Traffic Trace Info
DumpFile: 200708281400.dump
FileSize: 1827.75MB
Id: 200708281400
StartTime: Tue Aug 28 14:00:00 2007
EndTime: Tue Aug 28 14:15:01 2007
TotalTime: 900.43 seconds
TotalCapSize: 1429.87MB CapLen: 96 bytes
# of packets: 26074727 (17090.28MB)
AvgRate: 159.22Mbps stddev:17.84M
IP flow (unique src/dst pair) Information
# of flows: 916025 (avg. 28.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.6% 1.7% 1.3% 1.3% 1.2% 1.2% 0.8% 0.7% 0.5%
IP address Information
# of IPv4 addresses: 501555
Top 10 bandwidth usage (bytes/total in %):
11.2% 10.1% 9.0% 4.7% 2.9% 2.9% 2.6% 2.6% 2.6% 2.4%
# of IPv6 addresses: 2453
Top 10 bandwidth usage (bytes/total in %):
58.0% 58.0% 15.9% 6.7% 3.5% 2.6% 2.6% 2.1% 1.9% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200708281400.pktlen.png)
detailed numbers
[ 32- 63]: 6100214
[ 64- 127]: 6685478
[ 128- 255]: 825498
[ 256- 511]: 684519
[ 512- 1023]: 935413
[ 1024- 2047]: 10843605
Protocol Breakdown
![[protocol breakdown chart]](200708281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26074727 (100.00%) 17920456883 (100.00%) 687.27
ip 25911227 ( 99.37%) 17874984725 ( 99.75%) 689.85
tcp 21513792 ( 82.51%) 16756639099 ( 93.51%) 778.88
http(s) 9298233 ( 35.66%) 12639570721 ( 70.53%) 1359.35
http(c) 7649588 ( 29.34%) 1406728121 ( 7.85%) 183.90
squid 568503 ( 2.18%) 345702312 ( 1.93%) 608.09
smtp 491443 ( 1.88%) 132082767 ( 0.74%) 268.77
nntp 54 ( 0.00%) 4352 ( 0.00%) 80.59
ftp 44038 ( 0.17%) 42904607 ( 0.24%) 974.26
pop3 50549 ( 0.19%) 31171349 ( 0.17%) 616.66
imap 6480 ( 0.02%) 2362515 ( 0.01%) 364.59
telnet 535 ( 0.00%) 46817 ( 0.00%) 87.51
ssh 174764 ( 0.67%) 71383032 ( 0.40%) 408.45
dns 16295 ( 0.06%) 11004415 ( 0.06%) 675.32
bgp 295 ( 0.00%) 87753 ( 0.00%) 297.47
napster 476 ( 0.00%) 60363 ( 0.00%) 126.81
realaud 25 ( 0.00%) 2396 ( 0.00%) 95.84
rtsp 271468 ( 1.04%) 58150794 ( 0.32%) 214.21
icecast 52269 ( 0.20%) 30961066 ( 0.17%) 592.34
hotline 165 ( 0.00%) 11356 ( 0.00%) 68.82
other 2888589 ( 11.08%) 1984402983 ( 11.07%) 686.98
udp 3472531 ( 13.32%) 999106042 ( 5.58%) 287.72
dns 1907932 ( 7.32%) 236569148 ( 1.32%) 123.99
realaud 3109 ( 0.01%) 238857 ( 0.00%) 76.83
halflif 25 ( 0.00%) 2546 ( 0.00%) 101.84
starcra 27 ( 0.00%) 8163 ( 0.00%) 302.33
everque 285 ( 0.00%) 172027 ( 0.00%) 603.60
unreal 22 ( 0.00%) 3706 ( 0.00%) 168.45
quake 19 ( 0.00%) 1875 ( 0.00%) 98.68
cuseeme 4 ( 0.00%) 619 ( 0.00%) 154.75
other 1560856 ( 5.99%) 762070161 ( 4.25%) 488.24
icmp 758657 ( 2.91%) 62499919 ( 0.35%) 82.38
ipip 359 ( 0.00%) 43738 ( 0.00%) 121.83
ipsec 26876 ( 0.10%) 13909696 ( 0.08%) 517.55
ip6 5623 ( 0.02%) 3265731 ( 0.02%) 580.78
other 133389 ( 0.51%) 39520500 ( 0.22%) 296.28
frag 4758 ( 0.02%) 3817710 ( 0.02%) 802.38
ip6 163500 ( 0.63%) 45472158 ( 0.25%) 278.12
tcp6 107088 ( 0.41%) 36319825 ( 0.20%) 339.16
http(s) 1064 ( 0.00%) 1078345 ( 0.01%) 1013.48
http(c) 77851 ( 0.30%) 7450860 ( 0.04%) 95.71
squid 96 ( 0.00%) 7488 ( 0.00%) 78.00
smtp 397 ( 0.00%) 157085 ( 0.00%) 395.68
ssh 170 ( 0.00%) 23102 ( 0.00%) 135.89
dns 20 ( 0.00%) 2070 ( 0.00%) 103.50
bgp 97 ( 0.00%) 9475 ( 0.00%) 97.68
other 27393 ( 0.11%) 27591400 ( 0.15%) 1007.24
udp6 38806 ( 0.15%) 6940001 ( 0.04%) 178.84
dns 36950 ( 0.14%) 6590408 ( 0.04%) 178.36
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
everque 34 ( 0.00%) 6886 ( 0.00%) 202.53
unreal 1 ( 0.00%) 139 ( 0.00%) 139.00
other 1820 ( 0.01%) 342431 ( 0.00%) 188.15
icmp6 17377 ( 0.07%) 2138958 ( 0.01%) 123.09
ip6 142 ( 0.00%) 20751 ( 0.00%) 146.13
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 57 ( 0.00%) 48543 ( 0.00%) 851.63
tcpdump file: 200708281400.dump.gz (688.03 MB)