Traffic Trace Info
DumpFile: 200705271400.dump
FileSize: 978.37MB
Id: 200705271400
StartTime: Sun May 27 14:00:01 2007
EndTime: Sun May 27 14:15:00 2007
TotalTime: 899.14 seconds
TotalCapSize: 763.14MB CapLen: 96 bytes
# of packets: 14104992 (9804.79MB)
AvgRate: 91.49Mbps stddev:9.65M
IP flow (unique src/dst pair) Information
# of flows: 869310 (avg. 16.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.8% 7.9% 6.7% 5.4% 3.8% 3.1% 1.5% 1.2% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 588516
Top 10 bandwidth usage (bytes/total in %):
22.1% 15.1% 11.3% 9.9% 7.9% 7.4% 7.1% 6.8% 5.6% 3.9%
# of IPv6 addresses: 1547
Top 10 bandwidth usage (bytes/total in %):
66.6% 66.6% 17.5% 17.5% 4.8% 4.8% 1.5% 1.2% 0.9% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200705271400.pktlen.png)
detailed numbers
[ 32- 63]: 2961390
[ 64- 127]: 3605986
[ 128- 255]: 413167
[ 256- 511]: 417538
[ 512- 1023]: 299709
[ 1024- 2047]: 6407202
Protocol Breakdown
![[protocol breakdown chart]](200705271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14104992 (100.00%) 10281067194 (100.00%) 728.90
ip 14001663 ( 99.27%) 10208914405 ( 99.30%) 729.12
tcp 11195911 ( 79.38%) 9388785984 ( 91.32%) 838.59
http(s) 4916921 ( 34.86%) 6839987348 ( 66.53%) 1391.11
http(c) 1988003 ( 14.09%) 198916885 ( 1.93%) 100.06
squid 508915 ( 3.61%) 309321748 ( 3.01%) 607.81
smtp 313475 ( 2.22%) 48361969 ( 0.47%) 154.28
nntp 144 ( 0.00%) 10656 ( 0.00%) 74.00
ftp 78860 ( 0.56%) 5294206 ( 0.05%) 67.13
pop3 3337 ( 0.02%) 993190 ( 0.01%) 297.63
imap 1838 ( 0.01%) 311425 ( 0.00%) 169.44
telnet 759 ( 0.01%) 203526 ( 0.00%) 268.15
ssh 288014 ( 2.04%) 29369569 ( 0.29%) 101.97
dns 2826 ( 0.02%) 1853022 ( 0.02%) 655.70
bgp 937 ( 0.01%) 108407 ( 0.00%) 115.70
napster 39 ( 0.00%) 4204 ( 0.00%) 107.79
realaud 28 ( 0.00%) 3152 ( 0.00%) 112.57
rtsp 346552 ( 2.46%) 143895970 ( 1.40%) 415.22
icecast 302 ( 0.00%) 26340 ( 0.00%) 87.22
hotline 22 ( 0.00%) 1326 ( 0.00%) 60.27
other 2744931 ( 19.46%) 1810122561 ( 17.61%) 659.44
udp 1874563 ( 13.29%) 309757557 ( 3.01%) 165.24
dns 1027167 ( 7.28%) 126276567 ( 1.23%) 122.94
realaud 9611 ( 0.07%) 5400791 ( 0.05%) 561.94
halflif 24 ( 0.00%) 2823 ( 0.00%) 117.62
starcra 32 ( 0.00%) 4512 ( 0.00%) 141.00
everque 145 ( 0.00%) 16628 ( 0.00%) 114.68
unreal 53 ( 0.00%) 6851 ( 0.00%) 129.26
quake 15 ( 0.00%) 1174 ( 0.00%) 78.27
cuseeme 9 ( 0.00%) 1575 ( 0.00%) 175.00
other 837259 ( 5.94%) 177719131 ( 1.73%) 212.26
icmp 509094 ( 3.61%) 47213406 ( 0.46%) 92.74
ipip 343 ( 0.00%) 40786 ( 0.00%) 118.91
ipsec 3740 ( 0.03%) 3969224 ( 0.04%) 1061.29
ip6 1191 ( 0.01%) 144275 ( 0.00%) 121.14
other 416821 ( 2.96%) 459003173 ( 4.46%) 1101.20
frag 4429 ( 0.03%) 4699126 ( 0.05%) 1060.99
ip6 103329 ( 0.73%) 72152789 ( 0.70%) 698.28
tcp6 63847 ( 0.45%) 65759939 ( 0.64%) 1029.96
http(s) 104 ( 0.00%) 56643 ( 0.00%) 544.64
http(c) 8103 ( 0.06%) 944451 ( 0.01%) 116.56
squid 222 ( 0.00%) 26393 ( 0.00%) 118.89
smtp 119 ( 0.00%) 24238 ( 0.00%) 203.68
nntp 37985 ( 0.27%) 48063725 ( 0.47%) 1265.33
pop3 47 ( 0.00%) 4324 ( 0.00%) 92.00
imap 15 ( 0.00%) 3738 ( 0.00%) 249.20
ssh 419 ( 0.00%) 44851 ( 0.00%) 107.04
bgp 164 ( 0.00%) 16076 ( 0.00%) 98.02
other 16669 ( 0.12%) 16575500 ( 0.16%) 994.39
udp6 31020 ( 0.22%) 5287499 ( 0.05%) 170.45
dns 30514 ( 0.22%) 5200337 ( 0.05%) 170.42
starcra 1 ( 0.00%) 98 ( 0.00%) 98.00
other 505 ( 0.00%) 87064 ( 0.00%) 172.40
icmp6 8345 ( 0.06%) 1085181 ( 0.01%) 130.04
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5032 ( 0.00%) 838.67
tcpdump file: 200705271400.dump.gz (346.92 MB)