Traffic Trace Info
DumpFile: 200708291400.dump
FileSize: 1873.33MB
Id: 200708291400
StartTime: Wed Aug 29 14:00:01 2007
EndTime: Wed Aug 29 14:15:01 2007
TotalTime: 899.97 seconds
TotalCapSize: 1464.27MB CapLen: 96 bytes
# of packets: 26807813 (18159.94MB)
AvgRate: 169.30Mbps stddev:26.22M
IP flow (unique src/dst pair) Information
# of flows: 768390 (avg. 34.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.3% 1.2% 1.1% 1.1% 1.1% 1.1% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 415225
Top 10 bandwidth usage (bytes/total in %):
13.3% 9.0% 8.3% 6.1% 2.6% 2.3% 2.3% 2.1% 1.9% 1.7%
# of IPv6 addresses: 2500
Top 10 bandwidth usage (bytes/total in %):
29.4% 29.4% 14.0% 14.0% 7.5% 4.0% 3.7% 3.4% 3.0% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200708291400.pktlen.png)
detailed numbers
[ 32- 63]: 5639837
[ 64- 127]: 6804756
[ 128- 255]: 1170804
[ 256- 511]: 595636
[ 512- 1023]: 832277
[ 1024- 2047]: 11764503
Protocol Breakdown
![[protocol breakdown chart]](200708291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26807813 (100.00%) 19042081825 (100.00%) 710.32
ip 26613285 ( 99.27%) 19016485028 ( 99.87%) 714.55
tcp 22049716 ( 82.25%) 17529077465 ( 92.05%) 794.98
http(s) 10489133 ( 39.13%) 14102208035 ( 74.06%) 1344.46
http(c) 6612910 ( 24.67%) 1040989553 ( 5.47%) 157.42
squid 592348 ( 2.21%) 396215370 ( 2.08%) 668.89
smtp 624368 ( 2.33%) 363629841 ( 1.91%) 582.40
nntp 50 ( 0.00%) 3625 ( 0.00%) 72.50
ftp 19014 ( 0.07%) 1731307 ( 0.01%) 91.05
pop3 39130 ( 0.15%) 29811545 ( 0.16%) 761.86
imap 7026 ( 0.03%) 2725161 ( 0.01%) 387.87
telnet 156 ( 0.00%) 11053 ( 0.00%) 70.85
ssh 938760 ( 3.50%) 178494469 ( 0.94%) 190.14
dns 6473 ( 0.02%) 2293770 ( 0.01%) 354.36
bgp 256 ( 0.00%) 60328 ( 0.00%) 235.66
napster 5 ( 0.00%) 300 ( 0.00%) 60.00
realaud 12 ( 0.00%) 6078 ( 0.00%) 506.50
rtsp 531213 ( 1.98%) 42725925 ( 0.22%) 80.43
icecast 69936 ( 0.26%) 48563352 ( 0.26%) 694.40
hotline 5 ( 0.00%) 1169 ( 0.00%) 233.80
other 2118916 ( 7.90%) 1319606284 ( 6.93%) 622.77
udp 3742896 ( 13.96%) 1369485447 ( 7.19%) 365.89
dns 1878380 ( 7.01%) 227559248 ( 1.20%) 121.15
realaud 13051 ( 0.05%) 13206538 ( 0.07%) 1011.92
halflif 24 ( 0.00%) 3903 ( 0.00%) 162.62
starcra 37 ( 0.00%) 5673 ( 0.00%) 153.32
everque 55 ( 0.00%) 9002 ( 0.00%) 163.67
unreal 26 ( 0.00%) 5251 ( 0.00%) 201.96
quake 17 ( 0.00%) 1413 ( 0.00%) 83.12
cuseeme 10 ( 0.00%) 1076 ( 0.00%) 107.60
other 1851066 ( 6.90%) 1128656337 ( 5.93%) 609.73
icmp 557644 ( 2.08%) 48249895 ( 0.25%) 86.52
ipip 349 ( 0.00%) 42994 ( 0.00%) 123.19
ipsec 13832 ( 0.05%) 8030296 ( 0.04%) 580.56
ip6 1070 ( 0.00%) 149629 ( 0.00%) 139.84
other 247778 ( 0.92%) 61449302 ( 0.32%) 248.00
frag 4184 ( 0.02%) 3162678 ( 0.02%) 755.90
ip6 194528 ( 0.73%) 25596797 ( 0.13%) 131.58
tcp6 134700 ( 0.50%) 15437176 ( 0.08%) 114.60
http(s) 684 ( 0.00%) 526428 ( 0.00%) 769.63
http(c) 121345 ( 0.45%) 9587558 ( 0.05%) 79.01
smtp 1071 ( 0.00%) 343914 ( 0.00%) 321.11
ftp 105 ( 0.00%) 12957 ( 0.00%) 123.40
telnet 7 ( 0.00%) 598 ( 0.00%) 85.43
ssh 3335 ( 0.01%) 551208 ( 0.00%) 165.28
bgp 97 ( 0.00%) 9669 ( 0.00%) 99.68
other 8056 ( 0.03%) 4404844 ( 0.02%) 546.78
udp6 50075 ( 0.19%) 8988997 ( 0.05%) 179.51
dns 47842 ( 0.18%) 8545286 ( 0.04%) 178.61
everque 39 ( 0.00%) 5091 ( 0.00%) 130.54
other 2194 ( 0.01%) 438620 ( 0.00%) 199.92
icmp6 9554 ( 0.04%) 1119109 ( 0.01%) 117.14
ip6 138 ( 0.00%) 20183 ( 0.00%) 146.25
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 31 ( 0.00%) 27252 ( 0.00%) 879.10
tcpdump file: 200708291400.dump.gz (686.15 MB)