Traffic Trace Info
DumpFile: 200703251400.dump
FileSize: 1049.48MB
Id: 200703251400
StartTime: Sun Mar 25 14:00:00 2007
EndTime: Sun Mar 25 14:15:00 2007
TotalTime: 900.38 seconds
TotalCapSize: 825.68MB CapLen: 96 bytes
# of packets: 14666678 (8034.01MB)
AvgRate: 74.85Mbps stddev:8.15M
IP flow (unique src/dst pair) Information
# of flows: 413698 (avg. 35.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.4% 3.9% 1.0% 0.9% 0.8% 0.8% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 227337
Top 10 bandwidth usage (bytes/total in %):
23.4% 19.8% 8.7% 5.2% 4.7% 4.7% 4.1% 4.0% 3.3% 2.0%
# of IPv6 addresses: 1250
Top 10 bandwidth usage (bytes/total in %):
65.7% 65.7% 9.7% 3.8% 3.2% 2.7% 2.4% 2.0% 1.6% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703251400.pktlen.png)
detailed numbers
[ 32- 63]: 2886958
[ 64- 127]: 5065767
[ 128- 255]: 901038
[ 256- 511]: 472034
[ 512- 1023]: 517128
[ 1024- 2047]: 4823753
Protocol Breakdown
![[protocol breakdown chart]](200703251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14666678 (100.00%) 8424270915 (100.00%) 574.38
ip 14548004 ( 99.19%) 8384328821 ( 99.53%) 576.32
tcp 12839337 ( 87.54%) 8094145348 ( 96.08%) 630.42
http(s) 3460359 ( 23.59%) 4531065623 ( 53.79%) 1309.42
http(c) 2248673 ( 15.33%) 247821870 ( 2.94%) 110.21
squid 755488 ( 5.15%) 385664192 ( 4.58%) 510.48
smtp 380292 ( 2.59%) 113278915 ( 1.34%) 297.87
nntp 3569 ( 0.02%) 1389492 ( 0.02%) 389.32
ftp 75789 ( 0.52%) 20636610 ( 0.24%) 272.29
pop3 4229 ( 0.03%) 2917659 ( 0.03%) 689.92
imap 1531 ( 0.01%) 192667 ( 0.00%) 125.84
telnet 407 ( 0.00%) 53551 ( 0.00%) 131.57
ssh 2572747 ( 17.54%) 440676246 ( 5.23%) 171.29
dns 793 ( 0.01%) 57223 ( 0.00%) 72.16
bgp 876 ( 0.01%) 102738 ( 0.00%) 117.28
napster 122 ( 0.00%) 13684 ( 0.00%) 112.16
realaud 403 ( 0.00%) 49024 ( 0.00%) 121.65
rtsp 4514 ( 0.03%) 351153 ( 0.00%) 77.79
icecast 61 ( 0.00%) 4176 ( 0.00%) 68.46
hotline 24 ( 0.00%) 2656 ( 0.00%) 110.67
other 3329452 ( 22.70%) 2349867389 ( 27.89%) 705.78
udp 1397982 ( 9.53%) 256071302 ( 3.04%) 183.17
dns 958968 ( 6.54%) 119221818 ( 1.42%) 124.32
realaud 15 ( 0.00%) 2180 ( 0.00%) 145.33
halflif 7 ( 0.00%) 498 ( 0.00%) 71.14
starcra 17 ( 0.00%) 3676 ( 0.00%) 216.24
everque 40 ( 0.00%) 9299 ( 0.00%) 232.47
unreal 36 ( 0.00%) 12767 ( 0.00%) 354.64
quake 3 ( 0.00%) 247 ( 0.00%) 82.33
cuseeme 2 ( 0.00%) 199 ( 0.00%) 99.50
other 438878 ( 2.99%) 136818335 ( 1.62%) 311.75
icmp 232106 ( 1.58%) 19979859 ( 0.24%) 86.08
ipip 346 ( 0.00%) 42772 ( 0.00%) 123.62
ip6 634 ( 0.00%) 79398 ( 0.00%) 125.23
other 77599 ( 0.53%) 14010142 ( 0.17%) 180.55
frag 850 ( 0.01%) 695342 ( 0.01%) 818.05
ip6 118671 ( 0.81%) 39941914 ( 0.47%) 336.58
tcp6 30989 ( 0.21%) 28128863 ( 0.33%) 907.70
http(s) 108 ( 0.00%) 61095 ( 0.00%) 565.69
http(c) 9859 ( 0.07%) 1374573 ( 0.02%) 139.42
smtp 217 ( 0.00%) 63224 ( 0.00%) 291.35
ftp 18 ( 0.00%) 1670 ( 0.00%) 92.78
ssh 240 ( 0.00%) 85752 ( 0.00%) 357.30
dns 7 ( 0.00%) 632 ( 0.00%) 90.29
bgp 150 ( 0.00%) 17202 ( 0.00%) 114.68
other 20390 ( 0.14%) 26524715 ( 0.31%) 1300.87
udp6 75709 ( 0.52%) 10105350 ( 0.12%) 133.48
dns 75634 ( 0.52%) 10097100 ( 0.12%) 133.50
other 75 ( 0.00%) 8250 ( 0.00%) 110.00
icmp6 11936 ( 0.08%) 1698053 ( 0.02%) 142.26
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7 ( 0.00%) 5568 ( 0.00%) 795.43
tcpdump file: 200703251400.dump.gz (409.87 MB)