Traffic Trace Info
DumpFile: 200704241400.dump
FileSize: 1758.65MB
Id: 200704241400
StartTime: Tue Apr 24 14:00:01 2007
EndTime: Tue Apr 24 14:15:01 2007
TotalTime: 899.97 seconds
TotalCapSize: 1375.03MB CapLen: 96 bytes
# of packets: 25140158 (17741.08MB)
AvgRate: 165.36Mbps stddev:7.90M
IP flow (unique src/dst pair) Information
# of flows: 549629 (avg. 45.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.6% 1.8% 1.4% 1.4% 1.3% 1.2% 1.1% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 281521
Top 10 bandwidth usage (bytes/total in %):
8.2% 7.2% 7.1% 4.2% 3.6% 3.1% 3.0% 3.0% 2.9% 2.7%
# of IPv6 addresses: 1395
Top 10 bandwidth usage (bytes/total in %):
54.4% 54.4% 29.0% 29.0% 3.3% 1.3% 1.3% 1.2% 1.2% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200704241400.pktlen.png)
detailed numbers
[ 32- 63]: 6133119
[ 64- 127]: 5495761
[ 128- 255]: 585368
[ 256- 511]: 641670
[ 512- 1023]: 713760
[ 1024- 2047]: 11570480
Protocol Breakdown
![[protocol breakdown chart]](200704241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25140158 (100.00%) 18602866741 (100.00%) 739.97
ip 25065013 ( 99.70%) 18559688423 ( 99.77%) 740.46
tcp 22543372 ( 89.67%) 17981840327 ( 96.66%) 797.66
http(s) 10281652 ( 40.90%) 13668678827 ( 73.48%) 1329.42
http(c) 7001463 ( 27.85%) 878599799 ( 4.72%) 125.49
squid 629399 ( 2.50%) 511137646 ( 2.75%) 812.10
smtp 358977 ( 1.43%) 80715874 ( 0.43%) 224.85
nntp 162 ( 0.00%) 11799 ( 0.00%) 72.83
ftp 123860 ( 0.49%) 97515002 ( 0.52%) 787.30
pop3 53329 ( 0.21%) 5909955 ( 0.03%) 110.82
imap 7199 ( 0.03%) 2385993 ( 0.01%) 331.43
telnet 490 ( 0.00%) 50438 ( 0.00%) 102.93
ssh 8150 ( 0.03%) 1335731 ( 0.01%) 163.89
dns 3250 ( 0.01%) 1851261 ( 0.01%) 569.62
bgp 1099 ( 0.00%) 133326 ( 0.00%) 121.32
napster 109 ( 0.00%) 6904 ( 0.00%) 63.34
rtsp 189730 ( 0.75%) 170060748 ( 0.91%) 896.33
icecast 30760 ( 0.12%) 37757600 ( 0.20%) 1227.49
hotline 87 ( 0.00%) 25073 ( 0.00%) 288.20
other 3853618 ( 15.33%) 2525661763 ( 13.58%) 655.40
udp 1918275 ( 7.63%) 511511976 ( 2.75%) 266.65
dns 1145812 ( 4.56%) 157938268 ( 0.85%) 137.84
realaud 9200 ( 0.04%) 5970893 ( 0.03%) 649.01
halflif 13 ( 0.00%) 1344 ( 0.00%) 103.38
starcra 25710 ( 0.10%) 1737887 ( 0.01%) 67.60
everque 38 ( 0.00%) 5200 ( 0.00%) 136.84
unreal 17 ( 0.00%) 3073 ( 0.00%) 180.76
quake 10 ( 0.00%) 1059 ( 0.00%) 105.90
cuseeme 2 ( 0.00%) 172 ( 0.00%) 86.00
other 737390 ( 2.93%) 345844331 ( 1.86%) 469.01
icmp 360835 ( 1.44%) 29750952 ( 0.16%) 82.45
ipip 337 ( 0.00%) 39454 ( 0.00%) 117.07
ipsec 5041 ( 0.02%) 5506078 ( 0.03%) 1092.26
ip6 664 ( 0.00%) 87439 ( 0.00%) 131.69
other 236489 ( 0.94%) 30952197 ( 0.17%) 130.88
frag 2885 ( 0.01%) 3039240 ( 0.02%) 1053.46
ip6 75145 ( 0.30%) 43178318 ( 0.23%) 574.60
tcp6 42552 ( 0.17%) 38008146 ( 0.20%) 893.22
http(s) 18351 ( 0.07%) 23600868 ( 0.13%) 1286.08
http(c) 12589 ( 0.05%) 1491499 ( 0.01%) 118.48
smtp 582 ( 0.00%) 148986 ( 0.00%) 255.99
nntp 4 ( 0.00%) 296 ( 0.00%) 74.00
ftp 73 ( 0.00%) 6917 ( 0.00%) 94.75
pop3 47 ( 0.00%) 4354 ( 0.00%) 92.64
dns 2 ( 0.00%) 160 ( 0.00%) 80.00
bgp 174 ( 0.00%) 18452 ( 0.00%) 106.05
other 10730 ( 0.04%) 12736614 ( 0.07%) 1187.01
udp6 25088 ( 0.10%) 4103692 ( 0.02%) 163.57
dns 25060 ( 0.10%) 4100612 ( 0.02%) 163.63
other 28 ( 0.00%) 3080 ( 0.00%) 110.00
icmp6 7092 ( 0.03%) 994972 ( 0.01%) 140.29
ip6 377 ( 0.00%) 63137 ( 0.00%) 167.47
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5 ( 0.00%) 4155 ( 0.00%) 831.00
tcpdump file: 200704241400.dump.gz (643.25 MB)