Traffic Trace Info
DumpFile: 200710101400.dump
FileSize: 2181.83MB
Id: 200710101400
StartTime: Wed Oct 10 14:00:01 2007
EndTime: Wed Oct 10 14:15:00 2007
TotalTime: 899.84 seconds
TotalCapSize: 1709.49MB CapLen: 96 bytes
# of packets: 30949638 (19644.01MB)
AvgRate: 183.14Mbps stddev:21.29M
IP flow (unique src/dst pair) Information
# of flows: 1109635 (avg. 27.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 1.5% 1.0% 1.0% 1.0% 0.8% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 566022
Top 10 bandwidth usage (bytes/total in %):
14.3% 7.3% 7.0% 3.9% 3.8% 3.7% 2.6% 1.8% 1.7% 1.6%
# of IPv6 addresses: 2973
Top 10 bandwidth usage (bytes/total in %):
37.7% 37.7% 19.5% 7.3% 7.3% 5.3% 4.5% 4.4% 3.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200710101400.pktlen.png)
detailed numbers
[ 32- 63]: 7736638
[ 64- 127]: 8280301
[ 128- 255]: 859749
[ 256- 511]: 777814
[ 512- 1023]: 727952
[ 1024- 2047]: 12567184
Protocol Breakdown
![[protocol breakdown chart]](200710101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30949638 (100.00%) 20598236759 (100.00%) 665.54
ip 30530830 ( 98.65%) 20548153948 ( 99.76%) 673.03
tcp 26109953 ( 84.36%) 19828216607 ( 96.26%) 759.41
http(s) 11427582 ( 36.92%) 15264179637 ( 74.10%) 1335.73
http(c) 9344437 ( 30.19%) 1581438303 ( 7.68%) 169.24
squid 438742 ( 1.42%) 367549081 ( 1.78%) 837.73
smtp 630724 ( 2.04%) 215745553 ( 1.05%) 342.06
nntp 1188 ( 0.00%) 950410 ( 0.00%) 800.01
ftp 254595 ( 0.82%) 314757981 ( 1.53%) 1236.31
pop3 29435 ( 0.10%) 16467658 ( 0.08%) 559.46
imap 9500 ( 0.03%) 3906417 ( 0.02%) 411.20
telnet 295 ( 0.00%) 18789 ( 0.00%) 63.69
ssh 29113 ( 0.09%) 3430086 ( 0.02%) 117.82
dns 4182 ( 0.01%) 293272 ( 0.00%) 70.13
bgp 261 ( 0.00%) 68965 ( 0.00%) 264.23
napster 122 ( 0.00%) 8853 ( 0.00%) 72.57
realaud 344 ( 0.00%) 115530 ( 0.00%) 335.84
rtsp 333031 ( 1.08%) 64221265 ( 0.31%) 192.84
icecast 64786 ( 0.21%) 60083996 ( 0.29%) 927.42
hotline 11 ( 0.00%) 1231 ( 0.00%) 111.91
other 3541585 ( 11.44%) 1934978380 ( 9.39%) 546.36
udp 2988102 ( 9.65%) 511299881 ( 2.48%) 171.11
dns 2011965 ( 6.50%) 251696901 ( 1.22%) 125.10
realaud 14584 ( 0.05%) 8051726 ( 0.04%) 552.09
halflif 43 ( 0.00%) 5018 ( 0.00%) 116.70
starcra 25 ( 0.00%) 4274 ( 0.00%) 170.96
everque 82 ( 0.00%) 15071 ( 0.00%) 183.79
unreal 8 ( 0.00%) 1092 ( 0.00%) 136.50
quake 17 ( 0.00%) 1349 ( 0.00%) 79.35
cuseeme 12 ( 0.00%) 1534 ( 0.00%) 127.83
other 961205 ( 3.11%) 251468613 ( 1.22%) 261.62
icmp 1113423 ( 3.60%) 93524381 ( 0.45%) 84.00
ipip 343 ( 0.00%) 41674 ( 0.00%) 121.50
ipsec 20941 ( 0.07%) 26423726 ( 0.13%) 1261.82
ip6 8803 ( 0.03%) 6252735 ( 0.03%) 710.30
other 289265 ( 0.93%) 82394944 ( 0.40%) 284.84
frag 3226 ( 0.01%) 2460599 ( 0.01%) 762.74
ip6 418808 ( 1.35%) 50082811 ( 0.24%) 119.58
tcp6 356204 ( 1.15%) 38360303 ( 0.19%) 107.69
http(s) 1305 ( 0.00%) 1505837 ( 0.01%) 1153.90
http(c) 112335 ( 0.36%) 11568852 ( 0.06%) 102.99
squid 618 ( 0.00%) 49322 ( 0.00%) 79.81
smtp 1141 ( 0.00%) 335312 ( 0.00%) 293.88
ssh 74 ( 0.00%) 11486 ( 0.00%) 155.22
dns 162 ( 0.00%) 15999 ( 0.00%) 98.76
bgp 106 ( 0.00%) 11061 ( 0.00%) 104.35
other 240463 ( 0.78%) 24862434 ( 0.12%) 103.39
udp6 52817 ( 0.17%) 10358355 ( 0.05%) 196.12
dns 49612 ( 0.16%) 9660702 ( 0.05%) 194.73
starcra 10 ( 0.00%) 2416 ( 0.00%) 241.60
everque 1 ( 0.00%) 139 ( 0.00%) 139.00
other 3194 ( 0.01%) 695098 ( 0.00%) 217.63
icmp6 9623 ( 0.03%) 1327926 ( 0.01%) 138.00
ip6 118 ( 0.00%) 18545 ( 0.00%) 157.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 16 ( 0.00%) 13602 ( 0.00%) 850.12
tcpdump file: 200710101400.dump.gz (795.94 MB)