Traffic Trace Info
DumpFile: 200703081400.dump
FileSize: 1418.57MB
Id: 200703081400
StartTime: Thu Mar 8 14:00:01 2007
EndTime: Thu Mar 8 14:15:00 2007
TotalTime: 899.23 seconds
TotalCapSize: 1115.55MB CapLen: 96 bytes
# of packets: 19857720 (13167.15MB)
AvgRate: 122.82Mbps stddev:10.92M
IP flow (unique src/dst pair) Information
# of flows: 587478 (avg. 33.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.3% 1.9% 1.7% 1.7% 1.6% 1.5% 1.5% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 348337
Top 10 bandwidth usage (bytes/total in %):
14.9% 11.1% 10.2% 6.3% 5.0% 3.1% 2.4% 2.3% 2.0% 2.0%
# of IPv6 addresses: 1290
Top 10 bandwidth usage (bytes/total in %):
34.3% 29.5% 10.9% 7.5% 6.3% 5.3% 4.3% 4.3% 4.1% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703081400.pktlen.png)
detailed numbers
[ 32- 63]: 4047849
[ 64- 127]: 5544886
[ 128- 255]: 849546
[ 256- 511]: 495401
[ 512- 1023]: 569555
[ 1024- 2047]: 8350483
Protocol Breakdown
![[protocol breakdown chart]](200703081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19857720 (100.00%) 13806754846 (100.00%) 695.28
ip 19804276 ( 99.73%) 13795702929 ( 99.92%) 696.60
tcp 17473190 ( 87.99%) 13349312473 ( 96.69%) 763.99
http(s) 7630889 ( 38.43%) 10321620302 ( 74.76%) 1352.61
http(c) 4119791 ( 20.75%) 525736425 ( 3.81%) 127.61
squid 227603 ( 1.15%) 74918946 ( 0.54%) 329.17
smtp 566082 ( 2.85%) 140954561 ( 1.02%) 249.00
nntp 8904 ( 0.04%) 4646120 ( 0.03%) 521.80
ftp 187934 ( 0.95%) 188440244 ( 1.36%) 1002.69
pop3 12133 ( 0.06%) 7283034 ( 0.05%) 600.27
imap 5902 ( 0.03%) 2042060 ( 0.01%) 345.99
telnet 1580 ( 0.01%) 177553 ( 0.00%) 112.38
ssh 1498184 ( 7.54%) 242897975 ( 1.76%) 162.13
dns 8706 ( 0.04%) 8428375 ( 0.06%) 968.11
bgp 1164 ( 0.01%) 139531 ( 0.00%) 119.87
napster 63 ( 0.00%) 7946 ( 0.00%) 126.13
realaud 332 ( 0.00%) 148821 ( 0.00%) 448.26
rtsp 179686 ( 0.90%) 112681354 ( 0.82%) 627.10
icecast 163 ( 0.00%) 12298 ( 0.00%) 75.45
other 3024057 ( 15.23%) 1719175908 ( 12.45%) 568.50
udp 1760973 ( 8.87%) 326083940 ( 2.36%) 185.17
dns 1270307 ( 6.40%) 160062325 ( 1.16%) 126.00
realaud 16088 ( 0.08%) 6830363 ( 0.05%) 424.56
halflif 20 ( 0.00%) 3552 ( 0.00%) 177.60
starcra 21 ( 0.00%) 2162 ( 0.00%) 102.95
everque 32 ( 0.00%) 5443 ( 0.00%) 170.09
unreal 12 ( 0.00%) 2324 ( 0.00%) 193.67
quake 4 ( 0.00%) 648 ( 0.00%) 162.00
cuseeme 4 ( 0.00%) 682 ( 0.00%) 170.50
other 474464 ( 2.39%) 159171204 ( 1.15%) 335.48
icmp 210709 ( 1.06%) 19014566 ( 0.14%) 90.24
ipip 338 ( 0.00%) 39904 ( 0.00%) 118.06
ip6 677 ( 0.00%) 82132 ( 0.00%) 121.32
other 358389 ( 1.80%) 101169914 ( 0.73%) 282.29
frag 1504 ( 0.01%) 1697481 ( 0.01%) 1128.64
ip6 53444 ( 0.27%) 11051917 ( 0.08%) 206.79
tcp6 12779 ( 0.06%) 4689362 ( 0.03%) 366.96
http(s) 306 ( 0.00%) 266904 ( 0.00%) 872.24
http(c) 6680 ( 0.03%) 689419 ( 0.00%) 103.21
squid 64 ( 0.00%) 4736 ( 0.00%) 74.00
smtp 85 ( 0.00%) 23933 ( 0.00%) 281.56
pop3 6 ( 0.00%) 564 ( 0.00%) 94.00
ssh 914 ( 0.00%) 193240 ( 0.00%) 211.42
bgp 126 ( 0.00%) 13337 ( 0.00%) 105.85
icecast 32 ( 0.00%) 2368 ( 0.00%) 74.00
other 4566 ( 0.02%) 3494861 ( 0.03%) 765.41
udp6 32454 ( 0.16%) 5120496 ( 0.04%) 157.78
dns 32393 ( 0.16%) 5113786 ( 0.04%) 157.87
other 61 ( 0.00%) 6710 ( 0.00%) 110.00
icmp6 8141 ( 0.04%) 1227319 ( 0.01%) 150.76
ip6 35 ( 0.00%) 4542 ( 0.00%) 129.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5 ( 0.00%) 6118 ( 0.00%) 1223.60
tcpdump file: 200703081400.dump.gz (531.55 MB)