Traffic Trace Info
DumpFile: 200710171400.dump
FileSize: 2104.51MB
Id: 200710171400
StartTime: Wed Oct 17 14:00:01 2007
EndTime: Wed Oct 17 14:15:01 2007
TotalTime: 900.10 seconds
TotalCapSize: 1659.53MB CapLen: 96 bytes
# of packets: 29158049 (19903.93MB)
AvgRate: 185.46Mbps stddev:27.28M
IP flow (unique src/dst pair) Information
# of flows: 780006 (avg. 37.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.2% 2.1% 1.6% 1.2% 1.1% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 399759
Top 10 bandwidth usage (bytes/total in %):
16.4% 7.7% 7.7% 3.0% 2.8% 2.6% 2.5% 2.5% 2.4% 2.3%
# of IPv6 addresses: 3047
Top 10 bandwidth usage (bytes/total in %):
40.8% 40.8% 37.3% 24.7% 17.4% 17.4% 13.9% 1.3% 1.3% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200710171400.pktlen.png)
detailed numbers
[ 32- 63]: 6689033
[ 64- 127]: 7403082
[ 128- 255]: 733295
[ 256- 511]: 681481
[ 512- 1023]: 758098
[ 1024- 2047]: 12893060
Protocol Breakdown
![[protocol breakdown chart]](200710171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29158049 (100.00%) 20870786555 (100.00%) 715.78
ip 28062424 ( 96.24%) 19785362125 ( 94.80%) 705.05
tcp 24931798 ( 85.51%) 19307674991 ( 92.51%) 774.42
http(s) 11537123 ( 39.57%) 15532759333 ( 74.42%) 1346.33
http(c) 8006109 ( 27.46%) 938629859 ( 4.50%) 117.24
squid 538155 ( 1.85%) 327823965 ( 1.57%) 609.16
smtp 660052 ( 2.26%) 191310418 ( 0.92%) 289.84
ftp 79716 ( 0.27%) 47691263 ( 0.23%) 598.26
pop3 26009 ( 0.09%) 13887246 ( 0.07%) 533.94
imap 69892 ( 0.24%) 63372633 ( 0.30%) 906.72
telnet 191 ( 0.00%) 12046 ( 0.00%) 63.07
ssh 136789 ( 0.47%) 42307139 ( 0.20%) 309.29
dns 2189 ( 0.01%) 167130 ( 0.00%) 76.35
bgp 277 ( 0.00%) 76717 ( 0.00%) 276.96
napster 26 ( 0.00%) 3216 ( 0.00%) 123.69
realaud 12 ( 0.00%) 802 ( 0.00%) 66.83
rtsp 462642 ( 1.59%) 100311115 ( 0.48%) 216.82
icecast 94132 ( 0.32%) 30778175 ( 0.15%) 326.97
hotline 20 ( 0.00%) 3239 ( 0.00%) 161.95
other 3318454 ( 11.38%) 2018540095 ( 9.67%) 608.28
udp 2358304 ( 8.09%) 409094614 ( 1.96%) 173.47
dns 1617503 ( 5.55%) 202618709 ( 0.97%) 125.27
realaud 13491 ( 0.05%) 8018216 ( 0.04%) 594.34
halflif 24 ( 0.00%) 3156 ( 0.00%) 131.50
starcra 47 ( 0.00%) 7786 ( 0.00%) 165.66
everque 90 ( 0.00%) 17150 ( 0.00%) 190.56
unreal 12 ( 0.00%) 1905 ( 0.00%) 158.75
quake 18 ( 0.00%) 2092 ( 0.00%) 116.22
cuseeme 7 ( 0.00%) 1028 ( 0.00%) 146.86
other 727088 ( 2.49%) 198402243 ( 0.95%) 272.87
icmp 728904 ( 2.50%) 58266933 ( 0.28%) 79.94
ipip 362 ( 0.00%) 44724 ( 0.00%) 123.55
ipsec 1584 ( 0.01%) 1636112 ( 0.01%) 1032.90
ip6 6656 ( 0.02%) 4627905 ( 0.02%) 695.30
other 34816 ( 0.12%) 4016846 ( 0.02%) 115.37
frag 875 ( 0.00%) 717109 ( 0.00%) 819.55
ip6 1095625 ( 3.76%) 1085424430 ( 5.20%) 990.69
tcp6 1047995 ( 3.59%) 1077126502 ( 5.16%) 1027.80
http(s) 13545 ( 0.05%) 19098852 ( 0.09%) 1410.03
http(c) 99974 ( 0.34%) 9961249 ( 0.05%) 99.64
squid 119 ( 0.00%) 9709 ( 0.00%) 81.59
smtp 895 ( 0.00%) 285761 ( 0.00%) 319.29
telnet 300 ( 0.00%) 22206 ( 0.00%) 74.02
ssh 149682 ( 0.51%) 189372804 ( 0.91%) 1265.17
dns 5 ( 0.00%) 485 ( 0.00%) 97.00
bgp 168 ( 0.00%) 22697 ( 0.00%) 135.10
other 783307 ( 2.69%) 858352739 ( 4.11%) 1095.81
udp6 36408 ( 0.12%) 6842414 ( 0.03%) 187.94
dns 33279 ( 0.11%) 6228199 ( 0.03%) 187.15
other 3129 ( 0.01%) 614215 ( 0.00%) 196.30
icmp6 11091 ( 0.04%) 1423610 ( 0.01%) 128.36
ip6 84 ( 0.00%) 12601 ( 0.00%) 150.01
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 17 ( 0.00%) 15223 ( 0.00%) 895.47
tcpdump file: 200710171400.dump.gz (740.65 MB)