Traffic Trace Info
DumpFile: 200707261400.dump
FileSize: 1630.36MB
Id: 200707261400
StartTime: Thu Jul 26 14:00:01 2007
EndTime: Thu Jul 26 14:15:00 2007
TotalTime: 899.26 seconds
TotalCapSize: 1275.11MB CapLen: 96 bytes
# of packets: 23276885 (16153.87MB)
AvgRate: 150.71Mbps stddev:24.60M
IP flow (unique src/dst pair) Information
# of flows: 483591 (avg. 48.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 2.0% 2.0% 1.3% 1.3% 1.2% 1.2% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 230992
Top 10 bandwidth usage (bytes/total in %):
18.2% 10.1% 9.0% 5.5% 4.8% 2.6% 2.0% 2.0% 1.7% 1.6%
# of IPv6 addresses: 1624
Top 10 bandwidth usage (bytes/total in %):
22.2% 22.2% 8.4% 6.0% 4.9% 4.6% 3.8% 3.6% 3.6% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200707261400.pktlen.png)
detailed numbers
[ 32- 63]: 5938920
[ 64- 127]: 5014259
[ 128- 255]: 531299
[ 256- 511]: 555557
[ 512- 1023]: 850572
[ 1024- 2047]: 10386278
Protocol Breakdown
![[protocol breakdown chart]](200707261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23276885 (100.00%) 16938558273 (100.00%) 727.70
ip 23203223 ( 99.68%) 16922738528 ( 99.91%) 729.33
tcp 20600970 ( 88.50%) 16388937393 ( 96.76%) 795.54
http(s) 9144643 ( 39.29%) 12256687144 ( 72.36%) 1340.31
http(c) 6255522 ( 26.87%) 769507784 ( 4.54%) 123.01
squid 924917 ( 3.97%) 665408265 ( 3.93%) 719.42
smtp 414443 ( 1.78%) 135267049 ( 0.80%) 326.38
nntp 814 ( 0.00%) 74733 ( 0.00%) 91.81
ftp 165259 ( 0.71%) 207640235 ( 1.23%) 1256.45
pop3 15589 ( 0.07%) 4369460 ( 0.03%) 280.29
imap 6077 ( 0.03%) 2522776 ( 0.01%) 415.14
telnet 316 ( 0.00%) 33961 ( 0.00%) 107.47
ssh 289410 ( 1.24%) 77288158 ( 0.46%) 267.05
dns 7447 ( 0.03%) 2930155 ( 0.02%) 393.47
bgp 251 ( 0.00%) 74494 ( 0.00%) 296.79
napster 6 ( 0.00%) 1167 ( 0.00%) 194.50
realaud 27 ( 0.00%) 3811 ( 0.00%) 141.15
rtsp 350891 ( 1.51%) 132228666 ( 0.78%) 376.84
icecast 67353 ( 0.29%) 30396497 ( 0.18%) 451.30
hotline 5 ( 0.00%) 630 ( 0.00%) 126.00
other 2957998 ( 12.71%) 2104502288 ( 12.42%) 711.46
udp 2249887 ( 9.67%) 482219536 ( 2.85%) 214.33
dns 1697290 ( 7.29%) 206280609 ( 1.22%) 121.54
realaud 9578 ( 0.04%) 5507639 ( 0.03%) 575.03
halflif 20 ( 0.00%) 1681 ( 0.00%) 84.05
starcra 12 ( 0.00%) 2609 ( 0.00%) 217.42
everque 91 ( 0.00%) 12809 ( 0.00%) 140.76
unreal 10 ( 0.00%) 1428 ( 0.00%) 142.80
quake 12 ( 0.00%) 1744 ( 0.00%) 145.33
cuseeme 8 ( 0.00%) 1120 ( 0.00%) 140.00
other 542672 ( 2.33%) 270392857 ( 1.60%) 498.26
icmp 240612 ( 1.03%) 24735395 ( 0.15%) 102.80
ipip 351 ( 0.00%) 42266 ( 0.00%) 120.42
ipsec 203 ( 0.00%) 25866 ( 0.00%) 127.42
ip6 7519 ( 0.03%) 3988115 ( 0.02%) 530.40
other 103681 ( 0.45%) 22789957 ( 0.13%) 219.81
frag 3864 ( 0.02%) 3728533 ( 0.02%) 964.94
ip6 73662 ( 0.32%) 15819745 ( 0.09%) 214.76
tcp6 16458 ( 0.07%) 5629049 ( 0.03%) 342.03
http(s) 472 ( 0.00%) 432769 ( 0.00%) 916.88
http(c) 5812 ( 0.02%) 615164 ( 0.00%) 105.84
smtp 704 ( 0.00%) 204387 ( 0.00%) 290.32
nntp 1509 ( 0.01%) 188836 ( 0.00%) 125.14
ftp 18 ( 0.00%) 1670 ( 0.00%) 92.78
ssh 669 ( 0.00%) 98001 ( 0.00%) 146.49
dns 12 ( 0.00%) 1122 ( 0.00%) 93.50
bgp 144 ( 0.00%) 12546 ( 0.00%) 87.12
other 7118 ( 0.03%) 4074554 ( 0.02%) 572.43
udp6 47975 ( 0.21%) 8947344 ( 0.05%) 186.50
dns 47912 ( 0.21%) 8940414 ( 0.05%) 186.60
other 63 ( 0.00%) 6930 ( 0.00%) 110.00
icmp6 8951 ( 0.04%) 1198909 ( 0.01%) 133.94
ip6 218 ( 0.00%) 32121 ( 0.00%) 147.34
pim6 52 ( 0.00%) 6192 ( 0.00%) 119.08
other6 8 ( 0.00%) 6130 ( 0.00%) 766.25
tcpdump file: 200707261400.dump.gz (584.96 MB)