Traffic Trace Info
DumpFile: 200710161400.dump
FileSize: 1971.00MB
Id: 200710161400
StartTime: Tue Oct 16 14:00:00 2007
EndTime: Tue Oct 16 14:15:00 2007
TotalTime: 900.27 seconds
TotalCapSize: 1534.55MB CapLen: 96 bytes
# of packets: 27785035 (18896.98MB)
AvgRate: 176.07Mbps stddev:21.89M
IP flow (unique src/dst pair) Information
# of flows: 652999 (avg. 42.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.5% 1.4% 1.2% 1.2% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 335455
Top 10 bandwidth usage (bytes/total in %):
15.6% 8.5% 8.3% 3.0% 2.9% 2.6% 2.5% 2.5% 2.3% 1.9%
# of IPv6 addresses: 5142
Top 10 bandwidth usage (bytes/total in %):
88.8% 75.2% 13.7% 1.9% 1.8% 0.7% 0.6% 0.5% 0.5% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200710161400.pktlen.png)
detailed numbers
[ 32- 63]: 6808720
[ 64- 127]: 6485806
[ 128- 255]: 817149
[ 256- 511]: 707359
[ 512- 1023]: 711568
[ 1024- 2047]: 12254433
Protocol Breakdown
![[protocol breakdown chart]](200710161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27785035 (100.00%) 19814922198 (100.00%) 713.15
ip 27509033 ( 99.01%) 19629439837 ( 99.06%) 713.56
tcp 24160259 ( 86.95%) 18947142668 ( 95.62%) 784.23
http(s) 11201751 ( 40.32%) 15036543561 ( 75.88%) 1342.34
http(c) 8577793 ( 30.87%) 1403206548 ( 7.08%) 163.59
squid 687644 ( 2.47%) 516190953 ( 2.61%) 750.67
smtp 558592 ( 2.01%) 137280229 ( 0.69%) 245.76
ftp 6137 ( 0.02%) 2060741 ( 0.01%) 335.79
pop3 29293 ( 0.11%) 16005273 ( 0.08%) 546.39
imap 12126 ( 0.04%) 6975241 ( 0.04%) 575.23
telnet 394 ( 0.00%) 25343 ( 0.00%) 64.32
ssh 351031 ( 1.26%) 295880970 ( 1.49%) 842.89
dns 2587 ( 0.01%) 213445 ( 0.00%) 82.51
bgp 248 ( 0.00%) 63110 ( 0.00%) 254.48
napster 13 ( 0.00%) 1860 ( 0.00%) 143.08
realaud 173 ( 0.00%) 48630 ( 0.00%) 281.10
rtsp 426028 ( 1.53%) 118926610 ( 0.60%) 279.15
icecast 10150 ( 0.04%) 632616 ( 0.00%) 62.33
hotline 19 ( 0.00%) 3610 ( 0.00%) 190.00
other 2296279 ( 8.26%) 1413083868 ( 7.13%) 615.38
udp 2863904 ( 10.31%) 584966894 ( 2.95%) 204.26
dns 1696621 ( 6.11%) 211633071 ( 1.07%) 124.74
realaud 5782 ( 0.02%) 386079 ( 0.00%) 66.77
halflif 22 ( 0.00%) 2549 ( 0.00%) 115.86
starcra 24 ( 0.00%) 3395 ( 0.00%) 141.46
everque 106 ( 0.00%) 18056 ( 0.00%) 170.34
unreal 26 ( 0.00%) 2741 ( 0.00%) 105.42
quake 24 ( 0.00%) 2969 ( 0.00%) 123.71
cuseeme 5 ( 0.00%) 434 ( 0.00%) 86.80
other 1160968 ( 4.18%) 372864762 ( 1.88%) 321.17
icmp 255947 ( 0.92%) 26115448 ( 0.13%) 102.03
ipip 362 ( 0.00%) 43244 ( 0.00%) 119.46
ipsec 1069 ( 0.00%) 1040014 ( 0.01%) 972.88
ip6 6447 ( 0.02%) 4589144 ( 0.02%) 711.83
other 221045 ( 0.80%) 65542425 ( 0.33%) 296.51
frag 3322 ( 0.01%) 2709065 ( 0.01%) 815.49
ip6 276002 ( 0.99%) 185482361 ( 0.94%) 672.03
tcp6 197395 ( 0.71%) 172273332 ( 0.87%) 872.73
http(s) 827 ( 0.00%) 996085 ( 0.01%) 1204.46
http(c) 24811 ( 0.09%) 3757688 ( 0.02%) 151.45
squid 3 ( 0.00%) 234 ( 0.00%) 78.00
smtp 1259 ( 0.00%) 498385 ( 0.00%) 395.86
ftp 95 ( 0.00%) 11727 ( 0.00%) 123.44
ssh 62 ( 0.00%) 10402 ( 0.00%) 167.77
dns 23 ( 0.00%) 3221 ( 0.00%) 140.04
bgp 149 ( 0.00%) 14722 ( 0.00%) 98.81
other 170166 ( 0.61%) 166980868 ( 0.84%) 981.28
udp6 44083 ( 0.16%) 8490108 ( 0.04%) 192.59
dns 41814 ( 0.15%) 8113324 ( 0.04%) 194.03
realaud 2 ( 0.00%) 232 ( 0.00%) 116.00
other 2267 ( 0.01%) 376552 ( 0.00%) 166.10
icmp6 34409 ( 0.12%) 4694148 ( 0.02%) 136.42
ip6 74 ( 0.00%) 11125 ( 0.00%) 150.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 11 ( 0.00%) 9568 ( 0.00%) 869.82
tcpdump file: 200710161400.dump.gz (698.64 MB)