Traffic Trace Info
DumpFile: 200703041400.dump
FileSize: 801.45MB
Id: 200703041400
StartTime: Sun Mar 4 14:00:01 2007
EndTime: Sun Mar 4 14:15:01 2007
TotalTime: 900.14 seconds
TotalCapSize: 624.22MB CapLen: 96 bytes
# of packets: 11614551 (7711.86MB)
AvgRate: 71.87Mbps stddev:7.44M
IP flow (unique src/dst pair) Information
# of flows: 411158 (avg. 28.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 4.2% 1.1% 1.0% 0.9% 0.8% 0.8% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 230716
Top 10 bandwidth usage (bytes/total in %):
18.5% 16.9% 9.9% 5.9% 5.9% 5.0% 4.3% 4.2% 3.7% 2.0%
# of IPv6 addresses: 1534
Top 10 bandwidth usage (bytes/total in %):
40.2% 37.2% 37.2% 21.0% 18.6% 2.3% 2.2% 1.4% 1.3% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703041400.pktlen.png)
detailed numbers
[ 32- 63]: 2401276
[ 64- 127]: 3210684
[ 128- 255]: 429846
[ 256- 511]: 321578
[ 512- 1023]: 340022
[ 1024- 2047]: 4911145
Protocol Breakdown
![[protocol breakdown chart]](200703041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11614551 (100.00%) 8086472409 (100.00%) 696.24
ip 11449917 ( 98.58%) 8049752089 ( 99.55%) 703.04
tcp 8968747 ( 77.22%) 7202926346 ( 89.07%) 803.11
http(s) 3848004 ( 33.13%) 5141413506 ( 63.58%) 1336.12
http(c) 2067555 ( 17.80%) 199859336 ( 2.47%) 96.66
squid 351954 ( 3.03%) 176341061 ( 2.18%) 501.03
smtp 299754 ( 2.58%) 66474629 ( 0.82%) 221.76
nntp 8529 ( 0.07%) 3919511 ( 0.05%) 459.55
ftp 413481 ( 3.56%) 351207839 ( 4.34%) 849.39
pop3 9369 ( 0.08%) 1139381 ( 0.01%) 121.61
imap 992 ( 0.01%) 386833 ( 0.00%) 389.95
telnet 333 ( 0.00%) 63431 ( 0.00%) 190.48
ssh 177442 ( 1.53%) 36888709 ( 0.46%) 207.89
dns 16244 ( 0.14%) 18418555 ( 0.23%) 1133.87
bgp 928 ( 0.01%) 103287 ( 0.00%) 111.30
napster 43 ( 0.00%) 4693 ( 0.00%) 109.14
realaud 1 ( 0.00%) 78 ( 0.00%) 78.00
rtsp 37996 ( 0.33%) 21905420 ( 0.27%) 576.52
icecast 182 ( 0.00%) 15781 ( 0.00%) 86.71
hotline 2 ( 0.00%) 138 ( 0.00%) 69.00
other 1735928 ( 14.95%) 1184783558 ( 14.65%) 682.51
udp 1532663 ( 13.20%) 313748308 ( 3.88%) 204.71
dns 1090877 ( 9.39%) 138487492 ( 1.71%) 126.95
realaud 4439 ( 0.04%) 1507358 ( 0.02%) 339.57
halflif 8 ( 0.00%) 634 ( 0.00%) 79.25
starcra 12 ( 0.00%) 1392 ( 0.00%) 116.00
everque 15 ( 0.00%) 3627 ( 0.00%) 241.80
unreal 5 ( 0.00%) 978 ( 0.00%) 195.60
quake 757 ( 0.01%) 152466 ( 0.00%) 201.41
cuseeme 4 ( 0.00%) 2604 ( 0.00%) 651.00
other 436486 ( 3.76%) 173584857 ( 2.15%) 397.69
icmp 315697 ( 2.72%) 26959855 ( 0.33%) 85.40
ipip 324 ( 0.00%) 37876 ( 0.00%) 116.90
ip6 6972 ( 0.06%) 7159540 ( 0.09%) 1026.90
other 625514 ( 5.39%) 498920164 ( 6.17%) 797.62
frag 1374 ( 0.01%) 1547082 ( 0.02%) 1125.97
ip6 164631 ( 1.42%) 36720140 ( 0.45%) 223.05
tcp6 108545 ( 0.93%) 15093470 ( 0.19%) 139.05
http(s) 320 ( 0.00%) 157627 ( 0.00%) 492.58
http(c) 131 ( 0.00%) 15242 ( 0.00%) 116.35
squid 55 ( 0.00%) 4070 ( 0.00%) 74.00
smtp 197 ( 0.00%) 120892 ( 0.00%) 613.66
nntp 97669 ( 0.84%) 13646914 ( 0.17%) 139.73
ftp 54 ( 0.00%) 4740 ( 0.00%) 87.78
pop3 6 ( 0.00%) 564 ( 0.00%) 94.00
ssh 996 ( 0.01%) 236206 ( 0.00%) 237.15
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 120 ( 0.00%) 12420 ( 0.00%) 103.50
icecast 32 ( 0.00%) 2368 ( 0.00%) 74.00
other 8958 ( 0.08%) 891792 ( 0.01%) 99.55
udp6 34980 ( 0.30%) 5615826 ( 0.07%) 160.54
dns 34506 ( 0.30%) 5573338 ( 0.07%) 161.52
other 474 ( 0.00%) 42488 ( 0.00%) 89.64
icmp6 15153 ( 0.13%) 8210709 ( 0.10%) 541.85
ip6 519 ( 0.00%) 82498 ( 0.00%) 158.96
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5404 ( 0.05%) 7713557 ( 0.10%) 1427.38
tcpdump file: 200703041400.dump.gz (290.97 MB)