Traffic Trace Info
DumpFile: 200708161400.dump
FileSize: 1796.71MB
Id: 200708161400
StartTime: Thu Aug 16 14:00:01 2007
EndTime: Thu Aug 16 14:15:00 2007
TotalTime: 899.20 seconds
TotalCapSize: 1407.43MB CapLen: 96 bytes
# of packets: 25507239 (17346.57MB)
AvgRate: 161.84Mbps stddev:30.12M
IP flow (unique src/dst pair) Information
# of flows: 756341 (avg. 33.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 3.3% 1.9% 1.0% 0.9% 0.7% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 396649
Top 10 bandwidth usage (bytes/total in %):
16.6% 9.1% 8.9% 7.2% 7.2% 4.0% 3.3% 2.0% 2.0% 1.4%
# of IPv6 addresses: 1636
Top 10 bandwidth usage (bytes/total in %):
53.7% 53.7% 8.1% 8.1% 4.3% 3.7% 3.4% 2.4% 2.3% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200708161400.pktlen.png)
detailed numbers
[ 32- 63]: 6069911
[ 64- 127]: 6227390
[ 128- 255]: 666923
[ 256- 511]: 654786
[ 512- 1023]: 607103
[ 1024- 2047]: 11281126
Protocol Breakdown
![[protocol breakdown chart]](200708161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25507239 (100.00%) 18189191837 (100.00%) 713.10
ip 25379723 ( 99.50%) 18153279400 ( 99.80%) 715.27
tcp 22076803 ( 86.55%) 17633911845 ( 96.95%) 798.75
http(s) 9072944 ( 35.57%) 12324292015 ( 67.76%) 1358.36
http(c) 6531113 ( 25.60%) 796265057 ( 4.38%) 121.92
squid 905619 ( 3.55%) 617963961 ( 3.40%) 682.37
smtp 458553 ( 1.80%) 132557197 ( 0.73%) 289.08
nntp 160 ( 0.00%) 16008 ( 0.00%) 100.05
ftp 14243 ( 0.06%) 1224063 ( 0.01%) 85.94
pop3 17241 ( 0.07%) 8491013 ( 0.05%) 492.49
imap 1314097 ( 5.15%) 1307378172 ( 7.19%) 994.89
telnet 452 ( 0.00%) 87731 ( 0.00%) 194.10
ssh 107966 ( 0.42%) 41982215 ( 0.23%) 388.85
dns 23971 ( 0.09%) 8745935 ( 0.05%) 364.85
bgp 290 ( 0.00%) 79365 ( 0.00%) 273.67
napster 377 ( 0.00%) 38057 ( 0.00%) 100.95
realaud 319 ( 0.00%) 83101 ( 0.00%) 260.50
rtsp 436871 ( 1.71%) 74507888 ( 0.41%) 170.55
icecast 31225 ( 0.12%) 16406111 ( 0.09%) 525.42
hotline 15 ( 0.00%) 1527 ( 0.00%) 101.80
other 3161335 ( 12.39%) 2303791709 ( 12.67%) 728.74
udp 2521746 ( 9.89%) 425721679 ( 2.34%) 168.82
dns 1673586 ( 6.56%) 208823963 ( 1.15%) 124.78
realaud 13 ( 0.00%) 1691 ( 0.00%) 130.08
halflif 13 ( 0.00%) 1336 ( 0.00%) 102.77
starcra 14 ( 0.00%) 1796 ( 0.00%) 128.29
everque 68 ( 0.00%) 11648 ( 0.00%) 171.29
unreal 6 ( 0.00%) 492 ( 0.00%) 82.00
quake 8 ( 0.00%) 649 ( 0.00%) 81.12
cuseeme 1 ( 0.00%) 81 ( 0.00%) 81.00
other 848015 ( 3.32%) 216868399 ( 1.19%) 255.74
icmp 618830 ( 2.43%) 56801716 ( 0.31%) 91.79
ipip 373 ( 0.00%) 44134 ( 0.00%) 118.32
ipsec 285 ( 0.00%) 101174 ( 0.00%) 355.00
ip6 8080 ( 0.03%) 4132432 ( 0.02%) 511.44
other 153606 ( 0.60%) 32566420 ( 0.18%) 212.01
frag 1143 ( 0.00%) 942267 ( 0.01%) 824.38
ip6 127516 ( 0.50%) 35912437 ( 0.20%) 281.63
tcp6 61212 ( 0.24%) 25232046 ( 0.14%) 412.21
http(s) 798 ( 0.00%) 635164 ( 0.00%) 795.94
http(c) 4772 ( 0.02%) 611332 ( 0.00%) 128.11
smtp 985 ( 0.00%) 271982 ( 0.00%) 276.12
nntp 33195 ( 0.13%) 2908148 ( 0.02%) 87.61
ftp 513 ( 0.00%) 241595 ( 0.00%) 470.95
pop3 16 ( 0.00%) 1456 ( 0.00%) 91.00
ssh 1934 ( 0.01%) 299210 ( 0.00%) 154.71
bgp 100 ( 0.00%) 10043 ( 0.00%) 100.43
other 18899 ( 0.07%) 20253116 ( 0.11%) 1071.65
udp6 54436 ( 0.21%) 9032139 ( 0.05%) 165.92
dns 54324 ( 0.21%) 9019165 ( 0.05%) 166.03
other 112 ( 0.00%) 12974 ( 0.00%) 115.84
icmp6 11610 ( 0.05%) 1610576 ( 0.01%) 138.72
ip6 227 ( 0.00%) 33460 ( 0.00%) 147.40
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200708161400.dump.gz (660.01 MB)