Traffic Trace Info
DumpFile: 200705101400.dump
FileSize: 1762.50MB
Id: 200705101400
StartTime: Thu May 10 14:00:01 2007
EndTime: Thu May 10 14:15:01 2007
TotalTime: 899.90 seconds
TotalCapSize: 1381.63MB CapLen: 96 bytes
# of packets: 24959850 (16410.50MB)
AvgRate: 152.97Mbps stddev:9.23M
IP flow (unique src/dst pair) Information
# of flows: 566212 (avg. 44.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 2.8% 2.7% 2.5% 1.7% 1.2% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 310598
Top 10 bandwidth usage (bytes/total in %):
9.0% 8.5% 7.6% 5.1% 5.0% 4.4% 3.2% 2.9% 2.9% 2.7%
# of IPv6 addresses: 1520
Top 10 bandwidth usage (bytes/total in %):
53.1% 53.1% 32.5% 32.5% 4.9% 3.6% 3.3% 2.1% 1.0% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200705101400.pktlen.png)
detailed numbers
[ 32- 63]: 6431318
[ 64- 127]: 5701793
[ 128- 255]: 720950
[ 256- 511]: 989988
[ 512- 1023]: 740518
[ 1024- 2047]: 10375283
Protocol Breakdown
![[protocol breakdown chart]](200705101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24959850 (100.00%) 17207659049 (100.00%) 689.41
ip 24695944 ( 98.94%) 17065157736 ( 99.17%) 691.01
tcp 22359761 ( 89.58%) 16670565393 ( 96.88%) 745.56
http(s) 9819634 ( 39.34%) 12563154539 ( 73.01%) 1279.39
http(c) 7483927 ( 29.98%) 874472557 ( 5.08%) 116.85
squid 456099 ( 1.83%) 369154810 ( 2.15%) 809.37
smtp 283019 ( 1.13%) 78466007 ( 0.46%) 277.25
nntp 160 ( 0.00%) 11702 ( 0.00%) 73.14
ftp 168912 ( 0.68%) 138839253 ( 0.81%) 821.96
pop3 10125 ( 0.04%) 1895789 ( 0.01%) 187.24
imap 8166 ( 0.03%) 4742658 ( 0.03%) 580.78
telnet 914 ( 0.00%) 81993 ( 0.00%) 89.71
ssh 34411 ( 0.14%) 24866826 ( 0.14%) 722.64
dns 2822 ( 0.01%) 1838643 ( 0.01%) 651.54
bgp 1363 ( 0.01%) 278416 ( 0.00%) 204.27
napster 115 ( 0.00%) 7923 ( 0.00%) 68.90
realaud 212 ( 0.00%) 85859 ( 0.00%) 405.00
rtsp 153288 ( 0.61%) 52530072 ( 0.31%) 342.69
icecast 39116 ( 0.16%) 34564345 ( 0.20%) 883.64
hotline 5 ( 0.00%) 300 ( 0.00%) 60.00
other 3897460 ( 15.61%) 2525572921 ( 14.68%) 648.00
udp 1797362 ( 7.20%) 340731702 ( 1.98%) 189.57
dns 1197899 ( 4.80%) 162269760 ( 0.94%) 135.46
realaud 3939 ( 0.02%) 4684036 ( 0.03%) 1189.14
halflif 11 ( 0.00%) 1296 ( 0.00%) 117.82
starcra 6 ( 0.00%) 835 ( 0.00%) 139.17
everque 37 ( 0.00%) 5006 ( 0.00%) 135.30
unreal 36 ( 0.00%) 4463 ( 0.00%) 123.97
quake 17 ( 0.00%) 2543 ( 0.00%) 149.59
cuseeme 19 ( 0.00%) 1411 ( 0.00%) 74.26
other 595353 ( 2.39%) 173740235 ( 1.01%) 291.83
icmp 389334 ( 1.56%) 33720127 ( 0.20%) 86.61
ipip 345 ( 0.00%) 42070 ( 0.00%) 121.94
ipsec 587 ( 0.00%) 342050 ( 0.00%) 582.71
ip6 1024 ( 0.00%) 125530 ( 0.00%) 122.59
other 147531 ( 0.59%) 19630864 ( 0.11%) 133.06
frag 3107 ( 0.01%) 3173342 ( 0.02%) 1021.35
ip6 263906 ( 1.06%) 142501313 ( 0.83%) 539.97
tcp6 224166 ( 0.90%) 136253576 ( 0.79%) 607.82
http(s) 29758 ( 0.12%) 44799633 ( 0.26%) 1505.47
http(c) 90425 ( 0.36%) 8764249 ( 0.05%) 96.92
squid 6 ( 0.00%) 750 ( 0.00%) 125.00
smtp 985 ( 0.00%) 305963 ( 0.00%) 310.62
nntp 4620 ( 0.02%) 881312 ( 0.01%) 190.76
ftp 98 ( 0.00%) 9841 ( 0.00%) 100.42
imap 14 ( 0.00%) 3664 ( 0.00%) 261.71
ssh 43 ( 0.00%) 4686 ( 0.00%) 108.98
bgp 186 ( 0.00%) 19076 ( 0.00%) 102.56
other 98031 ( 0.39%) 81464402 ( 0.47%) 831.01
udp6 26879 ( 0.11%) 4470373 ( 0.03%) 166.31
dns 26767 ( 0.11%) 4458053 ( 0.03%) 166.55
other 112 ( 0.00%) 12320 ( 0.00%) 110.00
icmp6 12487 ( 0.05%) 1706229 ( 0.01%) 136.64
ip6 285 ( 0.00%) 57561 ( 0.00%) 201.97
pim6 84 ( 0.00%) 9264 ( 0.00%) 110.29
other6 5 ( 0.00%) 4310 ( 0.00%) 862.00
tcpdump file: 200705101400.dump.gz (623.60 MB)