Traffic Trace Info
DumpFile: 200708131400.dump
FileSize: 1509.71MB
Id: 200708131400
StartTime: Mon Aug 13 14:00:01 2007
EndTime: Mon Aug 13 14:15:00 2007
TotalTime: 899.50 seconds
TotalCapSize: 1185.82MB CapLen: 96 bytes
# of packets: 21221869 (11966.54MB)
AvgRate: 111.61Mbps stddev:12.40M
IP flow (unique src/dst pair) Information
# of flows: 1088781 (avg. 19.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 1.4% 1.1% 1.1% 0.8% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 778056
Top 10 bandwidth usage (bytes/total in %):
21.2% 12.9% 12.6% 5.7% 4.9% 2.2% 2.0% 2.0% 1.9% 1.6%
# of IPv6 addresses: 1618
Top 10 bandwidth usage (bytes/total in %):
26.4% 26.4% 6.0% 5.9% 5.8% 5.1% 4.2% 3.9% 3.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200708131400.pktlen.png)
detailed numbers
[ 32- 63]: 4579946
[ 64- 127]: 7156473
[ 128- 255]: 908341
[ 256- 511]: 547483
[ 512- 1023]: 520446
[ 1024- 2047]: 7509180
Protocol Breakdown
![[protocol breakdown chart]](200708131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21221869 (100.00%) 12547826210 (100.00%) 591.27
ip 21160289 ( 99.71%) 12533875867 ( 99.89%) 592.33
tcp 18052929 ( 85.07%) 11937553895 ( 95.14%) 661.25
http(s) 6396326 ( 30.14%) 8726084186 ( 69.54%) 1364.23
http(c) 4659415 ( 21.96%) 511234028 ( 4.07%) 109.72
squid 740577 ( 3.49%) 388095049 ( 3.09%) 524.04
smtp 397135 ( 1.87%) 99817892 ( 0.80%) 251.34
nntp 232 ( 0.00%) 23526 ( 0.00%) 101.41
ftp 2016878 ( 9.50%) 156614438 ( 1.25%) 77.65
pop3 13795 ( 0.07%) 7456307 ( 0.06%) 540.51
imap 3826 ( 0.02%) 1397638 ( 0.01%) 365.30
telnet 406 ( 0.00%) 27124 ( 0.00%) 66.81
ssh 974784 ( 4.59%) 171668415 ( 1.37%) 176.11
dns 18548 ( 0.09%) 5724966 ( 0.05%) 308.66
bgp 264 ( 0.00%) 62510 ( 0.00%) 236.78
napster 170 ( 0.00%) 25115 ( 0.00%) 147.74
realaud 1346 ( 0.01%) 93769 ( 0.00%) 69.66
rtsp 81598 ( 0.38%) 5207385 ( 0.04%) 63.82
icecast 8148 ( 0.04%) 10120250 ( 0.08%) 1242.05
other 2739458 ( 12.91%) 1853899917 ( 14.77%) 676.74
udp 2641615 ( 12.45%) 535355884 ( 4.27%) 202.66
dns 1803919 ( 8.50%) 210850579 ( 1.68%) 116.88
realaud 2010 ( 0.01%) 157247 ( 0.00%) 78.23
halflif 17 ( 0.00%) 2622 ( 0.00%) 154.24
starcra 17 ( 0.00%) 3304 ( 0.00%) 194.35
everque 124 ( 0.00%) 17922 ( 0.00%) 144.53
unreal 19 ( 0.00%) 3998 ( 0.00%) 210.42
quake 15 ( 0.00%) 1745 ( 0.00%) 116.33
cuseeme 2 ( 0.00%) 155 ( 0.00%) 77.50
other 835485 ( 3.94%) 324310987 ( 2.58%) 388.17
icmp 400753 ( 1.89%) 39547793 ( 0.32%) 98.68
ipip 344 ( 0.00%) 40936 ( 0.00%) 119.00
ipsec 180 ( 0.00%) 19800 ( 0.00%) 110.00
ip6 8169 ( 0.04%) 4083217 ( 0.03%) 499.84
other 56299 ( 0.27%) 17274342 ( 0.14%) 306.83
frag 1304 ( 0.01%) 1054082 ( 0.01%) 808.35
ip6 61580 ( 0.29%) 13950343 ( 0.11%) 226.54
tcp6 10487 ( 0.05%) 5086816 ( 0.04%) 485.06
http(s) 324 ( 0.00%) 282092 ( 0.00%) 870.65
http(c) 3407 ( 0.02%) 540040 ( 0.00%) 158.51
smtp 475 ( 0.00%) 157051 ( 0.00%) 330.63
ftp 185 ( 0.00%) 26063 ( 0.00%) 140.88
pop3 32 ( 0.00%) 2912 ( 0.00%) 91.00
ssh 103 ( 0.00%) 14240 ( 0.00%) 138.25
bgp 148 ( 0.00%) 17710 ( 0.00%) 119.66
other 5813 ( 0.03%) 4046708 ( 0.03%) 696.15
udp6 41066 ( 0.19%) 7410116 ( 0.06%) 180.44
dns 40978 ( 0.19%) 7400436 ( 0.06%) 180.60
other 88 ( 0.00%) 9680 ( 0.00%) 110.00
icmp6 9863 ( 0.05%) 1431587 ( 0.01%) 145.15
ip6 107 ( 0.00%) 15152 ( 0.00%) 141.61
pim6 57 ( 0.00%) 6672 ( 0.00%) 117.05
tcpdump file: 200708131400.dump.gz (587.22 MB)