Traffic Trace Info
DumpFile: 200708251400.dump
FileSize: 1290.20MB
Id: 200708251400
StartTime: Sat Aug 25 14:00:01 2007
EndTime: Sat Aug 25 14:15:01 2007
TotalTime: 900.23 seconds
TotalCapSize: 1009.86MB CapLen: 96 bytes
# of packets: 18361710 (11376.37MB)
AvgRate: 106.02Mbps stddev:10.53M
IP flow (unique src/dst pair) Information
# of flows: 964128 (avg. 19.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.5% 1.4% 0.9% 0.8% 0.8% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 560822
Top 10 bandwidth usage (bytes/total in %):
15.2% 13.9% 13.8% 2.1% 2.0% 1.8% 1.8% 1.5% 1.5% 1.5%
# of IPv6 addresses: 2734
Top 10 bandwidth usage (bytes/total in %):
79.5% 79.5% 4.8% 4.8% 3.2% 0.9% 0.9% 0.8% 0.8% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200708251400.pktlen.png)
detailed numbers
[ 32- 63]: 4500501
[ 64- 127]: 5057137
[ 128- 255]: 555502
[ 256- 511]: 519589
[ 512- 1023]: 520872
[ 1024- 2047]: 7208109
Protocol Breakdown
![[protocol breakdown chart]](200708251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18361710 (100.00%) 11928986221 (100.00%) 649.67
ip 18248080 ( 99.38%) 11853723140 ( 99.37%) 649.59
tcp 14687995 ( 79.99%) 11327670594 ( 94.96%) 771.22
http(s) 6450996 ( 35.13%) 8885142129 ( 74.48%) 1377.33
http(c) 3659166 ( 19.93%) 366483232 ( 3.07%) 100.15
squid 711340 ( 3.87%) 342446887 ( 2.87%) 481.41
smtp 461500 ( 2.51%) 125166130 ( 1.05%) 271.22
nntp 31 ( 0.00%) 5771 ( 0.00%) 186.16
ftp 85473 ( 0.47%) 90550094 ( 0.76%) 1059.40
pop3 14478 ( 0.08%) 9593504 ( 0.08%) 662.63
imap 1115 ( 0.01%) 144379 ( 0.00%) 129.49
telnet 186 ( 0.00%) 12316 ( 0.00%) 66.22
ssh 60219 ( 0.33%) 34451799 ( 0.29%) 572.11
dns 6054 ( 0.03%) 2322606 ( 0.02%) 383.65
bgp 261 ( 0.00%) 62133 ( 0.00%) 238.06
napster 514 ( 0.00%) 164456 ( 0.00%) 319.95
realaud 25 ( 0.00%) 3821 ( 0.00%) 152.84
rtsp 552356 ( 3.01%) 166605949 ( 1.40%) 301.63
icecast 5768 ( 0.03%) 467976 ( 0.00%) 81.13
hotline 3 ( 0.00%) 180 ( 0.00%) 60.00
other 2678508 ( 14.59%) 1304047112 ( 10.93%) 486.86
udp 2059124 ( 11.21%) 354278762 ( 2.97%) 172.05
dns 1556231 ( 8.48%) 186719682 ( 1.57%) 119.98
rip 1 ( 0.00%) 140 ( 0.00%) 140.00
realaud 2267 ( 0.01%) 1914512 ( 0.02%) 844.51
halflif 22 ( 0.00%) 2878 ( 0.00%) 130.82
starcra 19 ( 0.00%) 2447 ( 0.00%) 128.79
everque 49 ( 0.00%) 9188 ( 0.00%) 187.51
unreal 8 ( 0.00%) 900 ( 0.00%) 112.50
quake 10 ( 0.00%) 916 ( 0.00%) 91.60
cuseeme 4 ( 0.00%) 343 ( 0.00%) 85.75
other 500333 ( 2.72%) 165609826 ( 1.39%) 331.00
icmp 1231177 ( 6.71%) 95967933 ( 0.80%) 77.95
ipip 326 ( 0.00%) 38904 ( 0.00%) 119.34
ipsec 179 ( 0.00%) 19690 ( 0.00%) 110.00
ip6 17430 ( 0.09%) 11364500 ( 0.10%) 652.01
sctp 1 ( 0.00%) 98 ( 0.00%) 98.00
other 251848 ( 1.37%) 64382659 ( 0.54%) 255.64
frag 1491 ( 0.01%) 1223336 ( 0.01%) 820.48
ip6 113630 ( 0.62%) 75263081 ( 0.63%) 662.35
tcp6 68432 ( 0.37%) 66660425 ( 0.56%) 974.11
http(s) 160 ( 0.00%) 129330 ( 0.00%) 808.31
http(c) 20466 ( 0.11%) 2484232 ( 0.02%) 121.38
smtp 385 ( 0.00%) 116364 ( 0.00%) 302.24
nntp 2454 ( 0.01%) 239537 ( 0.00%) 97.61
ftp 7 ( 0.00%) 715 ( 0.00%) 102.14
pop3 56 ( 0.00%) 6772 ( 0.00%) 120.93
ssh 155 ( 0.00%) 25763 ( 0.00%) 166.21
bgp 103 ( 0.00%) 10375 ( 0.00%) 100.73
other 44646 ( 0.24%) 63647337 ( 0.53%) 1425.60
udp6 35824 ( 0.20%) 7439735 ( 0.06%) 207.67
dns 33211 ( 0.18%) 6333751 ( 0.05%) 190.71
everque 37 ( 0.00%) 6901 ( 0.00%) 186.51
unreal 2 ( 0.00%) 262 ( 0.00%) 131.00
other 2574 ( 0.01%) 1098821 ( 0.01%) 426.89
icmp6 9145 ( 0.05%) 1098976 ( 0.01%) 120.17
ip6 156 ( 0.00%) 22301 ( 0.00%) 142.96
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 43 ( 0.00%) 37564 ( 0.00%) 873.58
tcpdump file: 200708251400.dump.gz (468.25 MB)