Traffic Trace Info
DumpFile: 200703101400.dump
FileSize: 981.80MB
Id: 200703101400
StartTime: Sat Mar 10 14:00:00 2007
EndTime: Sat Mar 10 14:15:01 2007
TotalTime: 900.87 seconds
TotalCapSize: 768.12MB CapLen: 96 bytes
# of packets: 14003167 (9708.36MB)
AvgRate: 90.40Mbps stddev:12.09M
IP flow (unique src/dst pair) Information
# of flows: 433832 (avg. 32.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 1.6% 1.5% 1.4% 1.2% 1.1% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 215198
Top 10 bandwidth usage (bytes/total in %):
14.5% 13.5% 9.8% 7.8% 4.6% 3.1% 2.7% 2.2% 2.1% 1.8%
# of IPv6 addresses: 1216
Top 10 bandwidth usage (bytes/total in %):
53.8% 53.8% 6.0% 4.9% 3.8% 3.8% 3.6% 3.3% 2.6% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703101400.pktlen.png)
detailed numbers
[ 32- 63]: 2797024
[ 64- 127]: 3845186
[ 128- 255]: 373777
[ 256- 511]: 409153
[ 512- 1023]: 311355
[ 1024- 2047]: 6266672
Protocol Breakdown
![[protocol breakdown chart]](200703101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14003167 (100.00%) 10179948742 (100.00%) 726.97
ip 13957328 ( 99.67%) 10165674803 ( 99.86%) 728.34
tcp 11808943 ( 84.33%) 9696510113 ( 95.25%) 821.12
http(s) 5712394 ( 40.79%) 7699277591 ( 75.63%) 1347.82
http(c) 2986594 ( 21.33%) 341352717 ( 3.35%) 114.29
squid 433543 ( 3.10%) 292174691 ( 2.87%) 673.92
smtp 356589 ( 2.55%) 77833763 ( 0.76%) 218.27
nntp 6602 ( 0.05%) 2876871 ( 0.03%) 435.76
ftp 67920 ( 0.49%) 5596885 ( 0.05%) 82.40
pop3 12527 ( 0.09%) 9946496 ( 0.10%) 794.00
imap 4122 ( 0.03%) 1730300 ( 0.02%) 419.77
telnet 407 ( 0.00%) 53125 ( 0.00%) 130.53
ssh 17355 ( 0.12%) 11178195 ( 0.11%) 644.09
dns 4057 ( 0.03%) 4645157 ( 0.05%) 1144.97
bgp 914 ( 0.01%) 105534 ( 0.00%) 115.46
napster 16 ( 0.00%) 3171 ( 0.00%) 198.19
realaud 234 ( 0.00%) 28649 ( 0.00%) 122.43
rtsp 40966 ( 0.29%) 15930864 ( 0.16%) 388.88
icecast 19244 ( 0.14%) 15989872 ( 0.16%) 830.90
hotline 1 ( 0.00%) 74 ( 0.00%) 74.00
other 2145454 ( 15.32%) 1217785918 ( 11.96%) 567.61
udp 1645046 ( 11.75%) 346555771 ( 3.40%) 210.67
dns 1327117 ( 9.48%) 160311254 ( 1.57%) 120.80
rip 84 ( 0.00%) 122888 ( 0.00%) 1462.95
realaud 5628 ( 0.04%) 2330033 ( 0.02%) 414.01
halflif 67 ( 0.00%) 4682 ( 0.00%) 69.88
starcra 12 ( 0.00%) 2030 ( 0.00%) 169.17
everque 17 ( 0.00%) 1966 ( 0.00%) 115.65
unreal 13 ( 0.00%) 1682 ( 0.00%) 129.38
quake 35793 ( 0.26%) 5598131 ( 0.05%) 156.40
cuseeme 5 ( 0.00%) 449 ( 0.00%) 89.80
other 274488 ( 1.96%) 175642422 ( 1.73%) 639.89
icmp 255529 ( 1.82%) 22019733 ( 0.22%) 86.17
ipip 324 ( 0.00%) 39228 ( 0.00%) 121.07
ip6 690 ( 0.00%) 85030 ( 0.00%) 123.23
other 246796 ( 1.76%) 100464928 ( 0.99%) 407.08
frag 75739 ( 0.54%) 110223034 ( 1.08%) 1455.30
ip6 45836 ( 0.33%) 14273759 ( 0.14%) 311.41
tcp6 10202 ( 0.07%) 8569824 ( 0.08%) 840.01
http(s) 500 ( 0.00%) 292513 ( 0.00%) 585.03
http(c) 737 ( 0.01%) 164300 ( 0.00%) 222.93
squid 68 ( 0.00%) 5032 ( 0.00%) 74.00
smtp 103 ( 0.00%) 23731 ( 0.00%) 230.40
ftp 18 ( 0.00%) 1670 ( 0.00%) 92.78
pop3 9 ( 0.00%) 846 ( 0.00%) 94.00
ssh 233 ( 0.00%) 85990 ( 0.00%) 369.06
bgp 124 ( 0.00%) 12976 ( 0.00%) 104.65
icecast 32 ( 0.00%) 2368 ( 0.00%) 74.00
other 8378 ( 0.06%) 7980398 ( 0.08%) 952.54
udp6 29653 ( 0.21%) 4902430 ( 0.05%) 165.33
dns 29548 ( 0.21%) 4892032 ( 0.05%) 165.56
other 105 ( 0.00%) 10398 ( 0.00%) 99.03
icmp6 5945 ( 0.04%) 792792 ( 0.01%) 133.35
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5 ( 0.00%) 4497 ( 0.00%) 899.40
tcpdump file: 200703101400.dump.gz (361.43 MB)