Traffic Trace Info
DumpFile: 200708041400.dump
FileSize: 1643.33MB
Id: 200708041400
StartTime: Sat Aug 4 14:00:00 2007
EndTime: Sat Aug 4 14:15:01 2007
TotalTime: 900.21 seconds
TotalCapSize: 1290.74MB CapLen: 96 bytes
# of packets: 23102634 (19320.35MB)
AvgRate: 180.04Mbps stddev:19.89M
IP flow (unique src/dst pair) Information
# of flows: 425194 (avg. 54.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
19.8% 6.1% 2.7% 2.6% 2.2% 1.8% 1.7% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 238544
Top 10 bandwidth usage (bytes/total in %):
19.9% 19.9% 9.3% 8.1% 7.8% 6.2% 6.2% 5.3% 5.3% 2.9%
# of IPv6 addresses: 1453
Top 10 bandwidth usage (bytes/total in %):
25.8% 25.8% 21.6% 21.6% 9.5% 6.6% 3.6% 3.5% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200708041400.pktlen.png)
detailed numbers
[ 32- 63]: 4347902
[ 64- 127]: 4550016
[ 128- 255]: 533212
[ 256- 511]: 315435
[ 512- 1023]: 380302
[ 1024- 2047]: 12975767
Protocol Breakdown
![[protocol breakdown chart]](200708041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23102634 (100.00%) 20258853281 (100.00%) 876.91
ip 22970055 ( 99.43%) 20235739053 ( 99.89%) 880.96
tcp 20361269 ( 88.13%) 19268872477 ( 95.11%) 946.35
http(s) 8371626 ( 36.24%) 11844067903 ( 58.46%) 1414.79
http(c) 5181979 ( 22.43%) 465465220 ( 2.30%) 89.82
squid 581887 ( 2.52%) 469940108 ( 2.32%) 807.61
smtp 354065 ( 1.53%) 80479826 ( 0.40%) 227.30
ftp 70701 ( 0.31%) 88808670 ( 0.44%) 1256.12
pop3 9568 ( 0.04%) 5346450 ( 0.03%) 558.78
imap 3008 ( 0.01%) 762598 ( 0.00%) 253.52
telnet 2115 ( 0.01%) 145630 ( 0.00%) 68.86
ssh 83903 ( 0.36%) 55054167 ( 0.27%) 656.16
dns 5647 ( 0.02%) 2140671 ( 0.01%) 379.08
bgp 218 ( 0.00%) 59312 ( 0.00%) 272.07
napster 5 ( 0.00%) 464 ( 0.00%) 92.80
realaud 1327 ( 0.01%) 91462 ( 0.00%) 68.92
rtsp 175332 ( 0.76%) 55242416 ( 0.27%) 315.07
icecast 51153 ( 0.22%) 27228741 ( 0.13%) 532.30
other 5468712 ( 23.67%) 6174037459 ( 30.48%) 1128.97
udp 2128344 ( 9.21%) 892938585 ( 4.41%) 419.55
dns 1229601 ( 5.32%) 151457336 ( 0.75%) 123.18
realaud 12896 ( 0.06%) 17155333 ( 0.08%) 1330.28
halflif 10 ( 0.00%) 1191 ( 0.00%) 119.10
starcra 2 ( 0.00%) 158 ( 0.00%) 79.00
everque 31 ( 0.00%) 5892 ( 0.00%) 190.06
unreal 3 ( 0.00%) 482 ( 0.00%) 160.67
quake 9 ( 0.00%) 757 ( 0.00%) 84.11
cuseeme 4 ( 0.00%) 376 ( 0.00%) 94.00
other 885510 ( 3.83%) 723931062 ( 3.57%) 817.53
icmp 281615 ( 1.22%) 30393369 ( 0.15%) 107.93
ipip 362 ( 0.00%) 44828 ( 0.00%) 123.83
ipsec 179 ( 0.00%) 19690 ( 0.00%) 110.00
ip6 7473 ( 0.03%) 3961160 ( 0.02%) 530.06
other 190813 ( 0.83%) 39508944 ( 0.20%) 207.06
frag 8095 ( 0.04%) 7784663 ( 0.04%) 961.66
ip6 132579 ( 0.57%) 23114228 ( 0.11%) 174.34
tcp6 85412 ( 0.37%) 14415672 ( 0.07%) 168.78
http(s) 206 ( 0.00%) 182126 ( 0.00%) 884.11
http(c) 16851 ( 0.07%) 2247810 ( 0.01%) 133.39
squid 7 ( 0.00%) 856 ( 0.00%) 122.29
smtp 457 ( 0.00%) 149832 ( 0.00%) 327.86
nntp 58158 ( 0.25%) 5124079 ( 0.03%) 88.11
pop3 335 ( 0.00%) 27931 ( 0.00%) 83.38
ssh 85 ( 0.00%) 13004 ( 0.00%) 152.99
bgp 92 ( 0.00%) 8776 ( 0.00%) 95.39
other 9221 ( 0.04%) 6661258 ( 0.03%) 722.40
udp6 36789 ( 0.16%) 7279605 ( 0.04%) 197.87
dns 36716 ( 0.16%) 7271575 ( 0.04%) 198.05
other 73 ( 0.00%) 8030 ( 0.00%) 110.00
icmp6 10097 ( 0.04%) 1377628 ( 0.01%) 136.44
ip6 218 ( 0.00%) 32032 ( 0.00%) 146.94
pim6 61 ( 0.00%) 7056 ( 0.00%) 115.67
other6 2 ( 0.00%) 2235 ( 0.00%) 1117.50
tcpdump file: 200708041400.dump.gz (560.83 MB)