Traffic Trace Info
DumpFile: 200703271400.dump
FileSize: 1220.35MB
Id: 200703271400
StartTime: Tue Mar 27 14:00:01 2007
EndTime: Tue Mar 27 14:15:00 2007
TotalTime: 899.72 seconds
TotalCapSize: 957.32MB CapLen: 96 bytes
# of packets: 17237300 (10415.22MB)
AvgRate: 97.12Mbps stddev:7.27M
IP flow (unique src/dst pair) Information
# of flows: 486412 (avg. 35.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.3% 1.2% 1.1% 0.9% 0.7% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 245108
Top 10 bandwidth usage (bytes/total in %):
16.3% 10.1% 6.5% 5.9% 2.8% 2.6% 2.5% 2.2% 2.1% 1.9%
# of IPv6 addresses: 1473
Top 10 bandwidth usage (bytes/total in %):
58.6% 48.6% 10.0% 6.5% 6.1% 4.7% 4.1% 3.6% 3.5% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200703271400.pktlen.png)
detailed numbers
[ 32- 63]: 4191665
[ 64- 127]: 4805104
[ 128- 255]: 632578
[ 256- 511]: 643778
[ 512- 1023]: 471330
[ 1024- 2047]: 6492845
Protocol Breakdown
![[protocol breakdown chart]](200703271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17237300 (100.00%) 10921153104 (100.00%) 633.58
ip 17137278 ( 99.42%) 10879955060 ( 99.62%) 634.87
tcp 15280501 ( 88.65%) 10606392039 ( 97.12%) 694.11
http(s) 5775219 ( 33.50%) 7403025531 ( 67.79%) 1281.86
http(c) 4257718 ( 24.70%) 529638434 ( 4.85%) 124.39
squid 829837 ( 4.81%) 382592760 ( 3.50%) 461.05
smtp 421306 ( 2.44%) 86919087 ( 0.80%) 206.31
nntp 3360 ( 0.02%) 334207 ( 0.00%) 99.47
ftp 49150 ( 0.29%) 19483257 ( 0.18%) 396.40
pop3 9005 ( 0.05%) 3930431 ( 0.04%) 436.47
imap 4708 ( 0.03%) 1067096 ( 0.01%) 226.66
telnet 1406 ( 0.01%) 158623 ( 0.00%) 112.82
ssh 344419 ( 2.00%) 49932296 ( 0.46%) 144.98
dns 641 ( 0.00%) 49142 ( 0.00%) 76.66
bgp 1306 ( 0.01%) 159830 ( 0.00%) 122.38
napster 98 ( 0.00%) 23830 ( 0.00%) 243.16
realaud 146 ( 0.00%) 72062 ( 0.00%) 493.58
rtsp 39182 ( 0.23%) 13156044 ( 0.12%) 335.77
icecast 25826 ( 0.15%) 23250463 ( 0.21%) 900.27
hotline 4678 ( 0.03%) 280680 ( 0.00%) 60.00
other 3512488 ( 20.38%) 2092317786 ( 19.16%) 595.68
udp 1566505 ( 9.09%) 237919405 ( 2.18%) 151.88
dns 1186724 ( 6.88%) 155374284 ( 1.42%) 130.93
realaud 39063 ( 0.23%) 18813278 ( 0.17%) 481.61
halflif 5 ( 0.00%) 417 ( 0.00%) 83.40
starcra 11 ( 0.00%) 1307 ( 0.00%) 118.82
everque 15 ( 0.00%) 1414 ( 0.00%) 94.27
unreal 2 ( 0.00%) 411 ( 0.00%) 205.50
quake 24 ( 0.00%) 2127 ( 0.00%) 88.62
cuseeme 7 ( 0.00%) 610 ( 0.00%) 87.14
other 340624 ( 1.98%) 63719144 ( 0.58%) 187.07
icmp 214988 ( 1.25%) 18637432 ( 0.17%) 86.69
ipip 332 ( 0.00%) 39568 ( 0.00%) 119.18
ip6 734 ( 0.00%) 93112 ( 0.00%) 126.86
other 74218 ( 0.43%) 16873504 ( 0.15%) 227.35
frag 816 ( 0.00%) 680446 ( 0.01%) 833.88
ip6 100022 ( 0.58%) 41198044 ( 0.38%) 411.89
tcp6 41761 ( 0.24%) 31198882 ( 0.29%) 747.08
http(s) 3592 ( 0.02%) 4434910 ( 0.04%) 1234.66
http(c) 16440 ( 0.10%) 1849254 ( 0.02%) 112.49
smtp 326 ( 0.00%) 100508 ( 0.00%) 308.31
ftp 30 ( 0.00%) 3170 ( 0.00%) 105.67
telnet 9 ( 0.00%) 786 ( 0.00%) 87.33
ssh 927 ( 0.01%) 196874 ( 0.00%) 212.38
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 152 ( 0.00%) 17624 ( 0.00%) 115.95
other 20278 ( 0.12%) 24595121 ( 0.23%) 1212.90
udp6 45348 ( 0.26%) 8345031 ( 0.08%) 184.02
dns 45210 ( 0.26%) 8331479 ( 0.08%) 184.28
other 138 ( 0.00%) 13552 ( 0.00%) 98.20
icmp6 12862 ( 0.07%) 1627817 ( 0.01%) 126.56
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 21 ( 0.00%) 22234 ( 0.00%) 1058.76
tcpdump file: 200703271400.dump.gz (466.83 MB)