Traffic Trace Info
DumpFile: 200706281400.dump
FileSize: 1842.56MB
Id: 200706281400
StartTime: Thu Jun 28 14:00:01 2007
EndTime: Thu Jun 28 14:15:01 2007
TotalTime: 900.14 seconds
TotalCapSize: 1444.92MB CapLen: 96 bytes
# of packets: 26019124 (16987.83MB)
AvgRate: 158.35Mbps stddev:26.28M
IP flow (unique src/dst pair) Information
# of flows: 600496 (avg. 43.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.4% 1.7% 1.5% 1.4% 1.1% 1.1% 1.0% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 306270
Top 10 bandwidth usage (bytes/total in %):
10.6% 7.8% 5.9% 5.3% 4.2% 3.5% 3.0% 2.5% 2.5% 2.5%
# of IPv6 addresses: 1562
Top 10 bandwidth usage (bytes/total in %):
26.8% 25.2% 16.3% 16.3% 14.7% 14.7% 5.1% 4.5% 4.1% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200706281400.pktlen.png)
detailed numbers
[ 32- 63]: 6148119
[ 64- 127]: 6726624
[ 128- 255]: 812199
[ 256- 511]: 700269
[ 512- 1023]: 744328
[ 1024- 2047]: 10887585
Protocol Breakdown
![[protocol breakdown chart]](200706281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26019124 (100.00%) 17813034330 (100.00%) 684.61
ip 25867928 ( 99.42%) 17780593210 ( 99.82%) 687.36
tcp 22630195 ( 86.98%) 17205226913 ( 96.59%) 760.28
http(s) 10008485 ( 38.47%) 13196966871 ( 74.09%) 1318.58
http(c) 7552769 ( 29.03%) 895736505 ( 5.03%) 118.60
squid 628997 ( 2.42%) 524878884 ( 2.95%) 834.47
smtp 465119 ( 1.79%) 129103439 ( 0.72%) 277.57
nntp 266 ( 0.00%) 19888 ( 0.00%) 74.77
ftp 259100 ( 1.00%) 87951642 ( 0.49%) 339.45
pop3 25281 ( 0.10%) 14311890 ( 0.08%) 566.11
imap 6018 ( 0.02%) 1722155 ( 0.01%) 286.17
telnet 450 ( 0.00%) 49058 ( 0.00%) 109.02
ssh 143659 ( 0.55%) 127029711 ( 0.71%) 884.24
dns 5416 ( 0.02%) 2055010 ( 0.01%) 379.43
bgp 198 ( 0.00%) 45929 ( 0.00%) 231.96
napster 33 ( 0.00%) 2530 ( 0.00%) 76.67
realaud 165 ( 0.00%) 51767 ( 0.00%) 313.74
rtsp 289487 ( 1.11%) 163527358 ( 0.92%) 564.89
icecast 35843 ( 0.14%) 30848920 ( 0.17%) 860.67
hotline 5 ( 0.00%) 587 ( 0.00%) 117.40
other 3208899 ( 12.33%) 2030924469 ( 11.40%) 632.90
udp 2472398 ( 9.50%) 423225741 ( 2.38%) 171.18
dns 1733081 ( 6.66%) 220822365 ( 1.24%) 127.42
realaud 12059 ( 0.05%) 5504135 ( 0.03%) 456.43
halflif 23 ( 0.00%) 2109 ( 0.00%) 91.70
starcra 20 ( 0.00%) 3375 ( 0.00%) 168.75
everque 47 ( 0.00%) 5340 ( 0.00%) 113.62
unreal 9 ( 0.00%) 1274 ( 0.00%) 141.56
quake 37 ( 0.00%) 4913 ( 0.00%) 132.78
cuseeme 4 ( 0.00%) 345 ( 0.00%) 86.25
other 727107 ( 2.79%) 196879564 ( 1.11%) 270.77
icmp 377675 ( 1.45%) 38499170 ( 0.22%) 101.94
ipip 356 ( 0.00%) 43164 ( 0.00%) 121.25
ipsec 6155 ( 0.02%) 7242170 ( 0.04%) 1176.63
ip6 28246 ( 0.11%) 16972776 ( 0.10%) 600.89
other 352903 ( 1.36%) 89383276 ( 0.50%) 253.28
frag 3766 ( 0.01%) 3701951 ( 0.02%) 982.99
ip6 151196 ( 0.58%) 32441120 ( 0.18%) 214.56
tcp6 94262 ( 0.36%) 16023818 ( 0.09%) 169.99
http(s) 2369 ( 0.01%) 2151488 ( 0.01%) 908.18
http(c) 17062 ( 0.07%) 2106691 ( 0.01%) 123.47
squid 10 ( 0.00%) 780 ( 0.00%) 78.00
smtp 429 ( 0.00%) 98189 ( 0.00%) 228.88
nntp 60140 ( 0.23%) 5284842 ( 0.03%) 87.88
ftp 18 ( 0.00%) 1670 ( 0.00%) 92.78
ssh 3895 ( 0.01%) 466350 ( 0.00%) 119.73
dns 32 ( 0.00%) 3942 ( 0.00%) 123.19
bgp 103 ( 0.00%) 10660 ( 0.00%) 103.50
other 10204 ( 0.04%) 5899206 ( 0.03%) 578.13
udp6 35675 ( 0.14%) 6236067 ( 0.04%) 174.80
dns 35579 ( 0.14%) 6222070 ( 0.03%) 174.88
other 96 ( 0.00%) 13997 ( 0.00%) 145.80
icmp6 9029 ( 0.03%) 1197913 ( 0.01%) 132.67
ip6 12197 ( 0.05%) 8977363 ( 0.05%) 736.03
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2 ( 0.00%) 1743 ( 0.00%) 871.50
tcpdump file: 200706281400.dump.gz (650.60 MB)