Traffic Trace Info
DumpFile: 200705191400.dump
FileSize: 1096.08MB
Id: 200705191400
StartTime: Sat May 19 14:00:01 2007
EndTime: Sat May 19 14:15:00 2007
TotalTime: 899.64 seconds
TotalCapSize: 856.25MB CapLen: 96 bytes
# of packets: 15716761 (10257.23MB)
AvgRate: 95.64Mbps stddev:9.64M
IP flow (unique src/dst pair) Information
# of flows: 461390 (avg. 34.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 2.7% 2.6% 2.3% 1.9% 1.8% 1.7% 1.6% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 243873
Top 10 bandwidth usage (bytes/total in %):
13.3% 12.8% 9.6% 8.1% 6.9% 4.9% 2.7% 2.6% 2.6% 2.5%
# of IPv6 addresses: 1467
Top 10 bandwidth usage (bytes/total in %):
75.8% 75.8% 3.8% 3.5% 2.7% 2.5% 2.5% 2.1% 1.8% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200705191400.pktlen.png)
detailed numbers
[ 32- 63]: 3167856
[ 64- 127]: 4421495
[ 128- 255]: 588030
[ 256- 511]: 425415
[ 512- 1023]: 471484
[ 1024- 2047]: 6642481
Protocol Breakdown
![[protocol breakdown chart]](200705191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15716761 (100.00%) 10755488965 (100.00%) 684.33
ip 15584195 ( 99.16%) 10706585649 ( 99.55%) 687.02
tcp 12387076 ( 78.81%) 9587410214 ( 89.14%) 773.98
http(s) 4689486 ( 29.84%) 6289281114 ( 58.48%) 1341.15
http(c) 3297340 ( 20.98%) 354391958 ( 3.29%) 107.48
squid 478630 ( 3.05%) 341824797 ( 3.18%) 714.17
smtp 275796 ( 1.75%) 45384086 ( 0.42%) 164.56
nntp 179 ( 0.00%) 13328 ( 0.00%) 74.46
ftp 72626 ( 0.46%) 12787720 ( 0.12%) 176.08
pop3 3565 ( 0.02%) 839911 ( 0.01%) 235.60
imap 2302 ( 0.01%) 767471 ( 0.01%) 333.39
telnet 720 ( 0.00%) 48654 ( 0.00%) 67.58
ssh 348058 ( 2.21%) 47509601 ( 0.44%) 136.50
dns 16364 ( 0.10%) 1023428 ( 0.01%) 62.54
bgp 926 ( 0.01%) 122375 ( 0.00%) 132.15
napster 255 ( 0.00%) 16112 ( 0.00%) 63.18
realaud 133 ( 0.00%) 56474 ( 0.00%) 424.62
rtsp 390122 ( 2.48%) 290850333 ( 2.70%) 745.54
icecast 39453 ( 0.25%) 32361566 ( 0.30%) 820.26
hotline 5 ( 0.00%) 488 ( 0.00%) 97.60
other 2771112 ( 17.63%) 2170130558 ( 20.18%) 783.13
udp 2670853 ( 16.99%) 1061396795 ( 9.87%) 397.40
dns 1249022 ( 7.95%) 153048616 ( 1.42%) 122.53
rip 1 ( 0.00%) 105 ( 0.00%) 105.00
realaud 47 ( 0.00%) 5043 ( 0.00%) 107.30
halflif 26 ( 0.00%) 3540 ( 0.00%) 136.15
starcra 59 ( 0.00%) 9658 ( 0.00%) 163.69
everque 75 ( 0.00%) 35500 ( 0.00%) 473.33
unreal 30 ( 0.00%) 4705 ( 0.00%) 156.83
quake 10 ( 0.00%) 849 ( 0.00%) 84.90
cuseeme 7 ( 0.00%) 570 ( 0.00%) 81.43
other 1421500 ( 9.04%) 908214177 ( 8.44%) 638.91
icmp 379229 ( 2.41%) 36566162 ( 0.34%) 96.42
ipip 356 ( 0.00%) 44332 ( 0.00%) 124.53
ipsec 978 ( 0.01%) 902324 ( 0.01%) 922.62
ip6 1211 ( 0.01%) 147642 ( 0.00%) 121.92
other 144492 ( 0.92%) 20118180 ( 0.19%) 139.23
frag 4946 ( 0.03%) 5329498 ( 0.05%) 1077.54
ip6 132566 ( 0.84%) 48903316 ( 0.45%) 368.90
tcp6 80156 ( 0.51%) 40830899 ( 0.38%) 509.39
http(s) 141 ( 0.00%) 118723 ( 0.00%) 842.01
http(c) 17101 ( 0.11%) 1792813 ( 0.02%) 104.84
smtp 578 ( 0.00%) 207576 ( 0.00%) 359.13
nntp 16312 ( 0.10%) 1211942 ( 0.01%) 74.30
ftp 17 ( 0.00%) 1584 ( 0.00%) 93.18
pop3 171 ( 0.00%) 14961 ( 0.00%) 87.49
imap 15 ( 0.00%) 3738 ( 0.00%) 249.20
ssh 6 ( 0.00%) 516 ( 0.00%) 86.00
dns 8 ( 0.00%) 905 ( 0.00%) 113.12
bgp 149 ( 0.00%) 15292 ( 0.00%) 102.63
other 45658 ( 0.29%) 37462849 ( 0.35%) 820.51
udp6 27378 ( 0.17%) 4650444 ( 0.04%) 169.86
dns 27298 ( 0.17%) 4641644 ( 0.04%) 170.04
other 80 ( 0.00%) 8800 ( 0.00%) 110.00
icmp6 23269 ( 0.15%) 3174106 ( 0.03%) 136.41
ip6 1709 ( 0.01%) 238213 ( 0.00%) 139.39
pim6 50 ( 0.00%) 6000 ( 0.00%) 120.00
other6 4 ( 0.00%) 3654 ( 0.00%) 913.50
tcpdump file: 200705191400.dump.gz (401.47 MB)