Traffic Trace Info
DumpFile: 200708211400.dump
FileSize: 1987.21MB
Id: 200708211400
StartTime: Tue Aug 21 14:00:01 2007
EndTime: Tue Aug 21 14:15:01 2007
TotalTime: 899.76 seconds
TotalCapSize: 1554.92MB CapLen: 96 bytes
# of packets: 28321197 (18727.16MB)
AvgRate: 174.53Mbps stddev:35.60M
IP flow (unique src/dst pair) Information
# of flows: 861725 (avg. 32.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.7% 1.3% 0.9% 0.9% 0.8% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 469965
Top 10 bandwidth usage (bytes/total in %):
15.4% 8.6% 8.3% 6.9% 2.7% 2.3% 2.2% 2.0% 2.0% 1.7%
# of IPv6 addresses: 2259
Top 10 bandwidth usage (bytes/total in %):
35.7% 35.7% 8.1% 5.2% 4.1% 3.9% 3.4% 3.3% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200708211400.pktlen.png)
detailed numbers
[ 32- 63]: 6620301
[ 64- 127]: 7052187
[ 128- 255]: 805536
[ 256- 511]: 752100
[ 512- 1023]: 1109479
[ 1024- 2047]: 11981594
Protocol Breakdown
![[protocol breakdown chart]](200708211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28321197 (100.00%) 19636853577 (100.00%) 693.36
ip 28239083 ( 99.71%) 19616549802 ( 99.90%) 694.66
tcp 23742031 ( 83.83%) 18403016620 ( 93.72%) 775.12
http(s) 10872128 ( 38.39%) 14463074809 ( 73.65%) 1330.29
http(c) 8329113 ( 29.41%) 953697456 ( 4.86%) 114.50
squid 1047146 ( 3.70%) 809873283 ( 4.12%) 773.41
smtp 510821 ( 1.80%) 144266873 ( 0.73%) 282.42
nntp 14 ( 0.00%) 917 ( 0.00%) 65.50
ftp 14260 ( 0.05%) 1354792 ( 0.01%) 95.01
pop3 27076 ( 0.10%) 15337883 ( 0.08%) 566.48
imap 3873 ( 0.01%) 1242732 ( 0.01%) 320.87
telnet 697 ( 0.00%) 68327 ( 0.00%) 98.03
ssh 77663 ( 0.27%) 36182394 ( 0.18%) 465.89
dns 6241 ( 0.02%) 2163989 ( 0.01%) 346.74
bgp 248 ( 0.00%) 61188 ( 0.00%) 246.73
napster 2249 ( 0.01%) 177196 ( 0.00%) 78.79
realaud 30 ( 0.00%) 4298 ( 0.00%) 143.27
rtsp 260223 ( 0.92%) 59022490 ( 0.30%) 226.82
icecast 7324 ( 0.03%) 601841 ( 0.00%) 82.17
hotline 35 ( 0.00%) 2959 ( 0.00%) 84.54
other 2582881 ( 9.12%) 1915882653 ( 9.76%) 741.76
udp 3481650 ( 12.29%) 1106994030 ( 5.64%) 317.95
dns 1825462 ( 6.45%) 212752824 ( 1.08%) 116.55
realaud 7743 ( 0.03%) 4566103 ( 0.02%) 589.71
halflif 25 ( 0.00%) 2378 ( 0.00%) 95.12
starcra 6010 ( 0.02%) 428553 ( 0.00%) 71.31
everque 112 ( 0.00%) 30853 ( 0.00%) 275.47
unreal 15 ( 0.00%) 1701 ( 0.00%) 113.40
quake 12 ( 0.00%) 997 ( 0.00%) 83.08
cuseeme 4 ( 0.00%) 318 ( 0.00%) 79.50
other 1642242 ( 5.80%) 889184028 ( 4.53%) 541.45
icmp 772211 ( 2.73%) 62716603 ( 0.32%) 81.22
ipip 421 ( 0.00%) 49254 ( 0.00%) 116.99
ipsec 180 ( 0.00%) 19800 ( 0.00%) 110.00
ip6 16812 ( 0.06%) 8170444 ( 0.04%) 485.99
other 225778 ( 0.80%) 35583051 ( 0.18%) 157.60
frag 1112 ( 0.00%) 956006 ( 0.00%) 859.72
ip6 82114 ( 0.29%) 20303775 ( 0.10%) 247.26
tcp6 28790 ( 0.10%) 10966812 ( 0.06%) 380.92
http(s) 915 ( 0.00%) 1050725 ( 0.01%) 1148.33
http(c) 16971 ( 0.06%) 1779472 ( 0.01%) 104.85
smtp 1201 ( 0.00%) 313852 ( 0.00%) 261.33
ftp 322 ( 0.00%) 36999 ( 0.00%) 114.90
ssh 111 ( 0.00%) 17896 ( 0.00%) 161.23
dns 12 ( 0.00%) 1122 ( 0.00%) 93.50
bgp 91 ( 0.00%) 8663 ( 0.00%) 95.20
other 9167 ( 0.03%) 7758083 ( 0.04%) 846.31
udp6 44620 ( 0.16%) 8237062 ( 0.04%) 184.60
dns 42916 ( 0.15%) 7894402 ( 0.04%) 183.95
starcra 6 ( 0.00%) 1056 ( 0.00%) 176.00
everque 1 ( 0.00%) 420 ( 0.00%) 420.00
other 1697 ( 0.01%) 341184 ( 0.00%) 201.05
icmp6 8472 ( 0.03%) 1036594 ( 0.01%) 122.36
ip6 157 ( 0.00%) 22469 ( 0.00%) 143.11
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 44 ( 0.00%) 36622 ( 0.00%) 832.32
tcpdump file: 200708211400.dump.gz (733.00 MB)