Traffic Trace Info
DumpFile: 200703131400.dump
FileSize: 1226.99MB
Id: 200703131400
StartTime: Tue Mar 13 14:00:00 2007
EndTime: Tue Mar 13 14:15:00 2007
TotalTime: 900.19 seconds
TotalCapSize: 959.87MB CapLen: 96 bytes
# of packets: 17505632 (11452.45MB)
AvgRate: 106.74Mbps stddev:12.38M
IP flow (unique src/dst pair) Information
# of flows: 505567 (avg. 34.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 3.4% 2.6% 2.3% 1.8% 1.7% 1.7% 1.6% 1.6% 1.2%
IP address Information
# of IPv4 addresses: 265507
Top 10 bandwidth usage (bytes/total in %):
12.1% 11.5% 7.1% 6.7% 4.6% 4.5% 3.7% 3.7% 3.4% 2.6%
# of IPv6 addresses: 1443
Top 10 bandwidth usage (bytes/total in %):
19.8% 16.8% 13.0% 8.0% 7.4% 7.2% 7.1% 5.8% 5.5% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703131400.pktlen.png)
detailed numbers
[ 32- 63]: 4062038
[ 64- 127]: 4547965
[ 128- 255]: 696196
[ 256- 511]: 505873
[ 512- 1023]: 395977
[ 1024- 2047]: 7297583
Protocol Breakdown
![[protocol breakdown chart]](200703131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17505632 (100.00%) 12008762031 (100.00%) 685.99
ip 17393050 ( 99.36%) 11993227886 ( 99.87%) 689.54
tcp 14558520 ( 83.16%) 11177937751 ( 93.08%) 767.79
http(s) 6907302 ( 39.46%) 8568599142 ( 71.35%) 1240.51
http(c) 3796706 ( 21.69%) 508608639 ( 4.24%) 133.96
squid 503024 ( 2.87%) 276376540 ( 2.30%) 549.43
smtp 402623 ( 2.30%) 109226126 ( 0.91%) 271.29
nntp 10919 ( 0.06%) 5794932 ( 0.05%) 530.72
ftp 36024 ( 0.21%) 5126515 ( 0.04%) 142.31
pop3 11346 ( 0.06%) 2551244 ( 0.02%) 224.86
imap 5207 ( 0.03%) 1950240 ( 0.02%) 374.54
telnet 1970 ( 0.01%) 169399 ( 0.00%) 85.99
ssh 13879 ( 0.08%) 10351965 ( 0.09%) 745.87
dns 2464 ( 0.01%) 1754765 ( 0.01%) 712.16
bgp 1343 ( 0.01%) 176616 ( 0.00%) 131.51
napster 417 ( 0.00%) 312606 ( 0.00%) 749.65
rtsp 52253 ( 0.30%) 39602654 ( 0.33%) 757.90
icecast 1087 ( 0.01%) 651834 ( 0.01%) 599.66
other 2811952 ( 16.06%) 1646684294 ( 13.71%) 585.60
udp 1767801 ( 10.10%) 271466204 ( 2.26%) 153.56
dns 1441363 ( 8.23%) 182863399 ( 1.52%) 126.87
realaud 9086 ( 0.05%) 6310276 ( 0.05%) 694.51
halflif 16 ( 0.00%) 2097 ( 0.00%) 131.06
starcra 9 ( 0.00%) 2454 ( 0.00%) 272.67
everque 8 ( 0.00%) 728 ( 0.00%) 91.00
unreal 15 ( 0.00%) 2308 ( 0.00%) 153.87
quake 8 ( 0.00%) 706 ( 0.00%) 88.25
cuseeme 2 ( 0.00%) 161 ( 0.00%) 80.50
other 317228 ( 1.81%) 82277075 ( 0.69%) 259.36
icmp 277724 ( 1.59%) 24347382 ( 0.20%) 87.67
ipip 344 ( 0.00%) 40732 ( 0.00%) 118.41
ip6 707 ( 0.00%) 86208 ( 0.00%) 121.93
other 787954 ( 4.50%) 519349609 ( 4.32%) 659.11
frag 848 ( 0.00%) 693303 ( 0.01%) 817.57
ip6 112579 ( 0.64%) 15533965 ( 0.13%) 137.98
tcp6 41231 ( 0.24%) 4384709 ( 0.04%) 106.34
http(s) 250 ( 0.00%) 176598 ( 0.00%) 706.39
http(c) 33542 ( 0.19%) 3293211 ( 0.03%) 98.18
smtp 268 ( 0.00%) 72783 ( 0.00%) 271.58
ftp 69 ( 0.00%) 47324 ( 0.00%) 685.86
pop3 6 ( 0.00%) 564 ( 0.00%) 94.00
ssh 228 ( 0.00%) 84696 ( 0.00%) 371.47
bgp 120 ( 0.00%) 12420 ( 0.00%) 103.50
other 6748 ( 0.04%) 697113 ( 0.01%) 103.31
udp6 63745 ( 0.36%) 10002628 ( 0.08%) 156.92
dns 63661 ( 0.36%) 9993820 ( 0.08%) 156.98
other 84 ( 0.00%) 8808 ( 0.00%) 104.86
icmp6 7411 ( 0.04%) 1113887 ( 0.01%) 150.30
ip6 157 ( 0.00%) 23227 ( 0.00%) 147.94
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5 ( 0.00%) 5434 ( 0.00%) 1086.80
tcpdump file: 200703131400.dump.gz (446.31 MB)