Traffic Trace Info
DumpFile: 200703261400.dump
FileSize: 1310.43MB
Id: 200703261400
StartTime: Mon Mar 26 14:00:00 2007
EndTime: Mon Mar 26 14:15:01 2007
TotalTime: 900.62 seconds
TotalCapSize: 1027.04MB CapLen: 96 bytes
# of packets: 18571807 (11683.99MB)
AvgRate: 108.83Mbps stddev:14.50M
IP flow (unique src/dst pair) Information
# of flows: 415727 (avg. 44.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.8% 3.6% 2.3% 1.2% 1.1% 0.9% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 196638
Top 10 bandwidth usage (bytes/total in %):
15.1% 7.2% 5.8% 4.3% 4.3% 3.9% 3.7% 3.7% 2.9% 2.9%
# of IPv6 addresses: 1326
Top 10 bandwidth usage (bytes/total in %):
73.4% 73.4% 3.2% 2.6% 2.6% 2.5% 2.3% 1.8% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703261400.pktlen.png)
detailed numbers
[ 32- 63]: 4531536
[ 64- 127]: 4986921
[ 128- 255]: 581578
[ 256- 511]: 665345
[ 512- 1023]: 467745
[ 1024- 2047]: 7338682
Protocol Breakdown
![[protocol breakdown chart]](200703261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18571807 (100.00%) 12251548217 (100.00%) 659.69
ip 18466854 ( 99.43%) 12205165735 ( 99.62%) 660.92
tcp 16501451 ( 88.85%) 11881536334 ( 96.98%) 720.03
http(s) 6147615 ( 33.10%) 8069152387 ( 65.86%) 1312.57
http(c) 4523721 ( 24.36%) 547445709 ( 4.47%) 121.02
squid 912962 ( 4.92%) 350071980 ( 2.86%) 383.45
smtp 434920 ( 2.34%) 96513439 ( 0.79%) 221.91
nntp 2570 ( 0.01%) 329525 ( 0.00%) 128.22
ftp 133803 ( 0.72%) 155853224 ( 1.27%) 1164.80
pop3 12959 ( 0.07%) 4061135 ( 0.03%) 313.38
imap 4019 ( 0.02%) 1018225 ( 0.01%) 253.35
telnet 1522 ( 0.01%) 133244 ( 0.00%) 87.55
ssh 3438 ( 0.02%) 382692 ( 0.00%) 111.31
dns 1049 ( 0.01%) 77450 ( 0.00%) 73.83
bgp 985 ( 0.01%) 120210 ( 0.00%) 122.04
napster 677 ( 0.00%) 403352 ( 0.00%) 595.79
realaud 9 ( 0.00%) 1402 ( 0.00%) 155.78
rtsp 88013 ( 0.47%) 55324739 ( 0.45%) 628.60
icecast 2727 ( 0.01%) 240801 ( 0.00%) 88.30
hotline 4914 ( 0.03%) 294840 ( 0.00%) 60.00
other 4225539 ( 22.75%) 2600111418 ( 21.22%) 615.33
udp 1527135 ( 8.22%) 227983132 ( 1.86%) 149.29
dns 1225464 ( 6.60%) 159609530 ( 1.30%) 130.24
realaud 133 ( 0.00%) 9404 ( 0.00%) 70.71
halflif 2 ( 0.00%) 160 ( 0.00%) 80.00
starcra 7 ( 0.00%) 1314 ( 0.00%) 187.71
everque 9 ( 0.00%) 1404 ( 0.00%) 156.00
unreal 2 ( 0.00%) 174 ( 0.00%) 87.00
quake 5 ( 0.00%) 413 ( 0.00%) 82.60
cuseeme 3 ( 0.00%) 282 ( 0.00%) 94.00
other 301500 ( 1.62%) 68359086 ( 0.56%) 226.73
icmp 187584 ( 1.01%) 16717075 ( 0.14%) 89.12
ipip 349 ( 0.00%) 43602 ( 0.00%) 124.93
ip6 720 ( 0.00%) 117508 ( 0.00%) 163.21
other 249615 ( 1.34%) 78768084 ( 0.64%) 315.56
frag 776 ( 0.00%) 643838 ( 0.01%) 829.69
ip6 104953 ( 0.57%) 46382482 ( 0.38%) 441.94
tcp6 43840 ( 0.24%) 37372090 ( 0.31%) 852.47
http(s) 966 ( 0.01%) 796014 ( 0.01%) 824.03
http(c) 14901 ( 0.08%) 1856076 ( 0.02%) 124.56
squid 62 ( 0.00%) 4836 ( 0.00%) 78.00
smtp 299 ( 0.00%) 66313 ( 0.00%) 221.78
ssh 920 ( 0.00%) 194908 ( 0.00%) 211.86
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 167 ( 0.00%) 20712 ( 0.00%) 124.02
other 26518 ( 0.14%) 34432596 ( 0.28%) 1298.46
udp6 46938 ( 0.25%) 7062085 ( 0.06%) 150.46
dns 46841 ( 0.25%) 7050474 ( 0.06%) 150.52
other 97 ( 0.00%) 11611 ( 0.00%) 119.70
icmp6 12284 ( 0.07%) 1688130 ( 0.01%) 137.43
ipsec6 1849 ( 0.01%) 239890 ( 0.00%) 129.74
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 16207 ( 0.00%) 1350.58
tcpdump file: 200703261400.dump.gz (484.85 MB)