Traffic Trace Info
DumpFile: 200710131400.dump
FileSize: 1416.11MB
Id: 200710131400
StartTime: Sat Oct 13 14:00:01 2007
EndTime: Sat Oct 13 14:15:00 2007
TotalTime: 899.71 seconds
TotalCapSize: 1109.24MB CapLen: 96 bytes
# of packets: 20106850 (13091.02MB)
AvgRate: 122.08Mbps stddev:14.42M
IP flow (unique src/dst pair) Information
# of flows: 600219 (avg. 33.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 2.4% 1.9% 1.4% 1.4% 1.1% 1.0% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 319929
Top 10 bandwidth usage (bytes/total in %):
20.0% 9.6% 9.4% 5.4% 5.4% 3.8% 2.4% 1.9% 1.9% 1.4%
# of IPv6 addresses: 2762
Top 10 bandwidth usage (bytes/total in %):
32.8% 32.8% 20.9% 7.3% 5.6% 5.6% 5.1% 3.6% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200710131400.pktlen.png)
detailed numbers
[ 32- 63]: 4835227
[ 64- 127]: 5061426
[ 128- 255]: 716851
[ 256- 511]: 479106
[ 512- 1023]: 584535
[ 1024- 2047]: 8429705
Protocol Breakdown
![[protocol breakdown chart]](200710131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20106850 (100.00%) 13726931061 (100.00%) 682.70
ip 19962246 ( 99.28%) 13697686519 ( 99.79%) 686.18
tcp 16805510 ( 83.58%) 13018216279 ( 94.84%) 774.64
http(s) 7499607 ( 37.30%) 10425261957 ( 75.95%) 1390.11
http(c) 4554397 ( 22.65%) 459485106 ( 3.35%) 100.89
squid 695568 ( 3.46%) 538998895 ( 3.93%) 774.90
smtp 426073 ( 2.12%) 77247396 ( 0.56%) 181.30
nntp 6 ( 0.00%) 360 ( 0.00%) 60.00
ftp 12222 ( 0.06%) 1484038 ( 0.01%) 121.42
pop3 9222 ( 0.05%) 3498715 ( 0.03%) 379.39
imap 2319 ( 0.01%) 358142 ( 0.00%) 154.44
telnet 2 ( 0.00%) 124 ( 0.00%) 62.00
ssh 947936 ( 4.71%) 167231593 ( 1.22%) 176.42
dns 4296 ( 0.02%) 302356 ( 0.00%) 70.38
bgp 255 ( 0.00%) 61138 ( 0.00%) 239.76
napster 9 ( 0.00%) 548 ( 0.00%) 60.89
realaud 18 ( 0.00%) 3013 ( 0.00%) 167.39
rtsp 416559 ( 2.07%) 81886769 ( 0.60%) 196.58
icecast 27198 ( 0.14%) 26657869 ( 0.19%) 980.14
hotline 13 ( 0.00%) 5122 ( 0.00%) 394.00
other 2209808 ( 10.99%) 1235733018 ( 9.00%) 559.20
udp 2566396 ( 12.76%) 608589990 ( 4.43%) 237.14
dns 1615729 ( 8.04%) 204378893 ( 1.49%) 126.49
realaud 5780 ( 0.03%) 2144145 ( 0.02%) 370.96
halflif 13 ( 0.00%) 1527 ( 0.00%) 117.46
starcra 21 ( 0.00%) 3815 ( 0.00%) 181.67
everque 59 ( 0.00%) 9999 ( 0.00%) 169.47
unreal 12 ( 0.00%) 1425 ( 0.00%) 118.75
quake 20 ( 0.00%) 2123 ( 0.00%) 106.15
cuseeme 5 ( 0.00%) 983 ( 0.00%) 196.60
other 944203 ( 4.70%) 401927731 ( 2.93%) 425.68
icmp 549750 ( 2.73%) 49681137 ( 0.36%) 90.37
ipip 398 ( 0.00%) 50320 ( 0.00%) 126.43
ipsec 180 ( 0.00%) 19800 ( 0.00%) 110.00
ip6 6591 ( 0.03%) 4609435 ( 0.03%) 699.35
other 33421 ( 0.17%) 16519558 ( 0.12%) 494.29
frag 7839 ( 0.04%) 6955603 ( 0.05%) 887.31
ip6 144604 ( 0.72%) 29244542 ( 0.21%) 202.24
tcp6 96053 ( 0.48%) 20234776 ( 0.15%) 210.66
http(s) 313 ( 0.00%) 288229 ( 0.00%) 920.86
http(c) 57776 ( 0.29%) 6499041 ( 0.05%) 112.49
squid 5 ( 0.00%) 750 ( 0.00%) 150.00
smtp 1000 ( 0.00%) 630912 ( 0.00%) 630.91
pop3 45 ( 0.00%) 4128 ( 0.00%) 91.73
ssh 64 ( 0.00%) 10562 ( 0.00%) 165.03
dns 18 ( 0.00%) 2039 ( 0.00%) 113.28
bgp 96 ( 0.00%) 9467 ( 0.00%) 98.61
other 36736 ( 0.18%) 12789648 ( 0.09%) 348.15
udp6 38059 ( 0.19%) 7650565 ( 0.06%) 201.02
dns 35286 ( 0.18%) 7058692 ( 0.05%) 200.04
everque 16 ( 0.00%) 2518 ( 0.00%) 157.38
unreal 2 ( 0.00%) 278 ( 0.00%) 139.00
quake 1 ( 0.00%) 89 ( 0.00%) 89.00
other 2754 ( 0.01%) 588988 ( 0.00%) 213.87
icmp6 10382 ( 0.05%) 1339195 ( 0.01%) 128.99
ip6 74 ( 0.00%) 11125 ( 0.00%) 150.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 4801 ( 0.00%) 800.17
tcpdump file: 200710131400.dump.gz (513.31 MB)