Traffic Trace Info
DumpFile: 200708271400.dump
FileSize: 1723.05MB
Id: 200708271400
StartTime: Mon Aug 27 14:00:01 2007
EndTime: Mon Aug 27 14:15:00 2007
TotalTime: 899.51 seconds
TotalCapSize: 1350.14MB CapLen: 96 bytes
# of packets: 24434296 (17008.73MB)
AvgRate: 158.61Mbps stddev:29.25M
IP flow (unique src/dst pair) Information
# of flows: 860264 (avg. 28.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.4% 1.1% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 481440
Top 10 bandwidth usage (bytes/total in %):
16.2% 9.4% 9.0% 2.8% 2.2% 2.1% 1.8% 1.8% 1.7% 1.5%
# of IPv6 addresses: 2504
Top 10 bandwidth usage (bytes/total in %):
24.1% 24.1% 20.8% 20.8% 17.3% 7.3% 4.4% 2.5% 2.4% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200708271400.pktlen.png)
detailed numbers
[ 32- 63]: 5585808
[ 64- 127]: 5825009
[ 128- 255]: 713528
[ 256- 511]: 571654
[ 512- 1023]: 643500
[ 1024- 2047]: 11094797
Protocol Breakdown
![[protocol breakdown chart]](200708271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24434296 (100.00%) 17834946442 (100.00%) 729.91
ip 24304350 ( 99.47%) 17802295957 ( 99.82%) 732.47
tcp 20770548 ( 85.01%) 17007305222 ( 95.36%) 818.82
http(s) 10144076 ( 41.52%) 13875950608 ( 77.80%) 1367.89
http(c) 6195156 ( 25.35%) 804375578 ( 4.51%) 129.84
squid 964561 ( 3.95%) 687762925 ( 3.86%) 713.03
smtp 497867 ( 2.04%) 153542205 ( 0.86%) 308.40
nntp 56 ( 0.00%) 4005 ( 0.00%) 71.52
ftp 11591 ( 0.05%) 4828294 ( 0.03%) 416.56
pop3 20643 ( 0.08%) 9182357 ( 0.05%) 444.82
imap 5371 ( 0.02%) 1358524 ( 0.01%) 252.94
telnet 205 ( 0.00%) 18893 ( 0.00%) 92.16
ssh 424638 ( 1.74%) 91265308 ( 0.51%) 214.92
dns 30793 ( 0.13%) 10048755 ( 0.06%) 326.33
bgp 270 ( 0.00%) 72794 ( 0.00%) 269.61
napster 73 ( 0.00%) 8971 ( 0.00%) 122.89
realaud 16 ( 0.00%) 2194 ( 0.00%) 137.12
rtsp 291314 ( 1.19%) 36880455 ( 0.21%) 126.60
icecast 59587 ( 0.24%) 44972448 ( 0.25%) 754.74
hotline 6 ( 0.00%) 1198 ( 0.00%) 199.67
other 2124323 ( 8.69%) 1287029590 ( 7.22%) 605.85
udp 2554436 ( 10.45%) 682983876 ( 3.83%) 267.37
dns 1782756 ( 7.30%) 217577829 ( 1.22%) 122.05
realaud 16 ( 0.00%) 1916 ( 0.00%) 119.75
halflif 18 ( 0.00%) 2771 ( 0.00%) 153.94
starcra 288 ( 0.00%) 20146 ( 0.00%) 69.95
everque 39 ( 0.00%) 6813 ( 0.00%) 174.69
unreal 20 ( 0.00%) 2706 ( 0.00%) 135.30
quake 16 ( 0.00%) 1512 ( 0.00%) 94.50
cuseeme 9 ( 0.00%) 801 ( 0.00%) 89.00
other 771153 ( 3.16%) 465347853 ( 2.61%) 603.44
icmp 870798 ( 3.56%) 70882728 ( 0.40%) 81.40
ipip 328 ( 0.00%) 40668 ( 0.00%) 123.99
ipsec 12195 ( 0.05%) 8519786 ( 0.05%) 698.63
ip6 7563 ( 0.03%) 4031349 ( 0.02%) 533.04
other 88482 ( 0.36%) 28532328 ( 0.16%) 322.46
frag 1584 ( 0.01%) 1312990 ( 0.01%) 828.91
ip6 129946 ( 0.53%) 32650485 ( 0.18%) 251.26
tcp6 72133 ( 0.30%) 23072287 ( 0.13%) 319.86
http(s) 6129 ( 0.03%) 8700216 ( 0.05%) 1419.52
http(c) 49809 ( 0.20%) 6024335 ( 0.03%) 120.95
squid 14 ( 0.00%) 1464 ( 0.00%) 104.57
smtp 466 ( 0.00%) 95898 ( 0.00%) 205.79
ssh 4644 ( 0.02%) 701099 ( 0.00%) 150.97
dns 31 ( 0.00%) 2871 ( 0.00%) 92.61
bgp 106 ( 0.00%) 10788 ( 0.00%) 101.77
other 10934 ( 0.04%) 7535616 ( 0.04%) 689.19
udp6 46668 ( 0.19%) 8239726 ( 0.05%) 176.56
dns 44743 ( 0.18%) 7911128 ( 0.04%) 176.81
starcra 17 ( 0.00%) 4128 ( 0.00%) 242.82
everque 42 ( 0.00%) 8759 ( 0.00%) 208.55
other 1866 ( 0.01%) 315711 ( 0.00%) 169.19
icmp6 10898 ( 0.04%) 1262604 ( 0.01%) 115.86
ip6 161 ( 0.00%) 23095 ( 0.00%) 143.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 56 ( 0.00%) 48693 ( 0.00%) 869.52
tcpdump file: 200708271400.dump.gz (635.60 MB)