Traffic Trace Info
DumpFile: 200705281400.dump
FileSize: 1366.41MB
Id: 200705281400
StartTime: Mon May 28 14:00:00 2007
EndTime: Mon May 28 14:15:00 2007
TotalTime: 899.94 seconds
TotalCapSize: 1072.31MB CapLen: 96 bytes
# of packets: 19272051 (10786.72MB)
AvgRate: 100.56Mbps stddev:19.00M
IP flow (unique src/dst pair) Information
# of flows: 998634 (avg. 19.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 4.4% 2.3% 1.8% 1.1% 1.0% 1.0% 0.8% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 612654
Top 10 bandwidth usage (bytes/total in %):
13.3% 8.7% 7.6% 6.8% 4.4% 3.7% 3.4% 3.3% 3.0% 2.4%
# of IPv6 addresses: 1683
Top 10 bandwidth usage (bytes/total in %):
46.2% 46.2% 7.2% 4.2% 3.7% 3.6% 3.5% 3.3% 3.3% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200705281400.pktlen.png)
detailed numbers
[ 32- 63]: 4537058
[ 64- 127]: 6106434
[ 128- 255]: 662242
[ 256- 511]: 715529
[ 512- 1023]: 531753
[ 1024- 2047]: 6719035
Protocol Breakdown
![[protocol breakdown chart]](200705281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19272051 (100.00%) 11310697348 (100.00%) 586.90
ip 19196850 ( 99.61%) 11291785917 ( 99.83%) 588.21
tcp 16235537 ( 84.24%) 10847188846 ( 95.90%) 668.11
http(s) 5731534 ( 29.74%) 7514329428 ( 66.44%) 1311.05
http(c) 4263434 ( 22.12%) 534892077 ( 4.73%) 125.46
squid 918814 ( 4.77%) 333482190 ( 2.95%) 362.95
smtp 643366 ( 3.34%) 119565774 ( 1.06%) 185.84
nntp 171 ( 0.00%) 12424 ( 0.00%) 72.65
ftp 28716 ( 0.15%) 2507048 ( 0.02%) 87.30
pop3 11587 ( 0.06%) 4192448 ( 0.04%) 361.82
imap 5224 ( 0.03%) 2924751 ( 0.03%) 559.87
telnet 1158 ( 0.01%) 122211 ( 0.00%) 105.54
ssh 352945 ( 1.83%) 58745405 ( 0.52%) 166.44
dns 8284 ( 0.04%) 555960 ( 0.00%) 67.11
bgp 827 ( 0.00%) 94795 ( 0.00%) 114.63
napster 32 ( 0.00%) 2946 ( 0.00%) 92.06
realaud 18 ( 0.00%) 1609 ( 0.00%) 89.39
rtsp 167478 ( 0.87%) 26628355 ( 0.24%) 159.00
icecast 29482 ( 0.15%) 14603132 ( 0.13%) 495.32
hotline 8 ( 0.00%) 648 ( 0.00%) 81.00
other 4072452 ( 21.13%) 2234527225 ( 19.76%) 548.69
udp 2253722 ( 11.69%) 360519189 ( 3.19%) 159.97
dns 1400124 ( 7.27%) 186402077 ( 1.65%) 133.13
rip 1 ( 0.00%) 74 ( 0.00%) 74.00
realaud 9798 ( 0.05%) 3389998 ( 0.03%) 345.99
halflif 26 ( 0.00%) 3530 ( 0.00%) 135.77
starcra 53 ( 0.00%) 7680 ( 0.00%) 144.91
everque 108 ( 0.00%) 13581 ( 0.00%) 125.75
unreal 88 ( 0.00%) 11245 ( 0.00%) 127.78
quake 20 ( 0.00%) 2260 ( 0.00%) 113.00
cuseeme 2 ( 0.00%) 214 ( 0.00%) 107.00
other 843271 ( 4.38%) 170370016 ( 1.51%) 202.03
icmp 556561 ( 2.89%) 51187527 ( 0.45%) 91.97
ipip 353 ( 0.00%) 41846 ( 0.00%) 118.54
ipsec 4610 ( 0.02%) 4476852 ( 0.04%) 971.12
ip6 1169 ( 0.01%) 141370 ( 0.00%) 120.93
other 144898 ( 0.75%) 28230287 ( 0.25%) 194.83
frag 4950 ( 0.03%) 5311434 ( 0.05%) 1073.02
ip6 75198 ( 0.39%) 18911251 ( 0.17%) 251.49
tcp6 20162 ( 0.10%) 10065397 ( 0.09%) 499.23
http(s) 315 ( 0.00%) 145569 ( 0.00%) 462.12
http(c) 4604 ( 0.02%) 393240 ( 0.00%) 85.41
smtp 175 ( 0.00%) 46984 ( 0.00%) 268.48
nntp 1456 ( 0.01%) 217503 ( 0.00%) 149.38
ftp 69 ( 0.00%) 7129 ( 0.00%) 103.32
imap 15 ( 0.00%) 3738 ( 0.00%) 249.20
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 43 ( 0.00%) 4274 ( 0.00%) 99.40
bgp 166 ( 0.00%) 16264 ( 0.00%) 97.98
other 13318 ( 0.07%) 9230610 ( 0.08%) 693.09
udp6 46547 ( 0.24%) 7775494 ( 0.07%) 167.05
dns 46463 ( 0.24%) 7765963 ( 0.07%) 167.14
other 84 ( 0.00%) 9531 ( 0.00%) 113.46
icmp6 8344 ( 0.04%) 1048024 ( 0.01%) 125.60
ip6 82 ( 0.00%) 11226 ( 0.00%) 136.90
ipsec6 29 ( 0.00%) 4234 ( 0.00%) 146.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 2796 ( 0.00%) 699.00
tcpdump file: 200705281400.dump.gz (509.70 MB)