Traffic Trace Info
DumpFile: 200703191400.dump
FileSize: 1304.15MB
Id: 200703191400
StartTime: Mon Mar 19 14:00:01 2007
EndTime: Mon Mar 19 14:15:01 2007
TotalTime: 899.60 seconds
TotalCapSize: 1016.85MB CapLen: 96 bytes
# of packets: 18827754 (12039.56MB)
AvgRate: 112.28Mbps stddev:7.80M
IP flow (unique src/dst pair) Information
# of flows: 415905 (avg. 45.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.8% 9.5% 5.7% 1.1% 1.0% 1.0% 0.9% 0.8% 0.7% 0.5%
IP address Information
# of IPv4 addresses: 209565
Top 10 bandwidth usage (bytes/total in %):
21.1% 15.2% 10.6% 9.7% 9.0% 8.6% 5.9% 5.4% 3.6% 1.5%
# of IPv6 addresses: 1389
Top 10 bandwidth usage (bytes/total in %):
78.1% 51.9% 19.6% 3.6% 3.3% 3.0% 2.7% 2.6% 2.4% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703191400.pktlen.png)
detailed numbers
[ 32- 63]: 4797013
[ 64- 127]: 4357153
[ 128- 255]: 544808
[ 256- 511]: 408371
[ 512- 1023]: 1463263
[ 1024- 2047]: 7257146
Protocol Breakdown
![[protocol breakdown chart]](200703191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18827754 (100.00%) 12624392740 (100.00%) 670.52
ip 18730830 ( 99.49%) 12567119355 ( 99.55%) 670.93
tcp 16881086 ( 89.66%) 12202397836 ( 96.66%) 722.84
http(s) 5489365 ( 29.16%) 7395014292 ( 58.58%) 1347.15
http(c) 3646721 ( 19.37%) 405772313 ( 3.21%) 111.27
squid 233404 ( 1.24%) 119340837 ( 0.95%) 511.31
smtp 334580 ( 1.78%) 72306572 ( 0.57%) 216.11
nntp 8451 ( 0.04%) 7886375 ( 0.06%) 933.19
ftp 669888 ( 3.56%) 65142447 ( 0.52%) 97.24
pop3 59744 ( 0.32%) 7506227 ( 0.06%) 125.64
imap 6272 ( 0.03%) 2272977 ( 0.02%) 362.40
telnet 2537 ( 0.01%) 267023 ( 0.00%) 105.25
ssh 418301 ( 2.22%) 66501007 ( 0.53%) 158.98
dns 2516 ( 0.01%) 1773928 ( 0.01%) 705.06
bgp 964 ( 0.01%) 105386 ( 0.00%) 109.32
napster 615 ( 0.00%) 454876 ( 0.00%) 739.64
realaud 955 ( 0.01%) 111594 ( 0.00%) 116.85
rtsp 49281 ( 0.26%) 41223260 ( 0.33%) 836.49
icecast 2509 ( 0.01%) 2636197 ( 0.02%) 1050.70
other 5954944 ( 31.63%) 4014079503 ( 31.80%) 674.08
udp 1290784 ( 6.86%) 198038121 ( 1.57%) 153.42
dns 1064426 ( 5.65%) 135732770 ( 1.08%) 127.52
realaud 32 ( 0.00%) 5353 ( 0.00%) 167.28
halflif 18 ( 0.00%) 2475 ( 0.00%) 137.50
starcra 10 ( 0.00%) 1321 ( 0.00%) 132.10
everque 17 ( 0.00%) 1880 ( 0.00%) 110.59
unreal 3 ( 0.00%) 316 ( 0.00%) 105.33
quake 1766 ( 0.01%) 281140 ( 0.00%) 159.20
cuseeme 1 ( 0.00%) 70 ( 0.00%) 70.00
other 224493 ( 1.19%) 62010157 ( 0.49%) 276.22
icmp 254118 ( 1.35%) 69906752 ( 0.55%) 275.10
ipip 362 ( 0.00%) 43364 ( 0.00%) 119.79
ip6 521 ( 0.00%) 94063 ( 0.00%) 180.54
other 303959 ( 1.61%) 96639219 ( 0.77%) 317.94
frag 1553 ( 0.01%) 1248691 ( 0.01%) 804.05
ip6 96924 ( 0.51%) 57273385 ( 0.45%) 590.91
tcp6 45487 ( 0.24%) 48766796 ( 0.39%) 1072.10
http(s) 3195 ( 0.02%) 4005693 ( 0.03%) 1253.74
http(c) 8995 ( 0.05%) 1215686 ( 0.01%) 135.15
squid 6 ( 0.00%) 524 ( 0.00%) 87.33
smtp 444 ( 0.00%) 119232 ( 0.00%) 268.54
nntp 5 ( 0.00%) 490 ( 0.00%) 98.00
ftp 119 ( 0.00%) 14632 ( 0.00%) 122.96
pop3 22 ( 0.00%) 1992 ( 0.00%) 90.55
ssh 29 ( 0.00%) 3286 ( 0.00%) 113.31
bgp 346 ( 0.00%) 73036 ( 0.00%) 211.09
icecast 3 ( 0.00%) 262 ( 0.00%) 87.33
other 32323 ( 0.17%) 43331963 ( 0.34%) 1340.59
udp6 34372 ( 0.18%) 6030603 ( 0.05%) 175.45
dns 34118 ( 0.18%) 6004855 ( 0.05%) 176.00
other 254 ( 0.00%) 25748 ( 0.00%) 101.37
icmp6 7775 ( 0.04%) 928600 ( 0.01%) 119.43
ip6 9158 ( 0.05%) 1521995 ( 0.01%) 166.19
pim6 120 ( 0.00%) 14932 ( 0.00%) 124.43
other6 12 ( 0.00%) 10459 ( 0.00%) 871.58
tcpdump file: 200703191400.dump.gz (471.97 MB)