Traffic Trace Info
DumpFile: 200704161400.dump
FileSize: 1642.10MB
Id: 200704161400
StartTime: Mon Apr 16 14:00:00 2007
EndTime: Mon Apr 16 14:15:00 2007
TotalTime: 899.78 seconds
TotalCapSize: 1283.42MB CapLen: 96 bytes
# of packets: 23476196 (14954.70MB)
AvgRate: 139.42Mbps stddev:14.80M
IP flow (unique src/dst pair) Information
# of flows: 590077 (avg. 39.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 5.2% 2.7% 1.5% 1.4% 1.3% 1.1% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 308929
Top 10 bandwidth usage (bytes/total in %):
10.8% 7.8% 7.3% 5.9% 5.4% 5.3% 5.3% 2.9% 2.8% 2.8%
# of IPv6 addresses: 1420
Top 10 bandwidth usage (bytes/total in %):
72.9% 72.9% 7.5% 5.4% 3.9% 2.6% 2.2% 2.2% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200704161400.pktlen.png)
detailed numbers
[ 32- 63]: 5814559
[ 64- 127]: 6198150
[ 128- 255]: 699683
[ 256- 511]: 648734
[ 512- 1023]: 676547
[ 1024- 2047]: 9438523
Protocol Breakdown
![[protocol breakdown chart]](200704161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23476196 (100.00%) 15681136352 (100.00%) 667.96
ip 23323516 ( 99.35%) 15583000621 ( 99.37%) 668.12
tcp 19984531 ( 85.13%) 14372416203 ( 91.65%) 719.18
http(s) 7284253 ( 31.03%) 9532784019 ( 60.79%) 1308.68
http(c) 5833673 ( 24.85%) 807789193 ( 5.15%) 138.47
squid 331269 ( 1.41%) 226493483 ( 1.44%) 683.71
smtp 319622 ( 1.36%) 72363190 ( 0.46%) 226.40
nntp 512 ( 0.00%) 49969 ( 0.00%) 97.60
ftp 45373 ( 0.19%) 11274954 ( 0.07%) 248.49
pop3 7759 ( 0.03%) 1720095 ( 0.01%) 221.69
imap 7489 ( 0.03%) 3486123 ( 0.02%) 465.50
telnet 2436 ( 0.01%) 224833 ( 0.00%) 92.30
ssh 724397 ( 3.09%) 104186875 ( 0.66%) 143.83
dns 13947 ( 0.06%) 5592138 ( 0.04%) 400.96
bgp 1048 ( 0.00%) 151532 ( 0.00%) 144.59
napster 873 ( 0.00%) 831659 ( 0.01%) 952.64
realaud 56 ( 0.00%) 9350 ( 0.00%) 166.96
rtsp 245847 ( 1.05%) 187763819 ( 1.20%) 763.74
icecast 4204 ( 0.02%) 255321 ( 0.00%) 60.73
other 5161654 ( 21.99%) 3417430002 ( 21.79%) 662.08
udp 1984419 ( 8.45%) 296404800 ( 1.89%) 149.37
dns 1143151 ( 4.87%) 151098230 ( 0.96%) 132.18
realaud 5589 ( 0.02%) 2691430 ( 0.02%) 481.56
halflif 6 ( 0.00%) 1291 ( 0.00%) 215.17
starcra 10 ( 0.00%) 1107 ( 0.00%) 110.70
everque 24 ( 0.00%) 2509 ( 0.00%) 104.54
unreal 5 ( 0.00%) 584 ( 0.00%) 116.80
quake 10 ( 0.00%) 2176 ( 0.00%) 217.60
cuseeme 4 ( 0.00%) 345 ( 0.00%) 86.25
other 835556 ( 3.56%) 142591958 ( 0.91%) 170.66
icmp 502917 ( 2.14%) 44889879 ( 0.29%) 89.26
ipip 343 ( 0.00%) 40186 ( 0.00%) 117.16
ip6 7553 ( 0.03%) 5344189 ( 0.03%) 707.56
other 843753 ( 3.59%) 863905364 ( 5.51%) 1023.88
frag 16965 ( 0.07%) 21676721 ( 0.14%) 1277.73
ip6 152680 ( 0.65%) 98135731 ( 0.63%) 642.75
tcp6 82862 ( 0.35%) 79658629 ( 0.51%) 961.34
http(s) 4229 ( 0.02%) 4765936 ( 0.03%) 1126.97
http(c) 18422 ( 0.08%) 1962456 ( 0.01%) 106.53
squid 4 ( 0.00%) 336 ( 0.00%) 84.00
smtp 660 ( 0.00%) 265129 ( 0.00%) 401.71
nntp 6101 ( 0.03%) 584058 ( 0.00%) 95.73
ftp 18 ( 0.00%) 1670 ( 0.00%) 92.78
ssh 62 ( 0.00%) 4840 ( 0.00%) 78.06
dns 490 ( 0.00%) 58412 ( 0.00%) 119.21
bgp 244 ( 0.00%) 24510 ( 0.00%) 100.45
icecast 2 ( 0.00%) 168 ( 0.00%) 84.00
other 52630 ( 0.22%) 71991114 ( 0.46%) 1367.87
udp6 27749 ( 0.12%) 4777302 ( 0.03%) 172.16
dns 27641 ( 0.12%) 4765838 ( 0.03%) 172.42
other 108 ( 0.00%) 11464 ( 0.00%) 106.15
icmp6 15236 ( 0.06%) 4129526 ( 0.03%) 271.04
ip6 26793 ( 0.11%) 9558060 ( 0.06%) 356.74
pim6 31 ( 0.00%) 4176 ( 0.00%) 134.71
other6 9 ( 0.00%) 8038 ( 0.00%) 893.11
tcpdump file: 200704161400.dump.gz (601.89 MB)