Traffic Trace Info
DumpFile: 200703241400.dump
FileSize: 979.25MB
Id: 200703241400
StartTime: Sat Mar 24 14:00:01 2007
EndTime: Sat Mar 24 14:15:00 2007
TotalTime: 899.59 seconds
TotalCapSize: 765.79MB CapLen: 96 bytes
# of packets: 13988917 (7647.29MB)
AvgRate: 71.32Mbps stddev:7.27M
IP flow (unique src/dst pair) Information
# of flows: 407803 (avg. 34.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 2.6% 2.3% 1.6% 1.3% 1.1% 0.9% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 194504
Top 10 bandwidth usage (bytes/total in %):
22.0% 14.0% 8.0% 3.7% 3.1% 2.9% 2.6% 2.4% 2.3% 2.1%
# of IPv6 addresses: 1303
Top 10 bandwidth usage (bytes/total in %):
30.9% 24.1% 12.9% 7.4% 7.3% 6.8% 6.8% 6.6% 5.0% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703241400.pktlen.png)
detailed numbers
[ 32- 63]: 3529466
[ 64- 127]: 4281042
[ 128- 255]: 658680
[ 256- 511]: 450160
[ 512- 1023]: 390756
[ 1024- 2047]: 4678813
Protocol Breakdown
![[protocol breakdown chart]](200703241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13988917 (100.00%) 8018759656 (100.00%) 573.22
ip 13909920 ( 99.44%) 8004632494 ( 99.82%) 575.46
tcp 11858442 ( 84.77%) 7626842407 ( 95.11%) 643.16
http(s) 4192665 ( 29.97%) 5537029829 ( 69.05%) 1320.65
http(c) 3167219 ( 22.64%) 322122738 ( 4.02%) 101.71
squid 608010 ( 4.35%) 169866006 ( 2.12%) 279.38
smtp 425785 ( 3.04%) 86902982 ( 1.08%) 204.10
nntp 9787 ( 0.07%) 5607855 ( 0.07%) 572.99
ftp 26638 ( 0.19%) 4996986 ( 0.06%) 187.59
pop3 4621 ( 0.03%) 3093361 ( 0.04%) 669.41
imap 1747 ( 0.01%) 273610 ( 0.00%) 156.62
telnet 748 ( 0.01%) 85345 ( 0.00%) 114.10
ssh 1007078 ( 7.20%) 149163377 ( 1.86%) 148.12
dns 1068 ( 0.01%) 82731 ( 0.00%) 77.46
bgp 1131 ( 0.01%) 143200 ( 0.00%) 126.61
napster 201 ( 0.00%) 19743 ( 0.00%) 98.22
realaud 40 ( 0.00%) 4098 ( 0.00%) 102.45
rtsp 14015 ( 0.10%) 961296 ( 0.01%) 68.59
icecast 1119 ( 0.01%) 214878 ( 0.00%) 192.03
hotline 2 ( 0.00%) 148 ( 0.00%) 74.00
other 2396552 ( 17.13%) 1346273176 ( 16.79%) 561.75
udp 1459235 ( 10.43%) 237240808 ( 2.96%) 162.58
dns 1100633 ( 7.87%) 137641395 ( 1.72%) 125.06
realaud 2062 ( 0.01%) 124068 ( 0.00%) 60.17
halflif 13 ( 0.00%) 1838 ( 0.00%) 141.38
starcra 7 ( 0.00%) 1234 ( 0.00%) 176.29
everque 19 ( 0.00%) 2096 ( 0.00%) 110.32
unreal 4 ( 0.00%) 689 ( 0.00%) 172.25
quake 8 ( 0.00%) 653 ( 0.00%) 81.62
cuseeme 4 ( 0.00%) 418 ( 0.00%) 104.50
other 356435 ( 2.55%) 99464685 ( 1.24%) 279.05
icmp 201499 ( 1.44%) 18093685 ( 0.23%) 89.80
ipip 334 ( 0.00%) 39528 ( 0.00%) 118.35
ip6 637 ( 0.00%) 87771 ( 0.00%) 137.79
other 389773 ( 2.79%) 122328295 ( 1.53%) 313.84
frag 1098 ( 0.01%) 843603 ( 0.01%) 768.31
ip6 78994 ( 0.56%) 14126982 ( 0.18%) 178.84
tcp6 23341 ( 0.17%) 5411920 ( 0.07%) 231.86
http(s) 244 ( 0.00%) 42545 ( 0.00%) 174.36
http(c) 15413 ( 0.11%) 1259425 ( 0.02%) 81.71
smtp 63 ( 0.00%) 15037 ( 0.00%) 238.68
ftp 2 ( 0.00%) 180 ( 0.00%) 90.00
ssh 928 ( 0.01%) 197656 ( 0.00%) 212.99
bgp 128 ( 0.00%) 13489 ( 0.00%) 105.38
other 6563 ( 0.05%) 3883588 ( 0.05%) 591.74
udp6 45579 ( 0.33%) 7425872 ( 0.09%) 162.92
dns 45533 ( 0.33%) 7420812 ( 0.09%) 162.98
other 46 ( 0.00%) 5060 ( 0.00%) 110.00
icmp6 10028 ( 0.07%) 1265706 ( 0.02%) 126.22
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 16 ( 0.00%) 19404 ( 0.00%) 1212.75
tcpdump file: 200703241400.dump.gz (377.15 MB)