Traffic Trace Info
DumpFile: 200710151400.dump
FileSize: 2004.90MB
Id: 200710151400
StartTime: Mon Oct 15 14:00:01 2007
EndTime: Mon Oct 15 14:15:01 2007
TotalTime: 900.58 seconds
TotalCapSize: 1572.03MB CapLen: 96 bytes
# of packets: 28364159 (19457.92MB)
AvgRate: 181.21Mbps stddev:36.66M
IP flow (unique src/dst pair) Information
# of flows: 718139 (avg. 39.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.5% 2.9% 1.9% 1.4% 1.3% 1.2% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 379426
Top 10 bandwidth usage (bytes/total in %):
15.4% 7.5% 6.7% 5.4% 4.1% 4.1% 3.6% 3.3% 3.0% 2.5%
# of IPv6 addresses: 2804
Top 10 bandwidth usage (bytes/total in %):
30.7% 30.7% 16.0% 6.7% 6.5% 4.6% 4.1% 3.6% 3.2% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200710151400.pktlen.png)
detailed numbers
[ 32- 63]: 7064869
[ 64- 127]: 6682406
[ 128- 255]: 709145
[ 256- 511]: 675694
[ 512- 1023]: 649038
[ 1024- 2047]: 12583007
Protocol Breakdown
![[protocol breakdown chart]](200710151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28364159 (100.00%) 20403103037 (100.00%) 719.33
ip 28253626 ( 99.61%) 20379318962 ( 99.88%) 721.30
tcp 25407750 ( 89.58%) 19949769601 ( 97.78%) 785.18
http(s) 10940087 ( 38.57%) 14791131980 ( 72.49%) 1352.01
http(c) 8670096 ( 30.57%) 1632379625 ( 8.00%) 188.28
squid 469918 ( 1.66%) 292649856 ( 1.43%) 622.77
smtp 723639 ( 2.55%) 351614261 ( 1.72%) 485.90
nntp 20 ( 0.00%) 1807 ( 0.00%) 90.35
ftp 317010 ( 1.12%) 425963568 ( 2.09%) 1343.69
pop3 27325 ( 0.10%) 8612638 ( 0.04%) 315.19
imap 6415 ( 0.02%) 2144019 ( 0.01%) 334.22
telnet 31 ( 0.00%) 3053 ( 0.00%) 98.48
ssh 214763 ( 0.76%) 166476926 ( 0.82%) 775.17
dns 4990 ( 0.02%) 339361 ( 0.00%) 68.01
bgp 282 ( 0.00%) 68249 ( 0.00%) 242.02
napster 54 ( 0.00%) 4545 ( 0.00%) 84.17
realaud 20 ( 0.00%) 2111 ( 0.00%) 105.55
rtsp 848544 ( 2.99%) 636830025 ( 3.12%) 750.50
icecast 26290 ( 0.09%) 8895537 ( 0.04%) 338.36
hotline 2 ( 0.00%) 134 ( 0.00%) 67.00
other 3158251 ( 11.13%) 1632651126 ( 8.00%) 516.95
udp 2344369 ( 8.27%) 369060639 ( 1.81%) 157.42
dns 1806777 ( 6.37%) 219076198 ( 1.07%) 121.25
realaud 2881 ( 0.01%) 215219 ( 0.00%) 74.70
halflif 11 ( 0.00%) 1181 ( 0.00%) 107.36
starcra 8872 ( 0.03%) 592340 ( 0.00%) 66.77
everque 79 ( 0.00%) 15866 ( 0.00%) 200.84
unreal 21 ( 0.00%) 4559 ( 0.00%) 217.10
quake 30 ( 0.00%) 3009 ( 0.00%) 100.30
cuseeme 8 ( 0.00%) 1033 ( 0.00%) 129.12
other 525650 ( 1.85%) 149111892 ( 0.73%) 283.67
icmp 377965 ( 1.33%) 37713847 ( 0.18%) 99.78
ipip 359 ( 0.00%) 43050 ( 0.00%) 119.92
ipsec 551 ( 0.00%) 310314 ( 0.00%) 563.18
ip6 6557 ( 0.02%) 4594871 ( 0.02%) 700.76
other 116075 ( 0.41%) 17826640 ( 0.09%) 153.58
frag 3764 ( 0.01%) 4331107 ( 0.02%) 1150.67
ip6 110533 ( 0.39%) 23784075 ( 0.12%) 215.18
tcp6 52882 ( 0.19%) 13391741 ( 0.07%) 253.24
http(s) 443 ( 0.00%) 476807 ( 0.00%) 1076.31
http(c) 36591 ( 0.13%) 4138236 ( 0.02%) 113.09
squid 37 ( 0.00%) 2886 ( 0.00%) 78.00
smtp 600 ( 0.00%) 180543 ( 0.00%) 300.90
ftp 968 ( 0.00%) 101301 ( 0.00%) 104.65
ssh 66 ( 0.00%) 10722 ( 0.00%) 162.45
bgp 121 ( 0.00%) 11168 ( 0.00%) 92.30
other 14056 ( 0.05%) 8470078 ( 0.04%) 602.60
udp6 49722 ( 0.18%) 9312871 ( 0.05%) 187.30
dns 47001 ( 0.17%) 8836872 ( 0.04%) 188.01
realaud 1 ( 0.00%) 116 ( 0.00%) 116.00
unreal 2 ( 0.00%) 276 ( 0.00%) 138.00
other 2718 ( 0.01%) 475607 ( 0.00%) 174.98
icmp6 7818 ( 0.03%) 1058128 ( 0.01%) 135.35
ip6 74 ( 0.00%) 11125 ( 0.00%) 150.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7 ( 0.00%) 6130 ( 0.00%) 875.71
tcpdump file: 200710151400.dump.gz (707.60 MB)