Traffic Trace Info
DumpFile: 200707171400.dump
FileSize: 1729.71MB
Id: 200707171400
StartTime: Tue Jul 17 14:00:01 2007
EndTime: Tue Jul 17 14:15:01 2007
TotalTime: 899.63 seconds
TotalCapSize: 1357.07MB CapLen: 96 bytes
# of packets: 24416240 (17667.64MB)
AvgRate: 164.76Mbps stddev:19.01M
IP flow (unique src/dst pair) Information
# of flows: 663951 (avg. 36.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 1.4% 1.3% 1.2% 1.1% 1.0% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 369105
Top 10 bandwidth usage (bytes/total in %):
17.2% 7.2% 6.9% 6.8% 3.8% 2.5% 2.5% 2.2% 2.1% 1.8%
# of IPv6 addresses: 1631
Top 10 bandwidth usage (bytes/total in %):
18.7% 18.7% 18.1% 18.1% 4.6% 4.2% 3.8% 3.4% 2.8% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200707171400.pktlen.png)
detailed numbers
[ 32- 63]: 5608310
[ 64- 127]: 5269109
[ 128- 255]: 589233
[ 256- 511]: 622807
[ 512- 1023]: 752440
[ 1024- 2047]: 11574341
Protocol Breakdown
![[protocol breakdown chart]](200707171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24416240 (100.00%) 18525866174 (100.00%) 758.75
ip 24296368 ( 99.51%) 18506507073 ( 99.90%) 761.70
tcp 21691816 ( 88.84%) 17935691216 ( 96.81%) 826.84
http(s) 10750494 ( 44.03%) 14489319307 ( 78.21%) 1347.78
http(c) 6884557 ( 28.20%) 994894901 ( 5.37%) 144.51
squid 252246 ( 1.03%) 173884971 ( 0.94%) 689.35
smtp 447953 ( 1.83%) 122786883 ( 0.66%) 274.11
nntp 292 ( 0.00%) 20732 ( 0.00%) 71.00
ftp 212565 ( 0.87%) 221536450 ( 1.20%) 1042.21
pop3 24450 ( 0.10%) 10956924 ( 0.06%) 448.14
imap 3288 ( 0.01%) 790179 ( 0.00%) 240.32
telnet 329 ( 0.00%) 29882 ( 0.00%) 90.83
ssh 459652 ( 1.88%) 242984900 ( 1.31%) 528.63
dns 5094 ( 0.02%) 2046659 ( 0.01%) 401.78
bgp 205 ( 0.00%) 57336 ( 0.00%) 279.69
napster 36 ( 0.00%) 5388 ( 0.00%) 149.67
realaud 65 ( 0.00%) 6693 ( 0.00%) 102.97
rtsp 154318 ( 0.63%) 25069841 ( 0.14%) 162.46
icecast 8082 ( 0.03%) 9839846 ( 0.05%) 1217.50
hotline 4 ( 0.00%) 1311 ( 0.00%) 327.75
other 2488181 ( 10.19%) 1641458713 ( 8.86%) 659.70
udp 2206282 ( 9.04%) 519862052 ( 2.81%) 235.63
dns 1653449 ( 6.77%) 202166478 ( 1.09%) 122.27
rip 1 ( 0.00%) 105 ( 0.00%) 105.00
realaud 12661 ( 0.05%) 5621768 ( 0.03%) 444.02
halflif 37 ( 0.00%) 5619 ( 0.00%) 151.86
starcra 67 ( 0.00%) 11099 ( 0.00%) 165.66
everque 89 ( 0.00%) 14931 ( 0.00%) 167.76
unreal 32 ( 0.00%) 4622 ( 0.00%) 144.44
quake 23 ( 0.00%) 3291 ( 0.00%) 143.09
cuseeme 7 ( 0.00%) 866 ( 0.00%) 123.71
other 539863 ( 2.21%) 312027933 ( 1.68%) 577.98
icmp 288423 ( 1.18%) 29819939 ( 0.16%) 103.39
ipip 323 ( 0.00%) 38646 ( 0.00%) 119.65
ipsec 1125 ( 0.00%) 208166 ( 0.00%) 185.04
ip6 7565 ( 0.03%) 4018874 ( 0.02%) 531.25
other 100834 ( 0.41%) 16868180 ( 0.09%) 167.29
frag 2424 ( 0.01%) 2678179 ( 0.01%) 1104.86
ip6 119872 ( 0.49%) 19359101 ( 0.10%) 161.50
tcp6 70793 ( 0.29%) 10671753 ( 0.06%) 150.75
http(s) 1459 ( 0.01%) 1211581 ( 0.01%) 830.42
http(c) 8253 ( 0.03%) 1019710 ( 0.01%) 123.56
smtp 608 ( 0.00%) 139041 ( 0.00%) 228.69
nntp 50133 ( 0.21%) 3865840 ( 0.02%) 77.11
ssh 1803 ( 0.01%) 201975 ( 0.00%) 112.02
dns 27 ( 0.00%) 3494 ( 0.00%) 129.41
bgp 120 ( 0.00%) 14033 ( 0.00%) 116.94
other 8390 ( 0.03%) 4216079 ( 0.02%) 502.51
udp6 38350 ( 0.16%) 7157939 ( 0.04%) 186.65
dns 38316 ( 0.16%) 7154199 ( 0.04%) 186.72
other 34 ( 0.00%) 3740 ( 0.00%) 110.00
icmp6 10465 ( 0.04%) 1479211 ( 0.01%) 141.35
ip6 218 ( 0.00%) 32017 ( 0.00%) 146.87
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 16 ( 0.00%) 14101 ( 0.00%) 881.31
tcpdump file: 200707171400.dump.gz (605.15 MB)