Traffic Trace Info
DumpFile: 200705161400.dump
FileSize: 1797.36MB
Id: 200705161400
StartTime: Wed May 16 14:00:00 2007
EndTime: Wed May 16 14:15:01 2007
TotalTime: 900.38 seconds
TotalCapSize: 1405.74MB CapLen: 96 bytes
# of packets: 25664823 (16500.66MB)
AvgRate: 153.75Mbps stddev:16.01M
IP flow (unique src/dst pair) Information
# of flows: 631529 (avg. 40.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.4% 2.2% 2.2% 2.0% 1.9% 1.8% 1.8% 1.8% 1.6%
IP address Information
# of IPv4 addresses: 350459
Top 10 bandwidth usage (bytes/total in %):
11.0% 10.9% 6.8% 6.6% 3.6% 3.3% 2.4% 2.2% 2.2% 2.2%
# of IPv6 addresses: 1528
Top 10 bandwidth usage (bytes/total in %):
79.8% 79.8% 5.2% 5.2% 5.0% 4.1% 1.0% 0.9% 0.9% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200705161400.pktlen.png)
detailed numbers
[ 32- 63]: 6453755
[ 64- 127]: 6538090
[ 128- 255]: 728493
[ 256- 511]: 628723
[ 512- 1023]: 696361
[ 1024- 2047]: 10619401
Protocol Breakdown
![[protocol breakdown chart]](200705161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25664823 (100.00%) 17302198654 (100.00%) 674.16
ip 25470561 ( 99.24%) 17204543884 ( 99.44%) 675.47
tcp 22046313 ( 85.90%) 16337292760 ( 94.42%) 741.04
http(s) 9166915 ( 35.72%) 12160967502 ( 70.29%) 1326.62
http(c) 7844704 ( 30.57%) 897340454 ( 5.19%) 114.39
squid 531192 ( 2.07%) 440833334 ( 2.55%) 829.89
smtp 336175 ( 1.31%) 89758410 ( 0.52%) 267.00
nntp 158 ( 0.00%) 11560 ( 0.00%) 73.16
ftp 54854 ( 0.21%) 4642320 ( 0.03%) 84.63
pop3 16958 ( 0.07%) 5764919 ( 0.03%) 339.95
imap 7434 ( 0.03%) 4173904 ( 0.02%) 561.46
telnet 972 ( 0.00%) 88035 ( 0.00%) 90.57
ssh 84058 ( 0.33%) 12691817 ( 0.07%) 150.99
dns 2585 ( 0.01%) 1825992 ( 0.01%) 706.38
bgp 1071 ( 0.00%) 128931 ( 0.00%) 120.38
napster 229 ( 0.00%) 16669 ( 0.00%) 72.79
realaud 52 ( 0.00%) 3240 ( 0.00%) 62.31
rtsp 172431 ( 0.67%) 18208887 ( 0.11%) 105.60
icecast 31503 ( 0.12%) 24075787 ( 0.14%) 764.24
hotline 5 ( 0.00%) 544 ( 0.00%) 108.80
other 3795012 ( 14.79%) 2676760155 ( 15.47%) 705.34
udp 2528276 ( 9.85%) 745414280 ( 4.31%) 294.83
dns 1376778 ( 5.36%) 184141200 ( 1.06%) 133.75
realaud 13410 ( 0.05%) 7096745 ( 0.04%) 529.21
halflif 10 ( 0.00%) 853 ( 0.00%) 85.30
starcra 19 ( 0.00%) 3499 ( 0.00%) 184.16
everque 55 ( 0.00%) 21866 ( 0.00%) 397.56
unreal 17 ( 0.00%) 2929 ( 0.00%) 172.29
quake 18 ( 0.00%) 1844 ( 0.00%) 102.44
cuseeme 56 ( 0.00%) 8313 ( 0.00%) 148.45
other 1137775 ( 4.43%) 554028557 ( 3.20%) 486.94
icmp 498059 ( 1.94%) 49974395 ( 0.29%) 100.34
ipip 360 ( 0.00%) 42532 ( 0.00%) 118.14
ipsec 7487 ( 0.03%) 8907058 ( 0.05%) 1189.67
ip6 1176 ( 0.00%) 140120 ( 0.00%) 119.15
other 388890 ( 1.52%) 62772739 ( 0.36%) 161.42
frag 5163 ( 0.02%) 5662502 ( 0.03%) 1096.75
ip6 194259 ( 0.76%) 97654590 ( 0.56%) 502.70
tcp6 111982 ( 0.44%) 85407547 ( 0.49%) 762.69
http(s) 4004 ( 0.02%) 4129079 ( 0.02%) 1031.24
http(c) 13312 ( 0.05%) 1511036 ( 0.01%) 113.51
smtp 201 ( 0.00%) 113920 ( 0.00%) 566.77
nntp 6313 ( 0.02%) 949381 ( 0.01%) 150.39
ssh 1320 ( 0.01%) 267400 ( 0.00%) 202.58
bgp 142 ( 0.00%) 14325 ( 0.00%) 100.88
other 86690 ( 0.34%) 78422406 ( 0.45%) 904.63
udp6 34796 ( 0.14%) 5260863 ( 0.03%) 151.19
dns 34710 ( 0.14%) 5251403 ( 0.03%) 151.29
other 86 ( 0.00%) 9460 ( 0.00%) 110.00
icmp6 12343 ( 0.05%) 1847947 ( 0.01%) 149.72
ip6 35095 ( 0.14%) 5121161 ( 0.03%) 145.92
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 12 ( 0.00%) 12856 ( 0.00%) 1071.33
tcpdump file: 200705161400.dump.gz (641.46 MB)