Traffic Trace Info
DumpFile: 200708301400.dump
FileSize: 1649.68MB
Id: 200708301400
StartTime: Thu Aug 30 14:00:00 2007
EndTime: Thu Aug 30 14:15:01 2007
TotalTime: 900.29 seconds
TotalCapSize: 1292.48MB CapLen: 96 bytes
# of packets: 23399605 (15585.92MB)
AvgRate: 145.22Mbps stddev:20.90M
IP flow (unique src/dst pair) Information
# of flows: 696253 (avg. 33.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 1.7% 1.5% 1.5% 1.1% 0.9% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 346113
Top 10 bandwidth usage (bytes/total in %):
15.7% 9.8% 9.5% 7.5% 3.0% 2.8% 2.4% 1.9% 1.8% 1.7%
# of IPv6 addresses: 2165
Top 10 bandwidth usage (bytes/total in %):
23.8% 23.8% 15.5% 15.4% 15.4% 8.3% 4.7% 3.3% 3.3% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200708301400.pktlen.png)
detailed numbers
[ 32- 63]: 5367570
[ 64- 127]: 5870428
[ 128- 255]: 824913
[ 256- 511]: 637564
[ 512- 1023]: 699431
[ 1024- 2047]: 9999699
Protocol Breakdown
![[protocol breakdown chart]](200708301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23399605 (100.00%) 16343020641 (100.00%) 698.43
ip 23289375 ( 99.53%) 16317050190 ( 99.84%) 700.62
tcp 20041400 ( 85.65%) 15654434641 ( 95.79%) 781.10
http(s) 9321193 ( 39.83%) 12766859900 ( 78.12%) 1369.66
http(c) 5946978 ( 25.41%) 795292528 ( 4.87%) 133.73
squid 668275 ( 2.86%) 368749613 ( 2.26%) 551.79
smtp 449520 ( 1.92%) 153694128 ( 0.94%) 341.91
nntp 261 ( 0.00%) 18322 ( 0.00%) 70.20
ftp 31967 ( 0.14%) 20208583 ( 0.12%) 632.17
pop3 31167 ( 0.13%) 21591950 ( 0.13%) 692.78
imap 3242 ( 0.01%) 1349483 ( 0.01%) 416.25
telnet 470 ( 0.00%) 32015 ( 0.00%) 68.12
ssh 722656 ( 3.09%) 156245061 ( 0.96%) 216.21
dns 5217 ( 0.02%) 2089623 ( 0.01%) 400.54
bgp 1268 ( 0.01%) 867141 ( 0.01%) 683.87
napster 225 ( 0.00%) 25956 ( 0.00%) 115.36
realaud 214 ( 0.00%) 75382 ( 0.00%) 352.25
rtsp 259531 ( 1.11%) 38489040 ( 0.24%) 148.30
icecast 2455 ( 0.01%) 1058247 ( 0.01%) 431.06
hotline 8 ( 0.00%) 488 ( 0.00%) 61.00
other 2596752 ( 11.10%) 1327787121 ( 8.12%) 511.33
udp 2473044 ( 10.57%) 565920696 ( 3.46%) 228.84
dns 1655984 ( 7.08%) 204348002 ( 1.25%) 123.40
realaud 8 ( 0.00%) 751 ( 0.00%) 93.88
halflif 14 ( 0.00%) 1090 ( 0.00%) 77.86
starcra 9149 ( 0.04%) 615997 ( 0.00%) 67.33
everque 40 ( 0.00%) 6556 ( 0.00%) 163.90
unreal 4 ( 0.00%) 427 ( 0.00%) 106.75
quake 10 ( 0.00%) 861 ( 0.00%) 86.10
cuseeme 4 ( 0.00%) 315 ( 0.00%) 78.75
other 807817 ( 3.45%) 360930266 ( 2.21%) 446.80
icmp 644691 ( 2.76%) 58308734 ( 0.36%) 90.44
ipip 359 ( 0.00%) 44470 ( 0.00%) 123.87
ipsec 1769 ( 0.01%) 449646 ( 0.00%) 254.18
ip6 23164 ( 0.10%) 10525919 ( 0.06%) 454.41
other 104948 ( 0.45%) 27366084 ( 0.17%) 260.76
frag 826 ( 0.00%) 703037 ( 0.00%) 851.13
ip6 110230 ( 0.47%) 25970451 ( 0.16%) 235.60
tcp6 52758 ( 0.23%) 16740847 ( 0.10%) 317.31
http(s) 5623 ( 0.02%) 6935591 ( 0.04%) 1233.43
http(c) 36446 ( 0.16%) 4139078 ( 0.03%) 113.57
squid 48 ( 0.00%) 3936 ( 0.00%) 82.00
smtp 1037 ( 0.00%) 679474 ( 0.00%) 655.23
ssh 1492 ( 0.01%) 245778 ( 0.00%) 164.73
bgp 109 ( 0.00%) 11257 ( 0.00%) 103.28
icecast 24 ( 0.00%) 1968 ( 0.00%) 82.00
other 7979 ( 0.03%) 4723765 ( 0.03%) 592.02
udp6 46923 ( 0.20%) 7980477 ( 0.05%) 170.08
dns 45725 ( 0.20%) 7725090 ( 0.05%) 168.95
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
everque 40 ( 0.00%) 12962 ( 0.00%) 324.05
other 1157 ( 0.00%) 242288 ( 0.00%) 209.41
icmp6 10345 ( 0.04%) 1207628 ( 0.01%) 116.74
ip6 158 ( 0.00%) 22537 ( 0.00%) 142.64
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 16 ( 0.00%) 14882 ( 0.00%) 930.12
tcpdump file: 200708301400.dump.gz (619.97 MB)