Traffic Trace Info
DumpFile: 200702221400.dump
FileSize: 1253.42MB
Id: 200702221400
StartTime: Thu Feb 22 14:00:00 2007
EndTime: Thu Feb 22 14:15:00 2007
TotalTime: 900.09 seconds
TotalCapSize: 984.26MB CapLen: 96 bytes
# of packets: 17638506 (11309.08MB)
AvgRate: 105.35Mbps stddev:15.71M
IP flow (unique src/dst pair) Information
# of flows: 467907 (avg. 37.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.9% 2.3% 1.4% 1.3% 1.2% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 260563
Top 10 bandwidth usage (bytes/total in %):
10.0% 7.5% 7.4% 5.5% 5.1% 4.3% 3.2% 3.0% 2.4% 2.4%
# of IPv6 addresses: 1592
Top 10 bandwidth usage (bytes/total in %):
35.9% 35.4% 24.2% 24.2% 4.5% 4.5% 3.6% 3.1% 3.1% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200702221400.pktlen.png)
detailed numbers
[ 32- 63]: 4103042
[ 64- 127]: 4817223
[ 128- 255]: 602875
[ 256- 511]: 437502
[ 512- 1023]: 510653
[ 1024- 2047]: 7167211
Protocol Breakdown
![[protocol breakdown chart]](200702221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17638506 (100.00%) 11858432894 (100.00%) 672.30
ip 17572410 ( 99.63%) 11836700498 ( 99.82%) 673.60
tcp 15631248 ( 88.62%) 11505054881 ( 97.02%) 736.03
http(s) 6038061 ( 34.23%) 8036457816 ( 67.77%) 1330.97
http(c) 3852303 ( 21.84%) 474074828 ( 4.00%) 123.06
squid 487951 ( 2.77%) 344023055 ( 2.90%) 705.04
smtp 360834 ( 2.05%) 75417700 ( 0.64%) 209.01
nntp 28344 ( 0.16%) 11892497 ( 0.10%) 419.58
ftp 23350 ( 0.13%) 2087141 ( 0.02%) 89.39
pop3 7876 ( 0.04%) 2179368 ( 0.02%) 276.71
imap 7847 ( 0.04%) 3893382 ( 0.03%) 496.16
telnet 745 ( 0.00%) 78383 ( 0.00%) 105.21
ssh 1255216 ( 7.12%) 187748045 ( 1.58%) 149.57
dns 1531 ( 0.01%) 125500 ( 0.00%) 81.97
bgp 1260 ( 0.01%) 166557 ( 0.00%) 132.19
napster 27 ( 0.00%) 3281 ( 0.00%) 121.52
realaud 48 ( 0.00%) 33187 ( 0.00%) 691.40
rtsp 89448 ( 0.51%) 23354648 ( 0.20%) 261.10
icecast 30290 ( 0.17%) 37681196 ( 0.32%) 1244.01
other 3446096 ( 19.54%) 2305836968 ( 19.44%) 669.12
udp 1464940 ( 8.31%) 269580774 ( 2.27%) 184.02
dns 1136189 ( 6.44%) 149521336 ( 1.26%) 131.60
realaud 13447 ( 0.08%) 6941604 ( 0.06%) 516.22
halflif 3 ( 0.00%) 467 ( 0.00%) 155.67
starcra 4 ( 0.00%) 359 ( 0.00%) 89.75
everque 13 ( 0.00%) 1144 ( 0.00%) 88.00
unreal 3 ( 0.00%) 270 ( 0.00%) 90.00
quake 5 ( 0.00%) 431 ( 0.00%) 86.20
cuseeme 3 ( 0.00%) 244 ( 0.00%) 81.33
other 315181 ( 1.79%) 113101810 ( 0.95%) 358.85
icmp 312869 ( 1.77%) 26495639 ( 0.22%) 84.69
ipip 341 ( 0.00%) 41138 ( 0.00%) 120.64
ipsec 14 ( 0.00%) 840 ( 0.00%) 60.00
ip6 546 ( 0.00%) 61916 ( 0.00%) 113.40
other 162452 ( 0.92%) 35465310 ( 0.30%) 218.31
frag 1572 ( 0.01%) 1727333 ( 0.01%) 1098.81
ip6 66093 ( 0.37%) 21732216 ( 0.18%) 328.81
tcp6 17531 ( 0.10%) 7420969 ( 0.06%) 423.31
http(s) 1114 ( 0.01%) 1137953 ( 0.01%) 1021.50
http(c) 421 ( 0.00%) 62846 ( 0.00%) 149.28
smtp 149 ( 0.00%) 60690 ( 0.00%) 407.32
ftp 82 ( 0.00%) 8518 ( 0.00%) 103.88
ssh 5 ( 0.00%) 478 ( 0.00%) 95.60
bgp 154 ( 0.00%) 17803 ( 0.00%) 115.60
other 15606 ( 0.09%) 6132681 ( 0.05%) 392.97
udp6 34463 ( 0.20%) 5476181 ( 0.05%) 158.90
dns 34027 ( 0.19%) 5435043 ( 0.05%) 159.73
halflif 1 ( 0.00%) 96 ( 0.00%) 96.00
other 435 ( 0.00%) 41042 ( 0.00%) 94.35
icmp6 8149 ( 0.05%) 1049015 ( 0.01%) 128.73
ip6 519 ( 0.00%) 71207 ( 0.00%) 137.20
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5401 ( 0.03%) 7710764 ( 0.07%) 1427.65
tcpdump file: 200702221400.dump.gz (460.48 MB)