Traffic Trace Info
DumpFile: 200703031400.dump
FileSize: 1059.75MB
Id: 200703031400
StartTime: Sat Mar 3 14:00:00 2007
EndTime: Sat Mar 3 14:15:00 2007
TotalTime: 899.72 seconds
TotalCapSize: 829.03MB CapLen: 96 bytes
# of packets: 15120331 (9990.45MB)
AvgRate: 93.15Mbps stddev:9.42M
IP flow (unique src/dst pair) Information
# of flows: 449542 (avg. 33.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.9% 2.9% 2.5% 2.0% 1.3% 1.0% 0.6% 0.5% 0.4% 0.4%
IP address Information
# of IPv4 addresses: 241279
Top 10 bandwidth usage (bytes/total in %):
15.7% 12.0% 8.6% 8.2% 8.1% 6.1% 4.7% 3.1% 2.9% 2.7%
# of IPv6 addresses: 1592
Top 10 bandwidth usage (bytes/total in %):
80.1% 80.1% 8.2% 7.0% 7.0% 4.3% 3.8% 0.5% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703031400.pktlen.png)
detailed numbers
[ 32- 63]: 3596340
[ 64- 127]: 3937350
[ 128- 255]: 418131
[ 256- 511]: 385507
[ 512- 1023]: 346061
[ 1024- 2047]: 6436942
Protocol Breakdown
![[protocol breakdown chart]](200703031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15120331 (100.00%) 10475746908 (100.00%) 692.83
ip 14748975 ( 97.54%) 10295219538 ( 98.28%) 698.03
tcp 12887587 ( 85.23%) 10004095451 ( 95.50%) 776.26
http(s) 5075196 ( 33.57%) 6864027246 ( 65.52%) 1352.47
http(c) 3039359 ( 20.10%) 322386792 ( 3.08%) 106.07
squid 413392 ( 2.73%) 129974264 ( 1.24%) 314.41
smtp 314440 ( 2.08%) 58994028 ( 0.56%) 187.62
nntp 8938 ( 0.06%) 5041158 ( 0.05%) 564.01
ftp 51360 ( 0.34%) 4201604 ( 0.04%) 81.81
pop3 23808 ( 0.16%) 4748072 ( 0.05%) 199.43
imap 4745 ( 0.03%) 2668396 ( 0.03%) 562.36
telnet 24 ( 0.00%) 1488 ( 0.00%) 62.00
ssh 69224 ( 0.46%) 33808670 ( 0.32%) 488.40
dns 41356 ( 0.27%) 5633801 ( 0.05%) 136.23
bgp 752 ( 0.00%) 82901 ( 0.00%) 110.24
napster 4487 ( 0.03%) 270860 ( 0.00%) 60.37
realaud 157 ( 0.00%) 23043 ( 0.00%) 146.77
rtsp 26936 ( 0.18%) 12326977 ( 0.12%) 457.64
icecast 17331 ( 0.11%) 16181433 ( 0.15%) 933.67
other 3796073 ( 25.11%) 2543724068 ( 24.28%) 670.09
udp 1390301 ( 9.19%) 207838745 ( 1.98%) 149.49
dns 1200987 ( 7.94%) 150048208 ( 1.43%) 124.94
rip 2 ( 0.00%) 210 ( 0.00%) 105.00
realaud 4475 ( 0.03%) 1509769 ( 0.01%) 337.38
halflif 14 ( 0.00%) 1385 ( 0.00%) 98.93
starcra 11 ( 0.00%) 1518 ( 0.00%) 138.00
everque 18 ( 0.00%) 2297 ( 0.00%) 127.61
quake 18 ( 0.00%) 1769 ( 0.00%) 98.28
cuseeme 3 ( 0.00%) 262 ( 0.00%) 87.33
other 184671 ( 1.22%) 56221716 ( 0.54%) 304.44
icmp 193235 ( 1.28%) 16753564 ( 0.16%) 86.70
ipip 347 ( 0.00%) 41630 ( 0.00%) 119.97
ip6 6985 ( 0.05%) 7164276 ( 0.07%) 1025.67
other 270520 ( 1.79%) 59325872 ( 0.57%) 219.30
frag 2074 ( 0.01%) 2356332 ( 0.02%) 1136.13
ip6 371356 ( 2.46%) 180527370 ( 1.72%) 486.13
tcp6 313044 ( 2.07%) 158712525 ( 1.52%) 507.00
http(s) 96123 ( 0.64%) 139280251 ( 1.33%) 1448.98
http(c) 64662 ( 0.43%) 5624204 ( 0.05%) 86.98
squid 56 ( 0.00%) 4144 ( 0.00%) 74.00
smtp 146 ( 0.00%) 54057 ( 0.00%) 370.25
nntp 141696 ( 0.94%) 12623031 ( 0.12%) 89.09
pop3 12 ( 0.00%) 1128 ( 0.00%) 94.00
ssh 908 ( 0.01%) 179896 ( 0.00%) 198.12
dns 23 ( 0.00%) 2153 ( 0.00%) 93.61
bgp 127 ( 0.00%) 13615 ( 0.00%) 107.20
rtsp 90 ( 0.00%) 14028 ( 0.00%) 155.87
icecast 35 ( 0.00%) 2590 ( 0.00%) 74.00
other 9166 ( 0.06%) 913428 ( 0.01%) 99.65
udp6 36736 ( 0.24%) 5825596 ( 0.06%) 158.58
dns 36418 ( 0.24%) 5794796 ( 0.06%) 159.12
other 318 ( 0.00%) 30800 ( 0.00%) 96.86
icmp6 15625 ( 0.10%) 8195357 ( 0.08%) 524.50
ip6 526 ( 0.00%) 83695 ( 0.00%) 159.12
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5395 ( 0.04%) 7706117 ( 0.07%) 1428.38
tcpdump file: 200703031400.dump.gz (392.35 MB)