Traffic Trace Info
DumpFile: 200708061400.dump
FileSize: 1604.27MB
Id: 200708061400
StartTime: Mon Aug 6 14:00:01 2007
EndTime: Mon Aug 6 14:15:01 2007
TotalTime: 900.08 seconds
TotalCapSize: 1259.71MB CapLen: 96 bytes
# of packets: 22576108 (15682.81MB)
AvgRate: 146.19Mbps stddev:24.16M
IP flow (unique src/dst pair) Information
# of flows: 609682 (avg. 37.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 3.1% 2.2% 1.4% 1.1% 1.1% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 333162
Top 10 bandwidth usage (bytes/total in %):
13.2% 7.1% 6.7% 6.5% 6.3% 4.8% 3.1% 2.7% 2.3% 2.2%
# of IPv6 addresses: 1630
Top 10 bandwidth usage (bytes/total in %):
23.4% 23.4% 15.2% 15.2% 10.9% 4.2% 3.9% 3.9% 3.9% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200708061400.pktlen.png)
detailed numbers
[ 32- 63]: 4826951
[ 64- 127]: 5772359
[ 128- 255]: 596733
[ 256- 511]: 566316
[ 512- 1023]: 634149
[ 1024- 2047]: 10179600
Protocol Breakdown
![[protocol breakdown chart]](200708061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22576108 (100.00%) 16444622463 (100.00%) 728.41
ip 22420553 ( 99.31%) 16421364960 ( 99.86%) 732.42
tcp 19396297 ( 85.92%) 15774496145 ( 95.92%) 813.27
http(s) 8996046 ( 39.85%) 12487018885 ( 75.93%) 1388.06
http(c) 5823947 ( 25.80%) 737190304 ( 4.48%) 126.58
squid 661588 ( 2.93%) 417422609 ( 2.54%) 630.94
smtp 429481 ( 1.90%) 146619759 ( 0.89%) 341.39
nntp 33 ( 0.00%) 3002 ( 0.00%) 90.97
ftp 25441 ( 0.11%) 2268547 ( 0.01%) 89.17
pop3 23553 ( 0.10%) 14875677 ( 0.09%) 631.58
imap 6092 ( 0.03%) 2138660 ( 0.01%) 351.06
telnet 366 ( 0.00%) 25706 ( 0.00%) 70.23
ssh 82854 ( 0.37%) 46687131 ( 0.28%) 563.49
dns 18986 ( 0.08%) 7156501 ( 0.04%) 376.94
bgp 216 ( 0.00%) 52898 ( 0.00%) 244.90
realaud 146 ( 0.00%) 17330 ( 0.00%) 118.70
rtsp 328635 ( 1.46%) 35738532 ( 0.22%) 108.75
icecast 22874 ( 0.10%) 15786308 ( 0.10%) 690.14
hotline 13 ( 0.00%) 980 ( 0.00%) 75.38
other 2976016 ( 13.18%) 1861492716 ( 11.32%) 625.50
udp 2237886 ( 9.91%) 562653445 ( 3.42%) 251.42
dns 1605023 ( 7.11%) 200849870 ( 1.22%) 125.14
realaud 1982 ( 0.01%) 153109 ( 0.00%) 77.25
halflif 17 ( 0.00%) 2058 ( 0.00%) 121.06
starcra 7 ( 0.00%) 906 ( 0.00%) 129.43
everque 28 ( 0.00%) 5151 ( 0.00%) 183.96
unreal 2 ( 0.00%) 160 ( 0.00%) 80.00
quake 4 ( 0.00%) 339 ( 0.00%) 84.75
cuseeme 3 ( 0.00%) 255 ( 0.00%) 85.00
other 630813 ( 2.79%) 361637003 ( 2.20%) 573.29
icmp 624869 ( 2.77%) 55497615 ( 0.34%) 88.81
ipip 372 ( 0.00%) 45688 ( 0.00%) 122.82
ipsec 548 ( 0.00%) 401400 ( 0.00%) 732.48
ip6 7739 ( 0.03%) 4064862 ( 0.02%) 525.24
other 152842 ( 0.68%) 24205805 ( 0.15%) 158.37
frag 4406 ( 0.02%) 4533886 ( 0.03%) 1029.03
ip6 155555 ( 0.69%) 23257503 ( 0.14%) 149.51
tcp6 97326 ( 0.43%) 13521197 ( 0.08%) 138.93
http(s) 860 ( 0.00%) 783576 ( 0.00%) 911.13
http(c) 24500 ( 0.11%) 2411331 ( 0.01%) 98.42
squid 6 ( 0.00%) 969 ( 0.00%) 161.50
smtp 756 ( 0.00%) 180354 ( 0.00%) 238.56
nntp 63513 ( 0.28%) 5894103 ( 0.04%) 92.80
ftp 18 ( 0.00%) 1670 ( 0.00%) 92.78
ssh 64 ( 0.00%) 10562 ( 0.00%) 165.03
bgp 94 ( 0.00%) 9138 ( 0.00%) 97.21
other 7515 ( 0.03%) 4229494 ( 0.03%) 562.81
udp6 47280 ( 0.21%) 8195060 ( 0.05%) 173.33
dns 47237 ( 0.21%) 8190330 ( 0.05%) 173.39
other 43 ( 0.00%) 4730 ( 0.00%) 110.00
icmp6 10670 ( 0.05%) 1500781 ( 0.01%) 140.65
ip6 219 ( 0.00%) 32285 ( 0.00%) 147.42
pim6 58 ( 0.00%) 6808 ( 0.00%) 117.38
other6 2 ( 0.00%) 1372 ( 0.00%) 686.00
tcpdump file: 200708061400.dump.gz (562.15 MB)