Traffic Trace Info
DumpFile: 200710181400.dump
FileSize: 2179.34MB
Id: 200710181400
StartTime: Thu Oct 18 14:00:00 2007
EndTime: Thu Oct 18 14:15:01 2007
TotalTime: 900.14 seconds
TotalCapSize: 1711.31MB CapLen: 96 bytes
# of packets: 30668449 (20584.15MB)
AvgRate: 191.84Mbps stddev:35.57M
IP flow (unique src/dst pair) Information
# of flows: 685061 (avg. 44.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.5% 2.5% 1.2% 1.2% 0.9% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 355973
Top 10 bandwidth usage (bytes/total in %):
9.2% 7.2% 6.7% 4.4% 4.1% 4.1% 3.7% 3.6% 3.2% 2.6%
# of IPv6 addresses: 3366
Top 10 bandwidth usage (bytes/total in %):
46.6% 46.6% 27.2% 5.9% 5.0% 3.1% 2.7% 2.7% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200710181400.pktlen.png)
detailed numbers
[ 32- 63]: 6563004
[ 64- 127]: 7513245
[ 128- 255]: 1607812
[ 256- 511]: 846978
[ 512- 1023]: 862039
[ 1024- 2047]: 13275371
Protocol Breakdown
![[protocol breakdown chart]](200710181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30668449 (100.00%) 21584047754 (100.00%) 703.79
ip 30466015 ( 99.34%) 21539004949 ( 99.79%) 706.98
tcp 26870107 ( 87.61%) 20908006998 ( 96.87%) 778.11
http(s) 12522088 ( 40.83%) 17112444714 ( 79.28%) 1366.58
http(c) 8959122 ( 29.21%) 1218730163 ( 5.65%) 136.03
squid 610377 ( 1.99%) 494857916 ( 2.29%) 810.74
smtp 565766 ( 1.84%) 155331782 ( 0.72%) 274.55
ftp 40943 ( 0.13%) 13346462 ( 0.06%) 325.98
pop3 20807 ( 0.07%) 6972008 ( 0.03%) 335.08
imap 11812 ( 0.04%) 6586439 ( 0.03%) 557.61
telnet 75 ( 0.00%) 4999 ( 0.00%) 66.65
ssh 687102 ( 2.24%) 120527868 ( 0.56%) 175.41
dns 2740 ( 0.01%) 206378 ( 0.00%) 75.32
bgp 254 ( 0.00%) 59730 ( 0.00%) 235.16
napster 13 ( 0.00%) 1388 ( 0.00%) 106.77
realaud 158 ( 0.00%) 17673 ( 0.00%) 111.85
rtsp 390832 ( 1.27%) 100458979 ( 0.47%) 257.04
icecast 16678 ( 0.05%) 2431252 ( 0.01%) 145.78
hotline 5 ( 0.00%) 996 ( 0.00%) 199.20
other 3041332 ( 9.92%) 1676028071 ( 7.77%) 551.08
udp 3277081 ( 10.69%) 593197679 ( 2.75%) 181.01
dns 1530911 ( 4.99%) 189169827 ( 0.88%) 123.57
realaud 5760 ( 0.02%) 436143 ( 0.00%) 75.72
halflif 23 ( 0.00%) 2366 ( 0.00%) 102.87
starcra 17 ( 0.00%) 1703 ( 0.00%) 100.18
everque 47 ( 0.00%) 9615 ( 0.00%) 204.57
unreal 15 ( 0.00%) 3199 ( 0.00%) 213.27
quake 29 ( 0.00%) 3964 ( 0.00%) 136.69
cuseeme 8 ( 0.00%) 943 ( 0.00%) 117.88
other 1740204 ( 5.67%) 403503880 ( 1.87%) 231.87
icmp 301760 ( 0.98%) 29004551 ( 0.13%) 96.12
ipip 381 ( 0.00%) 47410 ( 0.00%) 124.44
ipsec 3005 ( 0.01%) 2912102 ( 0.01%) 969.09
ip6 6441 ( 0.02%) 4584512 ( 0.02%) 711.77
other 7240 ( 0.02%) 1251697 ( 0.01%) 172.89
frag 2106 ( 0.01%) 1653708 ( 0.01%) 785.24
ip6 202434 ( 0.66%) 45042805 ( 0.21%) 222.51
tcp6 153767 ( 0.50%) 36443651 ( 0.17%) 237.01
http(s) 443 ( 0.00%) 494518 ( 0.00%) 1116.29
http(c) 127580 ( 0.42%) 13384396 ( 0.06%) 104.91
smtp 700 ( 0.00%) 193082 ( 0.00%) 275.83
telnet 22 ( 0.00%) 1663 ( 0.00%) 75.59
ssh 62 ( 0.00%) 10402 ( 0.00%) 167.77
dns 4 ( 0.00%) 480 ( 0.00%) 120.00
bgp 139 ( 0.00%) 17304 ( 0.00%) 124.49
other 24817 ( 0.08%) 22341806 ( 0.10%) 900.26
udp6 39094 ( 0.13%) 7376708 ( 0.03%) 188.69
dns 35435 ( 0.12%) 6611335 ( 0.03%) 186.58
other 3659 ( 0.01%) 765373 ( 0.00%) 209.18
icmp6 9445 ( 0.03%) 1187417 ( 0.01%) 125.72
ip6 77 ( 0.00%) 11579 ( 0.00%) 150.38
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 21 ( 0.00%) 19370 ( 0.00%) 922.38
tcpdump file: 200710181400.dump.gz (766.58 MB)