Traffic Trace Info
DumpFile: 200702281400.dump
FileSize: 1534.63MB
Id: 200702281400
StartTime: Wed Feb 28 14:00:01 2007
EndTime: Wed Feb 28 14:15:00 2007
TotalTime: 899.51 seconds
TotalCapSize: 1203.55MB CapLen: 96 bytes
# of packets: 21697095 (16328.08MB)
AvgRate: 152.26Mbps stddev:12.72M
IP flow (unique src/dst pair) Information
# of flows: 657173 (avg. 33.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 1.9% 1.5% 1.3% 1.2% 1.1% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 394580
Top 10 bandwidth usage (bytes/total in %):
14.4% 14.4% 9.6% 7.5% 4.7% 4.6% 3.0% 2.9% 1.9% 1.6%
# of IPv6 addresses: 1729
Top 10 bandwidth usage (bytes/total in %):
34.9% 23.5% 23.5% 18.2% 16.2% 11.5% 11.5% 6.1% 3.1% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200702281400.pktlen.png)
detailed numbers
[ 32- 63]: 4898791
[ 64- 127]: 4609279
[ 128- 255]: 516921
[ 256- 511]: 524463
[ 512- 1023]: 519449
[ 1024- 2047]: 10628192
Protocol Breakdown
![[protocol breakdown chart]](200702281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21697095 (100.00%) 17121229214 (100.00%) 789.10
ip 21512489 ( 99.15%) 17079098554 ( 99.75%) 793.92
tcp 19280613 ( 88.86%) 16683979717 ( 97.45%) 865.32
http(s) 9407236 ( 43.36%) 12878129644 ( 75.22%) 1368.96
http(c) 4655983 ( 21.46%) 614547374 ( 3.59%) 131.99
squid 438915 ( 2.02%) 306605096 ( 1.79%) 698.55
smtp 502908 ( 2.32%) 154191585 ( 0.90%) 306.60
nntp 14421 ( 0.07%) 10206312 ( 0.06%) 707.74
ftp 59887 ( 0.28%) 56890772 ( 0.33%) 949.97
pop3 37738 ( 0.17%) 29628063 ( 0.17%) 785.10
imap 7209 ( 0.03%) 3026774 ( 0.02%) 419.86
telnet 1518 ( 0.01%) 124799 ( 0.00%) 82.21
ssh 73293 ( 0.34%) 31233185 ( 0.18%) 426.14
dns 2748 ( 0.01%) 1790978 ( 0.01%) 651.74
bgp 1137 ( 0.01%) 134545 ( 0.00%) 118.33
napster 9 ( 0.00%) 815 ( 0.00%) 90.56
realaud 73 ( 0.00%) 5393 ( 0.00%) 73.88
rtsp 104789 ( 0.48%) 121133852 ( 0.71%) 1155.98
icecast 50419 ( 0.23%) 59385613 ( 0.35%) 1177.84
other 3922318 ( 18.08%) 2416944109 ( 14.12%) 616.20
udp 1751540 ( 8.07%) 319490447 ( 1.87%) 182.41
dns 1406401 ( 6.48%) 184670062 ( 1.08%) 131.31
realaud 5763 ( 0.03%) 2689744 ( 0.02%) 466.73
halflif 13 ( 0.00%) 1346 ( 0.00%) 103.54
starcra 6 ( 0.00%) 523 ( 0.00%) 87.17
everque 20 ( 0.00%) 2069 ( 0.00%) 103.45
unreal 4 ( 0.00%) 366 ( 0.00%) 91.50
quake 5 ( 0.00%) 398 ( 0.00%) 79.60
cuseeme 3 ( 0.00%) 261 ( 0.00%) 87.00
other 339279 ( 1.56%) 132116467 ( 0.77%) 389.40
icmp 255644 ( 1.18%) 22436776 ( 0.13%) 87.77
ipip 344 ( 0.00%) 41272 ( 0.00%) 119.98
ip6 6965 ( 0.03%) 7140399 ( 0.04%) 1025.18
other 217383 ( 1.00%) 46009943 ( 0.27%) 211.65
frag 1718 ( 0.01%) 1798941 ( 0.01%) 1047.11
ip6 184606 ( 0.85%) 42130660 ( 0.25%) 228.22
tcp6 111111 ( 0.51%) 16876999 ( 0.10%) 151.89
http(s) 250 ( 0.00%) 159339 ( 0.00%) 637.36
http(c) 252 ( 0.00%) 35405 ( 0.00%) 140.50
squid 68 ( 0.00%) 5032 ( 0.00%) 74.00
smtp 234 ( 0.00%) 65528 ( 0.00%) 280.03
nntp 94244 ( 0.43%) 9885380 ( 0.06%) 104.89
ftp 588 ( 0.00%) 745059 ( 0.00%) 1267.11
pop3 6 ( 0.00%) 564 ( 0.00%) 94.00
ssh 1 ( 0.00%) 98 ( 0.00%) 98.00
bgp 124 ( 0.00%) 13218 ( 0.00%) 106.60
icecast 34 ( 0.00%) 2516 ( 0.00%) 74.00
other 15310 ( 0.07%) 5964860 ( 0.03%) 389.61
udp6 50933 ( 0.23%) 9141344 ( 0.05%) 179.48
dns 50514 ( 0.23%) 9102314 ( 0.05%) 180.19
other 419 ( 0.00%) 39030 ( 0.00%) 93.15
icmp6 16459 ( 0.08%) 8322910 ( 0.05%) 505.68
ip6 696 ( 0.00%) 108441 ( 0.00%) 155.81
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5376 ( 0.02%) 7676750 ( 0.04%) 1427.97
tcpdump file: 200702281400.dump.gz (561.94 MB)