Traffic Trace Info
DumpFile: 200703151400.dump
FileSize: 1219.73MB
Id: 200703151400
StartTime: Thu Mar 15 14:00:00 2007
EndTime: Thu Mar 15 14:15:00 2007
TotalTime: 900.00 seconds
TotalCapSize: 956.33MB CapLen: 96 bytes
# of packets: 17261234 (10976.97MB)
AvgRate: 102.32Mbps stddev:12.06M
IP flow (unique src/dst pair) Information
# of flows: 483552 (avg. 35.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.5% 2.1% 1.8% 1.5% 1.3% 1.2% 1.2% 1.2% 0.8%
IP address Information
# of IPv4 addresses: 242268
Top 10 bandwidth usage (bytes/total in %):
13.6% 11.3% 9.9% 7.5% 3.5% 3.2% 2.7% 2.6% 2.1% 2.1%
# of IPv6 addresses: 1389
Top 10 bandwidth usage (bytes/total in %):
68.2% 68.2% 5.4% 5.2% 3.6% 2.6% 1.9% 1.7% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703151400.pktlen.png)
detailed numbers
[ 32- 63]: 4025432
[ 64- 127]: 4792649
[ 128- 255]: 538285
[ 256- 511]: 468058
[ 512- 1023]: 480214
[ 1024- 2047]: 6956596
Protocol Breakdown
![[protocol breakdown chart]](200703151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17261234 (100.00%) 11510190889 (100.00%) 666.82
ip 17168488 ( 99.46%) 11474532046 ( 99.69%) 668.35
tcp 14828009 ( 85.90%) 11118619514 ( 96.60%) 749.84
http(s) 6766706 ( 39.20%) 8894350886 ( 77.27%) 1314.43
http(c) 4122317 ( 23.88%) 554860815 ( 4.82%) 134.60
squid 249720 ( 1.45%) 79735393 ( 0.69%) 319.30
smtp 496090 ( 2.87%) 159169053 ( 1.38%) 320.85
nntp 8329 ( 0.05%) 2856641 ( 0.02%) 342.98
ftp 64754 ( 0.38%) 7537972 ( 0.07%) 116.41
pop3 13988 ( 0.08%) 8904120 ( 0.08%) 636.55
imap 7085 ( 0.04%) 3818582 ( 0.03%) 538.97
telnet 1567 ( 0.01%) 136213 ( 0.00%) 86.93
ssh 305220 ( 1.77%) 52684640 ( 0.46%) 172.61
dns 10609 ( 0.06%) 4172208 ( 0.04%) 393.27
bgp 1147 ( 0.01%) 141946 ( 0.00%) 123.75
napster 10 ( 0.00%) 808 ( 0.00%) 80.80
realaud 343 ( 0.00%) 154463 ( 0.00%) 450.33
rtsp 28003 ( 0.16%) 8737478 ( 0.08%) 312.02
icecast 8076 ( 0.05%) 11241356 ( 0.10%) 1391.95
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 2744025 ( 15.90%) 1330115734 ( 11.56%) 484.73
udp 1702776 ( 9.86%) 239656539 ( 2.08%) 140.74
dns 1412394 ( 8.18%) 175382221 ( 1.52%) 124.17
realaud 8 ( 0.00%) 1010 ( 0.00%) 126.25
halflif 3 ( 0.00%) 235 ( 0.00%) 78.33
starcra 11 ( 0.00%) 1457 ( 0.00%) 132.45
everque 13 ( 0.00%) 1375 ( 0.00%) 105.77
unreal 8 ( 0.00%) 953 ( 0.00%) 119.12
quake 19605 ( 0.11%) 3726329 ( 0.03%) 190.07
cuseeme 1 ( 0.00%) 86 ( 0.00%) 86.00
other 270700 ( 1.57%) 60539265 ( 0.53%) 223.64
icmp 387640 ( 2.25%) 64401329 ( 0.56%) 166.14
ipip 342 ( 0.00%) 40356 ( 0.00%) 118.00
ip6 807 ( 0.00%) 97956 ( 0.00%) 121.38
other 248914 ( 1.44%) 51716352 ( 0.45%) 207.77
frag 755 ( 0.00%) 605049 ( 0.01%) 801.39
ip6 92743 ( 0.54%) 35658663 ( 0.31%) 384.49
tcp6 45581 ( 0.26%) 27463929 ( 0.24%) 602.53
http(s) 81 ( 0.00%) 68507 ( 0.00%) 845.77
http(c) 18730 ( 0.11%) 1948383 ( 0.02%) 104.02
smtp 412 ( 0.00%) 107136 ( 0.00%) 260.04
ssh 904 ( 0.01%) 102344 ( 0.00%) 113.21
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 133 ( 0.00%) 14582 ( 0.00%) 109.64
other 25314 ( 0.15%) 25222342 ( 0.22%) 996.38
udp6 39514 ( 0.23%) 7169480 ( 0.06%) 181.44
dns 39436 ( 0.23%) 7160159 ( 0.06%) 181.56
other 78 ( 0.00%) 9321 ( 0.00%) 119.50
icmp6 7437 ( 0.04%) 984255 ( 0.01%) 132.35
ip6 169 ( 0.00%) 27445 ( 0.00%) 162.40
ipsec6 1 ( 0.00%) 122 ( 0.00%) 122.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 10 ( 0.00%) 9216 ( 0.00%) 921.60
tcpdump file: 200703151400.dump.gz (468.80 MB)