Traffic Trace Info
DumpFile: 200705201400.dump
FileSize: 889.78MB
Id: 200705201400
StartTime: Sun May 20 14:00:00 2007
EndTime: Sun May 20 14:15:00 2007
TotalTime: 900.03 seconds
TotalCapSize: 696.44MB CapLen: 96 bytes
# of packets: 12669662 (8574.67MB)
AvgRate: 79.92Mbps stddev:15.33M
IP flow (unique src/dst pair) Information
# of flows: 412623 (avg. 30.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 4.5% 3.0% 2.9% 2.3% 2.3% 2.1% 2.1% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 221678
Top 10 bandwidth usage (bytes/total in %):
16.9% 12.5% 9.7% 9.5% 8.2% 7.6% 4.7% 3.1% 3.0% 2.5%
# of IPv6 addresses: 1538
Top 10 bandwidth usage (bytes/total in %):
39.9% 19.8% 19.8% 19.1% 4.7% 4.7% 4.3% 3.5% 3.2% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200705201400.pktlen.png)
detailed numbers
[ 32- 63]: 2610721
[ 64- 127]: 3268782
[ 128- 255]: 565470
[ 256- 511]: 357810
[ 512- 1023]: 268912
[ 1024- 2047]: 5597967
Protocol Breakdown
![[protocol breakdown chart]](200705201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12669662 (100.00%) 8991188981 (100.00%) 709.66
ip 12545684 ( 99.02%) 8972691599 ( 99.79%) 715.20
tcp 10060478 ( 79.41%) 8399167130 ( 93.42%) 834.87
http(s) 4871819 ( 38.45%) 6729238999 ( 74.84%) 1381.26
http(c) 2331589 ( 18.40%) 223371318 ( 2.48%) 95.80
squid 405180 ( 3.20%) 257706542 ( 2.87%) 636.03
smtp 294474 ( 2.32%) 63412853 ( 0.71%) 215.34
nntp 147 ( 0.00%) 10878 ( 0.00%) 74.00
ftp 8703 ( 0.07%) 1191840 ( 0.01%) 136.95
pop3 3088 ( 0.02%) 793993 ( 0.01%) 257.12
imap 3268 ( 0.03%) 3059902 ( 0.03%) 936.32
telnet 3 ( 0.00%) 186 ( 0.00%) 62.00
ssh 47045 ( 0.37%) 6941698 ( 0.08%) 147.55
dns 2055 ( 0.02%) 1771115 ( 0.02%) 861.86
bgp 982 ( 0.01%) 119415 ( 0.00%) 121.60
napster 249 ( 0.00%) 15392 ( 0.00%) 61.82
realaud 242 ( 0.00%) 28453 ( 0.00%) 117.57
rtsp 200264 ( 1.58%) 15190261 ( 0.17%) 75.85
icecast 4181 ( 0.03%) 258153 ( 0.00%) 61.74
other 1887187 ( 14.90%) 1096056012 ( 12.19%) 580.79
udp 2050898 ( 16.19%) 513637284 ( 5.71%) 250.45
dns 1198031 ( 9.46%) 143421527 ( 1.60%) 119.71
realaud 4701 ( 0.04%) 2164893 ( 0.02%) 460.52
halflif 9 ( 0.00%) 801 ( 0.00%) 89.00
starcra 61 ( 0.00%) 9729 ( 0.00%) 159.49
everque 21 ( 0.00%) 3555 ( 0.00%) 169.29
unreal 17 ( 0.00%) 2643 ( 0.00%) 155.47
quake 24 ( 0.00%) 2878 ( 0.00%) 119.92
cuseeme 4 ( 0.00%) 358 ( 0.00%) 89.50
other 848019 ( 6.69%) 368027518 ( 4.09%) 433.98
icmp 394862 ( 3.12%) 37335564 ( 0.42%) 94.55
ipip 350 ( 0.00%) 41868 ( 0.00%) 119.62
ipsec 1463 ( 0.01%) 1524682 ( 0.02%) 1042.16
ip6 5766 ( 0.05%) 826374 ( 0.01%) 143.32
other 31867 ( 0.25%) 20158697 ( 0.22%) 632.59
frag 1988 ( 0.02%) 2124278 ( 0.02%) 1068.55
ip6 123975 ( 0.98%) 18497202 ( 0.21%) 149.20
tcp6 83124 ( 0.66%) 12227935 ( 0.14%) 147.10
http(s) 66 ( 0.00%) 42736 ( 0.00%) 647.52
http(c) 70219 ( 0.55%) 7330526 ( 0.08%) 104.40
squid 286 ( 0.00%) 22006 ( 0.00%) 76.94
smtp 464 ( 0.00%) 150212 ( 0.00%) 323.73
nntp 3 ( 0.00%) 282 ( 0.00%) 94.00
ftp 18 ( 0.00%) 1670 ( 0.00%) 92.78
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
imap 15 ( 0.00%) 3738 ( 0.00%) 249.20
ssh 3312 ( 0.03%) 469440 ( 0.01%) 141.74
bgp 190 ( 0.00%) 23327 ( 0.00%) 122.77
other 8518 ( 0.07%) 4180956 ( 0.05%) 490.84
udp6 30306 ( 0.24%) 4728140 ( 0.05%) 156.01
dns 30217 ( 0.24%) 4718350 ( 0.05%) 156.15
other 89 ( 0.00%) 9790 ( 0.00%) 110.00
icmp6 10227 ( 0.08%) 1491775 ( 0.02%) 145.87
ip6 263 ( 0.00%) 41200 ( 0.00%) 156.65
pim6 53 ( 0.00%) 6288 ( 0.00%) 118.64
other6 2 ( 0.00%) 1864 ( 0.00%) 932.00
tcpdump file: 200705201400.dump.gz (309.81 MB)