Traffic Trace Info
DumpFile: 200703201400.dump
FileSize: 1433.90MB
Id: 200703201400
StartTime: Tue Mar 20 14:00:01 2007
EndTime: Tue Mar 20 14:15:01 2007
TotalTime: 899.88 seconds
TotalCapSize: 1127.82MB CapLen: 96 bytes
# of packets: 20059033 (10209.89MB)
AvgRate: 95.16Mbps stddev:15.30M
IP flow (unique src/dst pair) Information
# of flows: 528031 (avg. 37.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 2.4% 1.8% 1.1% 0.8% 0.8% 0.8% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 301143
Top 10 bandwidth usage (bytes/total in %):
11.7% 10.1% 8.2% 4.9% 4.6% 4.4% 4.1% 3.1% 3.0% 2.5%
# of IPv6 addresses: 1437
Top 10 bandwidth usage (bytes/total in %):
61.4% 61.1% 8.9% 8.9% 8.7% 8.7% 4.7% 3.7% 3.3% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703201400.pktlen.png)
detailed numbers
[ 32- 63]: 4307160
[ 64- 127]: 7961177
[ 128- 255]: 587000
[ 256- 511]: 521751
[ 512- 1023]: 427089
[ 1024- 2047]: 6254856
Protocol Breakdown
![[protocol breakdown chart]](200703201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20059033 (100.00%) 10705846187 (100.00%) 533.72
ip 19853616 ( 98.98%) 10640022480 ( 99.39%) 535.92
tcp 17667973 ( 88.08%) 10266844170 ( 95.90%) 581.10
http(s) 5221272 ( 26.03%) 6788643978 ( 63.41%) 1300.19
http(c) 3983988 ( 19.86%) 576232731 ( 5.38%) 144.64
squid 312433 ( 1.56%) 143181378 ( 1.34%) 458.28
smtp 430107 ( 2.14%) 129380033 ( 1.21%) 300.81
nntp 3498 ( 0.02%) 668535 ( 0.01%) 191.12
ftp 4005947 ( 19.97%) 324202371 ( 3.03%) 80.93
pop3 8490 ( 0.04%) 4107164 ( 0.04%) 483.76
imap 5334 ( 0.03%) 1794625 ( 0.02%) 336.45
telnet 2542 ( 0.01%) 338111 ( 0.00%) 133.01
ssh 28517 ( 0.14%) 2488090 ( 0.02%) 87.25
dns 2088 ( 0.01%) 1752015 ( 0.02%) 839.09
bgp 1185 ( 0.01%) 138118 ( 0.00%) 116.56
napster 160 ( 0.00%) 52902 ( 0.00%) 330.64
realaud 507 ( 0.00%) 151511 ( 0.00%) 298.84
rtsp 37197 ( 0.19%) 12966061 ( 0.12%) 348.58
icecast 559 ( 0.00%) 120047 ( 0.00%) 214.75
other 3624142 ( 18.07%) 2280626080 ( 21.30%) 629.29
udp 1779746 ( 8.87%) 280632002 ( 2.62%) 157.68
dns 1325682 ( 6.61%) 166099552 ( 1.55%) 125.29
realaud 7301 ( 0.04%) 3491164 ( 0.03%) 478.18
halflif 15 ( 0.00%) 2380 ( 0.00%) 158.67
starcra 30 ( 0.00%) 3601 ( 0.00%) 120.03
everque 25 ( 0.00%) 3315 ( 0.00%) 132.60
unreal 3 ( 0.00%) 222 ( 0.00%) 74.00
quake 124829 ( 0.62%) 29033772 ( 0.27%) 232.59
cuseeme 7 ( 0.00%) 659 ( 0.00%) 94.14
other 321825 ( 1.60%) 81994063 ( 0.77%) 254.78
icmp 244436 ( 1.22%) 21340699 ( 0.20%) 87.31
ipip 336 ( 0.00%) 40420 ( 0.00%) 120.30
ip6 712 ( 0.00%) 90048 ( 0.00%) 126.47
other 160413 ( 0.80%) 71075141 ( 0.66%) 443.08
frag 669 ( 0.00%) 542578 ( 0.01%) 811.03
ip6 205414 ( 1.02%) 65823527 ( 0.61%) 320.44
tcp6 146923 ( 0.73%) 55937299 ( 0.52%) 380.73
http(s) 219 ( 0.00%) 170049 ( 0.00%) 776.48
http(c) 112431 ( 0.56%) 9259480 ( 0.09%) 82.36
squid 3 ( 0.00%) 234 ( 0.00%) 78.00
smtp 253 ( 0.00%) 61901 ( 0.00%) 244.67
ftp 27 ( 0.00%) 3771 ( 0.00%) 139.67
ssh 241 ( 0.00%) 147222 ( 0.00%) 610.88
dns 14 ( 0.00%) 1264 ( 0.00%) 90.29
bgp 156 ( 0.00%) 18487 ( 0.00%) 118.51
other 33579 ( 0.17%) 46274891 ( 0.43%) 1378.09
udp6 50302 ( 0.25%) 8759003 ( 0.08%) 174.13
dns 50230 ( 0.25%) 8751083 ( 0.08%) 174.22
other 72 ( 0.00%) 7920 ( 0.00%) 110.00
icmp6 8141 ( 0.04%) 1103925 ( 0.01%) 135.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 18 ( 0.00%) 19220 ( 0.00%) 1067.78
tcpdump file: 200703201400.dump.gz (569.15 MB)