Traffic Trace Info
DumpFile: 200710121400.dump
FileSize: 2057.44MB
Id: 200710121400
StartTime: Fri Oct 12 14:00:01 2007
EndTime: Fri Oct 12 14:15:01 2007
TotalTime: 900.22 seconds
TotalCapSize: 1610.33MB CapLen: 96 bytes
# of packets: 29297680 (18875.25MB)
AvgRate: 175.91Mbps stddev:21.82M
IP flow (unique src/dst pair) Information
# of flows: 947204 (avg. 30.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.4% 1.6% 1.5% 1.0% 0.8% 0.8% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 490102
Top 10 bandwidth usage (bytes/total in %):
16.3% 7.9% 7.0% 4.9% 3.2% 2.5% 2.5% 2.4% 2.2% 1.7%
# of IPv6 addresses: 2537
Top 10 bandwidth usage (bytes/total in %):
26.5% 18.8% 18.7% 6.7% 5.3% 5.2% 5.2% 4.8% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200710121400.pktlen.png)
detailed numbers
[ 32- 63]: 6846022
[ 64- 127]: 7589371
[ 128- 255]: 969750
[ 256- 511]: 804692
[ 512- 1023]: 955184
[ 1024- 2047]: 12132661
Protocol Breakdown
![[protocol breakdown chart]](200710121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29297680 (100.00%) 19792135462 (100.00%) 675.55
ip 29188246 ( 99.63%) 19772369274 ( 99.90%) 677.41
tcp 24503581 ( 83.64%) 18302258940 ( 92.47%) 746.92
http(s) 10589735 ( 36.15%) 14398225017 ( 72.75%) 1359.64
http(c) 7773207 ( 26.53%) 886452124 ( 4.48%) 114.04
squid 395063 ( 1.35%) 225429883 ( 1.14%) 570.62
smtp 586501 ( 2.00%) 188356971 ( 0.95%) 321.15
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 83683 ( 0.29%) 75744008 ( 0.38%) 905.13
pop3 17783 ( 0.06%) 10547580 ( 0.05%) 593.13
imap 25355 ( 0.09%) 27341399 ( 0.14%) 1078.34
telnet 29 ( 0.00%) 8800 ( 0.00%) 303.45
ssh 834860 ( 2.85%) 143204613 ( 0.72%) 171.53
dns 3400 ( 0.01%) 244224 ( 0.00%) 71.83
bgp 333 ( 0.00%) 133884 ( 0.00%) 402.05
napster 298 ( 0.00%) 41423 ( 0.00%) 139.00
realaud 66 ( 0.00%) 8536 ( 0.00%) 129.33
rtsp 346586 ( 1.18%) 164882997 ( 0.83%) 475.73
icecast 28085 ( 0.10%) 9072151 ( 0.05%) 323.02
hotline 40 ( 0.00%) 26934 ( 0.00%) 673.35
other 3818376 ( 13.03%) 2172527536 ( 10.98%) 568.97
udp 3757771 ( 12.83%) 1371161287 ( 6.93%) 364.89
dns 1788953 ( 6.11%) 223046818 ( 1.13%) 124.68
realaud 12222 ( 0.04%) 5966927 ( 0.03%) 488.21
halflif 14 ( 0.00%) 1315 ( 0.00%) 93.93
starcra 55 ( 0.00%) 7871 ( 0.00%) 143.11
everque 67 ( 0.00%) 11853 ( 0.00%) 176.91
unreal 22 ( 0.00%) 2119 ( 0.00%) 96.32
quake 13 ( 0.00%) 1105 ( 0.00%) 85.00
cuseeme 5 ( 0.00%) 415 ( 0.00%) 83.00
other 1956413 ( 6.68%) 1142120131 ( 5.77%) 583.78
icmp 754809 ( 2.58%) 63982309 ( 0.32%) 84.77
ipip 359 ( 0.00%) 43386 ( 0.00%) 120.85
ipsec 3543 ( 0.01%) 3972970 ( 0.02%) 1121.36
ip6 6717 ( 0.02%) 4612106 ( 0.02%) 686.63
other 161466 ( 0.55%) 26338276 ( 0.13%) 163.12
frag 3372 ( 0.01%) 2593880 ( 0.01%) 769.24
ip6 109434 ( 0.37%) 19766188 ( 0.10%) 180.62
tcp6 61118 ( 0.21%) 11198882 ( 0.06%) 183.23
http(s) 458 ( 0.00%) 520458 ( 0.00%) 1136.37
http(c) 45893 ( 0.16%) 5314600 ( 0.03%) 115.80
squid 29 ( 0.00%) 4197 ( 0.00%) 144.72
smtp 787 ( 0.00%) 213822 ( 0.00%) 271.69
ssh 62 ( 0.00%) 10402 ( 0.00%) 167.77
dns 20 ( 0.00%) 2656 ( 0.00%) 132.80
bgp 117 ( 0.00%) 12905 ( 0.00%) 110.30
other 13752 ( 0.05%) 5119842 ( 0.03%) 372.30
udp6 41132 ( 0.14%) 7624826 ( 0.04%) 185.37
dns 38406 ( 0.13%) 7157349 ( 0.04%) 186.36
starcra 13 ( 0.00%) 3302 ( 0.00%) 254.00
other 2713 ( 0.01%) 464175 ( 0.00%) 171.09
icmp6 7064 ( 0.02%) 919377 ( 0.00%) 130.15
ip6 82 ( 0.00%) 12463 ( 0.00%) 151.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 6560 ( 0.00%) 820.00
tcpdump file: 200710121400.dump.gz (759.25 MB)