Traffic Trace Info
DumpFile: 200704201400.dump
FileSize: 1677.76MB
Id: 200704201400
StartTime: Fri Apr 20 14:00:01 2007
EndTime: Fri Apr 20 14:15:00 2007
TotalTime: 899.54 seconds
TotalCapSize: 1315.59MB CapLen: 96 bytes
# of packets: 23734818 (15734.45MB)
AvgRate: 146.76Mbps stddev:14.02M
IP flow (unique src/dst pair) Information
# of flows: 588120 (avg. 40.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 1.9% 1.9% 1.3% 1.1% 1.0% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 336078
Top 10 bandwidth usage (bytes/total in %):
10.1% 8.0% 7.1% 4.2% 3.7% 3.6% 3.1% 2.5% 2.2% 2.1%
# of IPv6 addresses: 1477
Top 10 bandwidth usage (bytes/total in %):
30.5% 30.4% 11.6% 11.4% 11.3% 7.3% 4.6% 3.6% 3.5% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200704201400.pktlen.png)
detailed numbers
[ 32- 63]: 5889593
[ 64- 127]: 5941711
[ 128- 255]: 535436
[ 256- 511]: 588604
[ 512- 1023]: 699988
[ 1024- 2047]: 10079486
Protocol Breakdown
![[protocol breakdown chart]](200704201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23734818 (100.00%) 16498769231 (100.00%) 695.13
ip 23637959 ( 99.59%) 16477460334 ( 99.87%) 697.08
tcp 21121157 ( 88.99%) 16012542453 ( 97.05%) 758.13
http(s) 9733129 ( 41.01%) 12857239437 ( 77.93%) 1320.98
http(c) 6974521 ( 29.39%) 867176954 ( 5.26%) 124.33
squid 277632 ( 1.17%) 130628044 ( 0.79%) 470.51
smtp 476514 ( 2.01%) 82225830 ( 0.50%) 172.56
nntp 427 ( 0.00%) 33347 ( 0.00%) 78.10
ftp 74572 ( 0.31%) 39810206 ( 0.24%) 533.85
pop3 22842 ( 0.10%) 22022831 ( 0.13%) 964.14
imap 4297 ( 0.02%) 896772 ( 0.01%) 208.70
telnet 1551 ( 0.01%) 146324 ( 0.00%) 94.34
ssh 23491 ( 0.10%) 2531170 ( 0.02%) 107.75
dns 2050 ( 0.01%) 149468 ( 0.00%) 72.91
bgp 1319 ( 0.01%) 165289 ( 0.00%) 125.31
napster 144 ( 0.00%) 13149 ( 0.00%) 91.31
realaud 226 ( 0.00%) 82586 ( 0.00%) 365.42
rtsp 169811 ( 0.72%) 116211703 ( 0.70%) 684.36
icecast 27325 ( 0.12%) 23213975 ( 0.14%) 849.55
hotline 5 ( 0.00%) 1320 ( 0.00%) 264.00
other 3331299 ( 14.04%) 1869993928 ( 11.33%) 561.34
udp 1962007 ( 8.27%) 400577714 ( 2.43%) 204.17
dns 1165415 ( 4.91%) 161904297 ( 0.98%) 138.92
realaud 10361 ( 0.04%) 4187936 ( 0.03%) 404.20
halflif 18 ( 0.00%) 2711 ( 0.00%) 150.61
starcra 3 ( 0.00%) 737 ( 0.00%) 245.67
everque 171 ( 0.00%) 31575 ( 0.00%) 184.65
unreal 11 ( 0.00%) 1686 ( 0.00%) 153.27
quake 10 ( 0.00%) 807 ( 0.00%) 80.70
cuseeme 2 ( 0.00%) 164 ( 0.00%) 82.00
other 785766 ( 3.31%) 234427327 ( 1.42%) 298.34
icmp 411086 ( 1.73%) 38261395 ( 0.23%) 93.07
ipip 341 ( 0.00%) 40304 ( 0.00%) 118.19
ipsec 2752 ( 0.01%) 2892776 ( 0.02%) 1051.15
ip6 541 ( 0.00%) 69220 ( 0.00%) 127.95
other 140075 ( 0.59%) 23076472 ( 0.14%) 164.74
frag 2415 ( 0.01%) 2463927 ( 0.01%) 1020.26
ip6 96859 ( 0.41%) 21308897 ( 0.13%) 220.00
tcp6 33989 ( 0.14%) 9990670 ( 0.06%) 293.94
http(s) 433 ( 0.00%) 307124 ( 0.00%) 709.29
http(c) 14702 ( 0.06%) 1648015 ( 0.01%) 112.09
smtp 327 ( 0.00%) 99404 ( 0.00%) 303.99
nntp 7350 ( 0.03%) 671628 ( 0.00%) 91.38
ftp 54 ( 0.00%) 4903 ( 0.00%) 90.80
pop3 48 ( 0.00%) 4404 ( 0.00%) 91.75
imap 15 ( 0.00%) 3738 ( 0.00%) 249.20
ssh 99 ( 0.00%) 10930 ( 0.00%) 110.40
dns 542 ( 0.00%) 64657 ( 0.00%) 119.29
bgp 240 ( 0.00%) 23356 ( 0.00%) 97.32
other 10179 ( 0.04%) 7152511 ( 0.04%) 702.67
udp6 37236 ( 0.16%) 7635110 ( 0.05%) 205.05
dns 37113 ( 0.16%) 7617715 ( 0.05%) 205.26
other 123 ( 0.00%) 17395 ( 0.00%) 141.42
icmp6 9226 ( 0.04%) 1221811 ( 0.01%) 132.43
ip6 16372 ( 0.07%) 2454938 ( 0.01%) 149.95
pim6 34 ( 0.00%) 4504 ( 0.00%) 132.47
other6 2 ( 0.00%) 1864 ( 0.00%) 932.00
tcpdump file: 200704201400.dump.gz (610.57 MB)