Traffic Trace Info
DumpFile: 200707181400.dump
FileSize: 1853.23MB
Id: 200707181400
StartTime: Wed Jul 18 14:00:01 2007
EndTime: Wed Jul 18 14:15:01 2007
TotalTime: 899.75 seconds
TotalCapSize: 1451.58MB CapLen: 96 bytes
# of packets: 26317365 (17285.37MB)
AvgRate: 161.16Mbps stddev:22.68M
IP flow (unique src/dst pair) Information
# of flows: 565598 (avg. 46.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.5% 2.5% 2.0% 1.6% 1.1% 1.1% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 291148
Top 10 bandwidth usage (bytes/total in %):
15.8% 13.3% 5.0% 5.0% 3.1% 3.0% 2.7% 2.7% 2.7% 2.1%
# of IPv6 addresses: 1634
Top 10 bandwidth usage (bytes/total in %):
22.4% 22.4% 7.1% 6.9% 6.2% 5.3% 3.9% 3.2% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200707181400.pktlen.png)
detailed numbers
[ 32- 63]: 6373667
[ 64- 127]: 6521553
[ 128- 255]: 820706
[ 256- 511]: 618152
[ 512- 1023]: 725381
[ 1024- 2047]: 11257906
Protocol Breakdown
![[protocol breakdown chart]](200707181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26317365 (100.00%) 18125022880 (100.00%) 688.71
ip 26244528 ( 99.72%) 18109355672 ( 99.91%) 690.02
tcp 23238433 ( 88.30%) 17212260710 ( 94.96%) 740.68
http(s) 10022155 ( 38.08%) 13328092759 ( 73.53%) 1329.86
http(c) 8165022 ( 31.03%) 1016374868 ( 5.61%) 124.48
squid 320392 ( 1.22%) 222457412 ( 1.23%) 694.33
smtp 444262 ( 1.69%) 172055792 ( 0.95%) 387.28
nntp 245 ( 0.00%) 17837 ( 0.00%) 72.80
ftp 122949 ( 0.47%) 106262544 ( 0.59%) 864.28
pop3 23146 ( 0.09%) 10115506 ( 0.06%) 437.03
imap 8043 ( 0.03%) 3934953 ( 0.02%) 489.24
telnet 251 ( 0.00%) 16107 ( 0.00%) 64.17
ssh 762581 ( 2.90%) 301966165 ( 1.67%) 395.98
dns 5916 ( 0.02%) 2098429 ( 0.01%) 354.70
bgp 197 ( 0.00%) 51539 ( 0.00%) 261.62
napster 39 ( 0.00%) 3220 ( 0.00%) 82.56
realaud 119 ( 0.00%) 15716 ( 0.00%) 132.07
rtsp 345611 ( 1.31%) 61973364 ( 0.34%) 179.32
icecast 10958 ( 0.04%) 678352 ( 0.00%) 61.90
other 3006527 ( 11.42%) 1986144947 ( 10.96%) 660.61
udp 2626194 ( 9.98%) 838849161 ( 4.63%) 319.42
dns 1749067 ( 6.65%) 210439092 ( 1.16%) 120.32
rip 1 ( 0.00%) 66 ( 0.00%) 66.00
realaud 1302 ( 0.00%) 106293 ( 0.00%) 81.64
halflif 11 ( 0.00%) 1156 ( 0.00%) 105.09
starcra 17 ( 0.00%) 2039 ( 0.00%) 119.94
everque 47 ( 0.00%) 7619 ( 0.00%) 162.11
unreal 8 ( 0.00%) 1013 ( 0.00%) 126.62
quake 29 ( 0.00%) 2427 ( 0.00%) 83.69
cuseeme 5 ( 0.00%) 405 ( 0.00%) 81.00
other 875685 ( 3.33%) 628268939 ( 3.47%) 717.46
icmp 319293 ( 1.21%) 31419476 ( 0.17%) 98.40
ipip 348 ( 0.00%) 42144 ( 0.00%) 121.10
ipsec 12078 ( 0.05%) 15021620 ( 0.08%) 1243.72
ip6 7506 ( 0.03%) 4010004 ( 0.02%) 534.24
other 40676 ( 0.15%) 7752557 ( 0.04%) 190.59
frag 2777 ( 0.01%) 2865921 ( 0.02%) 1032.02
ip6 72837 ( 0.28%) 15667208 ( 0.09%) 215.10
tcp6 20871 ( 0.08%) 6321873 ( 0.03%) 302.90
http(s) 447 ( 0.00%) 300627 ( 0.00%) 672.54
http(c) 10130 ( 0.04%) 1217897 ( 0.01%) 120.23
smtp 1203 ( 0.00%) 483255 ( 0.00%) 401.71
nntp 1530 ( 0.01%) 193851 ( 0.00%) 126.70
ftp 264 ( 0.00%) 25276 ( 0.00%) 95.74
pop3 52 ( 0.00%) 4786 ( 0.00%) 92.04
ssh 66 ( 0.00%) 10722 ( 0.00%) 162.45
dns 31 ( 0.00%) 4578 ( 0.00%) 147.68
bgp 101 ( 0.00%) 10085 ( 0.00%) 99.85
other 7047 ( 0.03%) 4070796 ( 0.02%) 577.66
udp6 40424 ( 0.15%) 7713806 ( 0.04%) 190.82
dns 40383 ( 0.15%) 7709280 ( 0.04%) 190.90
other 41 ( 0.00%) 4526 ( 0.00%) 110.39
icmp6 11283 ( 0.04%) 1589479 ( 0.01%) 140.87
ip6 221 ( 0.00%) 32470 ( 0.00%) 146.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 5500 ( 0.00%) 687.50
tcpdump file: 200707181400.dump.gz (682.73 MB)