Traffic Trace Info
DumpFile: 200703121400.dump
FileSize: 1186.62MB
Id: 200703121400
StartTime: Mon Mar 12 14:00:00 2007
EndTime: Mon Mar 12 14:15:01 2007
TotalTime: 900.50 seconds
TotalCapSize: 930.44MB CapLen: 96 bytes
# of packets: 16788688 (10900.45MB)
AvgRate: 101.54Mbps stddev:9.18M
IP flow (unique src/dst pair) Information
# of flows: 537061 (avg. 31.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 1.7% 1.0% 1.0% 1.0% 0.9% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 315343
Top 10 bandwidth usage (bytes/total in %):
11.6% 9.8% 6.5% 6.0% 4.8% 4.3% 3.3% 3.2% 3.0% 1.8%
# of IPv6 addresses: 1222
Top 10 bandwidth usage (bytes/total in %):
79.8% 79.6% 3.5% 3.1% 1.8% 1.5% 1.5% 1.4% 1.4% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703121400.pktlen.png)
detailed numbers
[ 32- 63]: 3612737
[ 64- 127]: 4763836
[ 128- 255]: 496255
[ 256- 511]: 476426
[ 512- 1023]: 515121
[ 1024- 2047]: 6924313
Protocol Breakdown
![[protocol breakdown chart]](200703121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16788688 (100.00%) 11429949467 (100.00%) 680.81
ip 16702968 ( 99.49%) 11381634381 ( 99.58%) 681.41
tcp 14537432 ( 86.59%) 10834993393 ( 94.79%) 745.32
http(s) 5823219 ( 34.69%) 7584852058 ( 66.36%) 1302.52
http(c) 4021958 ( 23.96%) 530653315 ( 4.64%) 131.94
squid 418126 ( 2.49%) 299659530 ( 2.62%) 716.67
smtp 367296 ( 2.19%) 91639644 ( 0.80%) 249.50
nntp 13185 ( 0.08%) 9918141 ( 0.09%) 752.23
ftp 162387 ( 0.97%) 124832970 ( 1.09%) 768.74
pop3 12075 ( 0.07%) 5879983 ( 0.05%) 486.96
imap 4269 ( 0.03%) 1252336 ( 0.01%) 293.36
telnet 1094 ( 0.01%) 116530 ( 0.00%) 106.52
ssh 145775 ( 0.87%) 20315370 ( 0.18%) 139.36
dns 38428 ( 0.23%) 14919712 ( 0.13%) 388.25
bgp 1003 ( 0.01%) 129884 ( 0.00%) 129.50
realaud 18 ( 0.00%) 1942 ( 0.00%) 107.89
rtsp 108700 ( 0.65%) 14890644 ( 0.13%) 136.99
icecast 5740 ( 0.03%) 1644410 ( 0.01%) 286.48
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 3414149 ( 20.34%) 2134286320 ( 18.67%) 625.13
udp 1667703 ( 9.93%) 371127588 ( 3.25%) 222.54
dns 1352290 ( 8.05%) 168060605 ( 1.47%) 124.28
realaud 12951 ( 0.08%) 8196726 ( 0.07%) 632.90
halflif 11 ( 0.00%) 1422 ( 0.00%) 129.27
starcra 10 ( 0.00%) 1612 ( 0.00%) 161.20
everque 8 ( 0.00%) 694 ( 0.00%) 86.75
unreal 2 ( 0.00%) 180 ( 0.00%) 90.00
quake 5 ( 0.00%) 424 ( 0.00%) 84.80
cuseeme 1 ( 0.00%) 79 ( 0.00%) 79.00
other 302385 ( 1.80%) 194857532 ( 1.70%) 644.40
icmp 223937 ( 1.33%) 19247226 ( 0.17%) 85.95
ipip 344 ( 0.00%) 40212 ( 0.00%) 116.90
ip6 706 ( 0.00%) 97033 ( 0.00%) 137.44
other 272846 ( 1.63%) 156128929 ( 1.37%) 572.22
frag 1771 ( 0.01%) 1955784 ( 0.02%) 1104.34
ip6 85720 ( 0.51%) 48315086 ( 0.42%) 563.64
tcp6 32643 ( 0.19%) 39608882 ( 0.35%) 1213.40
http(s) 132 ( 0.00%) 90982 ( 0.00%) 689.26
http(c) 1775 ( 0.01%) 264751 ( 0.00%) 149.16
smtp 233 ( 0.00%) 102565 ( 0.00%) 440.19
pop3 58 ( 0.00%) 5224 ( 0.00%) 90.07
ssh 909 ( 0.01%) 194574 ( 0.00%) 214.05
bgp 120 ( 0.00%) 12420 ( 0.00%) 103.50
other 29416 ( 0.18%) 38938366 ( 0.34%) 1323.71
udp6 39610 ( 0.24%) 6907919 ( 0.06%) 174.40
dns 39518 ( 0.24%) 6895485 ( 0.06%) 174.49
other 92 ( 0.00%) 12434 ( 0.00%) 135.15
icmp6 9763 ( 0.06%) 1302248 ( 0.01%) 133.39
ip6 142 ( 0.00%) 21501 ( 0.00%) 151.42
ipsec6 3532 ( 0.02%) 470456 ( 0.00%) 133.20
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200703121400.dump.gz (445.28 MB)