2.0% 1.9% 1.9% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200702201400.pktlen.png)
detailed numbers
[ 32- 63]: 3740699
[ 64- 127]: 3973463
[ 128- 255]: 492016
[ 256- 511]: 400058
[ 512- 1023]: 386114
[ 1024- 2047]: 7235063
Protocol Breakdown
![[protocol breakdown chart]](200702201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16227413 (100.00%) 11735875754 (100.00%) 723.21
ip 16138142 ( 99.45%) 11694136819 ( 99.64%) 724.63
tcp 14145165 ( 87.17%) 11304428738 ( 96.32%) 799.17
http(s) 6239766 ( 38.45%) 8348715215 ( 71.14%) 1337.99
http(c) 3838834 ( 23.66%) 464097363 ( 3.95%) 120.90
squid 382656 ( 2.36%) 243728394 ( 2.08%) 636.94
smtp 497973 ( 3.07%) 138682801 ( 1.18%) 278.49
nntp 8178 ( 0.05%) 3992150 ( 0.03%) 488.16
ftp 18946 ( 0.12%) 1608552 ( 0.01%) 84.90
pop3 7369 ( 0.05%) 1569560 ( 0.01%) 212.99
imap 6206 ( 0.04%) 2969786 ( 0.03%) 478.53
telnet 1019 ( 0.01%) 92274 ( 0.00%) 90.55
ssh 65904 ( 0.41%) 13582529 ( 0.12%) 206.10
dns 1395 ( 0.01%) 112485 ( 0.00%) 80.63
bgp 1330 ( 0.01%) 207160 ( 0.00%) 155.76
napster 2 ( 0.00%) 124 ( 0.00%) 62.00
realaud 117 ( 0.00%) 9804 ( 0.00%) 83.79
rtsp 146637 ( 0.90%) 85512375 ( 0.73%) 583.16
icecast 27661 ( 0.17%) 31213819 ( 0.27%) 1128.44
other 2901167 ( 17.88%) 1968333981 ( 16.77%) 678.46
udp 1562948 ( 9.63%) 272909796 ( 2.33%) 174.61
dns 1187292 ( 7.32%) 156030820 ( 1.33%) 131.42
realaud 10026 ( 0.06%) 5587292 ( 0.05%) 557.28
halflif 19 ( 0.00%) 1618 ( 0.00%) 85.16
starcra 9 ( 0.00%) 1142 ( 0.00%) 126.89
everque 5 ( 0.00%) 530 ( 0.00%) 106.00
unreal 13 ( 0.00%) 2956 ( 0.00%) 227.38
quake 13 ( 0.00%) 1064 ( 0.00%) 81.85
cuseeme 1 ( 0.00%) 73 ( 0.00%) 73.00
other 365432 ( 2.25%) 111269934 ( 0.95%) 304.49
icmp 204470 ( 1.26%) 17233568 ( 0.15%) 84.28
ipip 353 ( 0.00%) 42010 ( 0.00%) 119.01
ip6 540 ( 0.00%) 61304 ( 0.00%) 113.53
other 224666 ( 1.38%) 99461403 ( 0.85%) 442.71
frag 1538 ( 0.01%) 1693039 ( 0.01%) 1100.81
ip6 89268 ( 0.55%) 41738755 ( 0.36%) 467.57
tcp6 38809 ( 0.24%) 26572913 ( 0.23%) 684.71
http(s) 16098 ( 0.10%) 23649277 ( 0.20%) 1469.08
http(c) 9705 ( 0.06%) 859256 ( 0.01%) 88.54
squid 64 ( 0.00%) 4736 ( 0.00%) 74.00
smtp 169 ( 0.00%) 46167 ( 0.00%) 273.18
ftp 33 ( 0.00%) 3427 ( 0.00%) 103.85
ssh 1001 ( 0.01%) 878742 ( 0.01%) 877.86
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 140 ( 0.00%) 15650 ( 0.00%) 111.79
icecast 32 ( 0.00%) 2368 ( 0.00%) 74.00
other 11560 ( 0.07%) 1112655 ( 0.01%) 96.25
udp6 36437 ( 0.22%) 6347705 ( 0.05%) 174.21
dns 36086 ( 0.22%) 6314315 ( 0.05%) 174.98
other 351 ( 0.00%) 33390 ( 0.00%) 95.13
icmp6 8180 ( 0.05%) 1058500 ( 0.01%) 129.40
ip6 423 ( 0.00%) 58329 ( 0.00%) 137.89
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5389 ( 0.03%) 7697228 ( 0.07%) 1428.32
tcpdump file: 200702201400.dump.gz (422.35 MB)