Traffic Trace Info
DumpFile: 200708091400.dump
FileSize: 1347.18MB
Id: 200708091400
StartTime: Thu Aug 9 14:00:01 2007
EndTime: Thu Aug 9 14:15:00 2007
TotalTime: 899.58 seconds
TotalCapSize: 1054.41MB CapLen: 96 bytes
# of packets: 19186142 (10968.10MB)
AvgRate: 102.24Mbps stddev:17.69M
IP flow (unique src/dst pair) Information
# of flows: 594865 (avg. 32.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 0.9% 0.8% 0.8% 0.7% 0.7% 0.6% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 304674
Top 10 bandwidth usage (bytes/total in %):
13.9% 13.8% 3.9% 2.3% 2.1% 1.9% 1.9% 1.6% 1.6% 1.5%
# of IPv6 addresses: 1593
Top 10 bandwidth usage (bytes/total in %):
20.9% 20.9% 10.9% 5.9% 5.5% 5.4% 5.3% 5.1% 4.7% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200708091400.pktlen.png)
detailed numbers
[ 32- 63]: 5172415
[ 64- 127]: 5306424
[ 128- 255]: 883957
[ 256- 511]: 483631
[ 512- 1023]: 585262
[ 1024- 2047]: 6754453
Protocol Breakdown
![[protocol breakdown chart]](200708091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19186142 (100.00%) 11500884331 (100.00%) 599.44
ip 19101777 ( 99.56%) 11483896994 ( 99.85%) 601.20
tcp 16131441 ( 84.08%) 10953092643 ( 95.24%) 678.99
http(s) 5784864 ( 30.15%) 7876994495 ( 68.49%) 1361.66
http(c) 5069435 ( 26.42%) 634134194 ( 5.51%) 125.09
squid 633344 ( 3.30%) 505292039 ( 4.39%) 797.82
smtp 468901 ( 2.44%) 119806974 ( 1.04%) 255.51
nntp 12 ( 0.00%) 750 ( 0.00%) 62.50
ftp 111588 ( 0.58%) 24610403 ( 0.21%) 220.55
pop3 15857 ( 0.08%) 7811783 ( 0.07%) 492.64
imap 4651 ( 0.02%) 2162396 ( 0.02%) 464.93
telnet 126 ( 0.00%) 10055 ( 0.00%) 79.80
ssh 1069912 ( 5.58%) 189073668 ( 1.64%) 176.72
dns 5194 ( 0.03%) 2082282 ( 0.02%) 400.90
bgp 265 ( 0.00%) 90120 ( 0.00%) 340.08
napster 24 ( 0.00%) 2058 ( 0.00%) 85.75
rtsp 571032 ( 2.98%) 68003738 ( 0.59%) 119.09
icecast 4745 ( 0.02%) 3361312 ( 0.03%) 708.39
hotline 5 ( 0.00%) 381 ( 0.00%) 76.20
other 2391406 ( 12.46%) 1519651195 ( 13.21%) 635.46
udp 2374928 ( 12.38%) 389899605 ( 3.39%) 164.17
dns 1838618 ( 9.58%) 228793119 ( 1.99%) 124.44
realaud 1309 ( 0.01%) 81046 ( 0.00%) 61.91
halflif 6 ( 0.00%) 790 ( 0.00%) 131.67
starcra 11 ( 0.00%) 2146 ( 0.00%) 195.09
everque 30 ( 0.00%) 5789 ( 0.00%) 192.97
unreal 11 ( 0.00%) 2075 ( 0.00%) 188.64
quake 18 ( 0.00%) 1470 ( 0.00%) 81.67
cuseeme 12 ( 0.00%) 1604 ( 0.00%) 133.67
other 534907 ( 2.79%) 161007982 ( 1.40%) 301.00
icmp 334903 ( 1.75%) 37281304 ( 0.32%) 111.32
ipip 321 ( 0.00%) 37586 ( 0.00%) 117.09
ipsec 209 ( 0.00%) 25638 ( 0.00%) 122.67
ip6 2538 ( 0.01%) 503349 ( 0.00%) 198.33
other 257437 ( 1.34%) 103056869 ( 0.90%) 400.32
frag 1055 ( 0.01%) 818272 ( 0.01%) 775.61
ip6 84365 ( 0.44%) 16987337 ( 0.15%) 201.36
tcp6 21596 ( 0.11%) 6653170 ( 0.06%) 308.07
http(s) 1094 ( 0.01%) 827788 ( 0.01%) 756.66
http(c) 16092 ( 0.08%) 1878508 ( 0.02%) 116.74
smtp 560 ( 0.00%) 231454 ( 0.00%) 413.31
ssh 66 ( 0.00%) 10722 ( 0.00%) 162.45
bgp 60 ( 0.00%) 6210 ( 0.00%) 103.50
other 3724 ( 0.02%) 3698488 ( 0.03%) 993.15
udp6 53344 ( 0.28%) 9038866 ( 0.08%) 169.44
dns 53278 ( 0.28%) 9031569 ( 0.08%) 169.52
other 66 ( 0.00%) 7297 ( 0.00%) 110.56
icmp6 9157 ( 0.05%) 1257234 ( 0.01%) 137.30
ip6 218 ( 0.00%) 32067 ( 0.00%) 147.10
pim6 50 ( 0.00%) 6000 ( 0.00%) 120.00
tcpdump file: 200708091400.dump.gz (505.79 MB)