Traffic Trace Info
DumpFile: 200703051400.dump
FileSize: 1362.29MB
Id: 200703051400
StartTime: Mon Mar 5 14:00:01 2007
EndTime: Mon Mar 5 14:15:00 2007
TotalTime: 899.58 seconds
TotalCapSize: 1068.46MB CapLen: 96 bytes
# of packets: 19256110 (12665.12MB)
AvgRate: 118.10Mbps stddev:16.11M
IP flow (unique src/dst pair) Information
# of flows: 481621 (avg. 39.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.6% 1.5% 1.2% 0.9% 0.8% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 231845
Top 10 bandwidth usage (bytes/total in %):
14.2% 11.8% 6.8% 4.2% 2.7% 2.5% 2.2% 2.1% 2.0% 1.9%
# of IPv6 addresses: 1635
Top 10 bandwidth usage (bytes/total in %):
33.7% 33.7% 9.2% 6.0% 5.0% 4.9% 4.5% 3.6% 2.9% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703051400.pktlen.png)
detailed numbers
[ 32- 63]: 4272078
[ 64- 127]: 5445185
[ 128- 255]: 478233
[ 256- 511]: 519092
[ 512- 1023]: 452652
[ 1024- 2047]: 8088870
Protocol Breakdown
![[protocol breakdown chart]](200703051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19256110 (100.00%) 13280346102 (100.00%) 689.67
ip 19187613 ( 99.64%) 13264792259 ( 99.88%) 691.32
tcp 17077533 ( 88.69%) 12926114070 ( 97.33%) 756.91
http(s) 6619307 ( 34.38%) 8630353844 ( 64.99%) 1303.82
http(c) 4647735 ( 24.14%) 590138196 ( 4.44%) 126.97
squid 331053 ( 1.72%) 178420059 ( 1.34%) 538.95
smtp 366035 ( 1.90%) 105894982 ( 0.80%) 289.30
nntp 11657 ( 0.06%) 7372292 ( 0.06%) 632.43
ftp 28869 ( 0.15%) 3442279 ( 0.03%) 119.24
pop3 9176 ( 0.05%) 2360520 ( 0.02%) 257.25
imap 8915 ( 0.05%) 5212783 ( 0.04%) 584.72
telnet 659 ( 0.00%) 163947 ( 0.00%) 248.78
ssh 19706 ( 0.10%) 13593602 ( 0.10%) 689.82
dns 6057 ( 0.03%) 6560687 ( 0.05%) 1083.16
bgp 831 ( 0.00%) 101981 ( 0.00%) 122.72
napster 20 ( 0.00%) 2377 ( 0.00%) 118.85
realaud 3353 ( 0.02%) 2885164 ( 0.02%) 860.47
rtsp 303984 ( 1.58%) 227860680 ( 1.72%) 749.58
icecast 4118 ( 0.02%) 323607 ( 0.00%) 78.58
other 4716038 ( 24.49%) 3151425870 ( 23.73%) 668.24
udp 1555634 ( 8.08%) 245826506 ( 1.85%) 158.02
dns 1247230 ( 6.48%) 163300342 ( 1.23%) 130.93
realaud 4011 ( 0.02%) 1951808 ( 0.01%) 486.61
halflif 6 ( 0.00%) 492 ( 0.00%) 82.00
starcra 13 ( 0.00%) 2374 ( 0.00%) 182.62
everque 22 ( 0.00%) 3213 ( 0.00%) 146.05
unreal 12 ( 0.00%) 1670 ( 0.00%) 139.17
quake 43930 ( 0.23%) 11337785 ( 0.09%) 258.09
cuseeme 2 ( 0.00%) 157 ( 0.00%) 78.50
other 260319 ( 1.35%) 69207516 ( 0.52%) 265.86
icmp 290701 ( 1.51%) 26292943 ( 0.20%) 90.45
ipip 332 ( 0.00%) 40396 ( 0.00%) 121.67
ip6 679 ( 0.00%) 82350 ( 0.00%) 121.28
other 262734 ( 1.36%) 66435994 ( 0.50%) 252.86
frag 1587 ( 0.01%) 1776371 ( 0.01%) 1119.33
ip6 68494 ( 0.36%) 15553663 ( 0.12%) 227.08
tcp6 14320 ( 0.07%) 7127200 ( 0.05%) 497.71
http(s) 1149 ( 0.01%) 829680 ( 0.01%) 722.09
http(c) 940 ( 0.00%) 124508 ( 0.00%) 132.46
squid 63 ( 0.00%) 4662 ( 0.00%) 74.00
smtp 141 ( 0.00%) 50268 ( 0.00%) 356.51
ftp 41 ( 0.00%) 4684 ( 0.00%) 114.24
pop3 6 ( 0.00%) 564 ( 0.00%) 94.00
ssh 1023 ( 0.01%) 152993 ( 0.00%) 149.55
bgp 120 ( 0.00%) 12420 ( 0.00%) 103.50
icecast 32 ( 0.00%) 2368 ( 0.00%) 74.00
other 10805 ( 0.06%) 5945053 ( 0.04%) 550.21
udp6 44129 ( 0.23%) 6959719 ( 0.05%) 157.71
dns 43898 ( 0.23%) 6935285 ( 0.05%) 157.99
other 231 ( 0.00%) 24434 ( 0.00%) 105.77
icmp6 9508 ( 0.05%) 1369704 ( 0.01%) 144.06
ip6 495 ( 0.00%) 79681 ( 0.00%) 160.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 13279 ( 0.00%) 1106.58
tcpdump file: 200703051400.dump.gz (509.12 MB)