Traffic Trace Info
DumpFile: 200703091400.dump
FileSize: 1258.02MB
Id: 200703091400
StartTime: Fri Mar 9 14:00:00 2007
EndTime: Fri Mar 9 14:15:00 2007
TotalTime: 899.92 seconds
TotalCapSize: 982.39MB CapLen: 96 bytes
# of packets: 18063064 (11289.61MB)
AvgRate: 105.25Mbps stddev:16.83M
IP flow (unique src/dst pair) Information
# of flows: 534458 (avg. 33.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.2% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 305094
Top 10 bandwidth usage (bytes/total in %):
13.8% 10.3% 3.8% 3.3% 2.8% 2.6% 2.6% 2.4% 2.0% 1.8%
# of IPv6 addresses: 1297
Top 10 bandwidth usage (bytes/total in %):
39.9% 39.9% 10.0% 9.3% 8.0% 4.5% 4.4% 3.6% 3.6% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703091400.pktlen.png)
detailed numbers
[ 32- 63]: 4245236
[ 64- 127]: 5132335
[ 128- 255]: 555303
[ 256- 511]: 533869
[ 512- 1023]: 460803
[ 1024- 2047]: 7135518
Protocol Breakdown
![[protocol breakdown chart]](200703091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18063064 (100.00%) 11838013075 (100.00%) 655.37
ip 18002356 ( 99.66%) 11820403394 ( 99.85%) 656.60
tcp 15419226 ( 85.36%) 11426069038 ( 96.52%) 741.03
http(s) 6235295 ( 34.52%) 8352307893 ( 70.55%) 1339.52
http(c) 4131733 ( 22.87%) 479276674 ( 4.05%) 116.00
squid 311958 ( 1.73%) 163931772 ( 1.38%) 525.49
smtp 446214 ( 2.47%) 122923252 ( 1.04%) 275.48
nntp 7193 ( 0.04%) 3352027 ( 0.03%) 466.01
ftp 173444 ( 0.96%) 43497471 ( 0.37%) 250.79
pop3 33812 ( 0.19%) 26726600 ( 0.23%) 790.45
imap 5616 ( 0.03%) 1859681 ( 0.02%) 331.14
telnet 1597 ( 0.01%) 124317 ( 0.00%) 77.84
ssh 54432 ( 0.30%) 17345040 ( 0.15%) 318.66
dns 3018 ( 0.02%) 2320502 ( 0.02%) 768.89
bgp 1207 ( 0.01%) 170957 ( 0.00%) 141.64
napster 619 ( 0.00%) 261188 ( 0.00%) 421.95
realaud 285 ( 0.00%) 130626 ( 0.00%) 458.34
rtsp 174134 ( 0.96%) 127958479 ( 1.08%) 734.83
icecast 270 ( 0.00%) 19897 ( 0.00%) 73.69
hotline 28 ( 0.00%) 3357 ( 0.00%) 119.89
other 3838359 ( 21.25%) 2083858585 ( 17.60%) 542.90
udp 1701679 ( 9.42%) 262580812 ( 2.22%) 154.31
dns 1292022 ( 7.15%) 164254479 ( 1.39%) 127.13
realaud 4973 ( 0.03%) 2615684 ( 0.02%) 525.98
halflif 55 ( 0.00%) 4293 ( 0.00%) 78.05
starcra 31 ( 0.00%) 7167 ( 0.00%) 231.19
everque 60 ( 0.00%) 5469 ( 0.00%) 91.15
unreal 13 ( 0.00%) 1316 ( 0.00%) 101.23
quake 33921 ( 0.19%) 6038791 ( 0.05%) 178.03
cuseeme 6 ( 0.00%) 507 ( 0.00%) 84.50
other 370554 ( 2.05%) 89641546 ( 0.76%) 241.91
icmp 299251 ( 1.66%) 25443754 ( 0.21%) 85.02
ipip 328 ( 0.00%) 40008 ( 0.00%) 121.98
ip6 719 ( 0.00%) 97310 ( 0.00%) 135.34
other 581153 ( 3.22%) 106172472 ( 0.90%) 182.69
frag 1871 ( 0.01%) 1983068 ( 0.02%) 1059.90
ip6 60705 ( 0.34%) 17609501 ( 0.15%) 290.08
tcp6 10678 ( 0.06%) 9537625 ( 0.08%) 893.20
http(s) 1731 ( 0.01%) 1852570 ( 0.02%) 1070.23
http(c) 1272 ( 0.01%) 336275 ( 0.00%) 264.37
squid 58 ( 0.00%) 4292 ( 0.00%) 74.00
smtp 36 ( 0.00%) 6390 ( 0.00%) 177.50
ftp 18 ( 0.00%) 1670 ( 0.00%) 92.78
pop3 6 ( 0.00%) 564 ( 0.00%) 94.00
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
bgp 120 ( 0.00%) 12420 ( 0.00%) 103.50
icecast 28 ( 0.00%) 2072 ( 0.00%) 74.00
other 7408 ( 0.04%) 7321286 ( 0.06%) 988.29
udp6 39203 ( 0.22%) 6512010 ( 0.06%) 166.11
dns 39090 ( 0.22%) 6497394 ( 0.05%) 166.22
other 113 ( 0.00%) 14616 ( 0.00%) 129.35
icmp6 7177 ( 0.04%) 1061122 ( 0.01%) 147.85
ip6 175 ( 0.00%) 25847 ( 0.00%) 147.70
ipsec6 3433 ( 0.02%) 456906 ( 0.00%) 133.09
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 9 ( 0.00%) 11911 ( 0.00%) 1323.44
tcpdump file: 200703091400.dump.gz (473.74 MB)