Traffic Trace Info
DumpFile: 200710201400.dump
FileSize: 1570.12MB
Id: 200710201400
StartTime: Sat Oct 20 14:00:01 2007
EndTime: Sat Oct 20 14:15:00 2007
TotalTime: 899.36 seconds
TotalCapSize: 1219.86MB CapLen: 96 bytes
# of packets: 22739211 (16921.49MB)
AvgRate: 157.84Mbps stddev:30.54M
IP flow (unique src/dst pair) Information
# of flows: 604212 (avg. 37.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 1.7% 1.5% 1.3% 1.3% 1.1% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 315407
Top 10 bandwidth usage (bytes/total in %):
18.1% 11.1% 9.1% 6.0% 5.9% 5.9% 4.0% 4.0% 3.3% 1.7%
# of IPv6 addresses: 3150
Top 10 bandwidth usage (bytes/total in %):
87.8% 85.6% 2.9% 2.2% 1.8% 1.8% 1.5% 1.5% 0.8% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200710201400.pktlen.png)
detailed numbers
[ 32- 63]: 4524322
[ 64- 127]: 5079199
[ 128- 255]: 652700
[ 256- 511]: 481286
[ 512- 1023]: 842827
[ 1024- 2047]: 11158877
Protocol Breakdown
![[protocol breakdown chart]](200710201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22739211 (100.00%) 17743467369 (100.00%) 780.30
ip 22468043 ( 98.81%) 17569738794 ( 99.02%) 781.99
tcp 17904158 ( 78.74%) 16091277645 ( 90.69%) 898.75
http(s) 9771814 ( 42.97%) 13542522396 ( 76.32%) 1385.88
http(c) 4217795 ( 18.55%) 426085413 ( 2.40%) 101.02
squid 576931 ( 2.54%) 382013146 ( 2.15%) 662.15
smtp 461634 ( 2.03%) 80150198 ( 0.45%) 173.62
nntp 6 ( 0.00%) 444 ( 0.00%) 74.00
ftp 150913 ( 0.66%) 170910167 ( 0.96%) 1132.51
pop3 11009 ( 0.05%) 4779359 ( 0.03%) 434.13
imap 6168 ( 0.03%) 2529297 ( 0.01%) 410.07
telnet 264 ( 0.00%) 17270 ( 0.00%) 65.42
ssh 276141 ( 1.21%) 67012123 ( 0.38%) 242.67
dns 1716 ( 0.01%) 130749 ( 0.00%) 76.19
bgp 299 ( 0.00%) 67339 ( 0.00%) 225.21
napster 24 ( 0.00%) 1518 ( 0.00%) 63.25
realaud 40 ( 0.00%) 4544 ( 0.00%) 113.60
rtsp 343757 ( 1.51%) 59802265 ( 0.34%) 173.97
icecast 603 ( 0.00%) 57777 ( 0.00%) 95.82
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 2085038 ( 9.17%) 1355193274 ( 7.64%) 649.96
udp 4001559 ( 17.60%) 1417055059 ( 7.99%) 354.13
dns 1282024 ( 5.64%) 160386514 ( 0.90%) 125.10
realaud 1045 ( 0.00%) 70381 ( 0.00%) 67.35
halflif 17 ( 0.00%) 1488 ( 0.00%) 87.53
starcra 28 ( 0.00%) 4746 ( 0.00%) 169.50
everque 53 ( 0.00%) 10946 ( 0.00%) 206.53
unreal 14 ( 0.00%) 1571 ( 0.00%) 112.21
quake 21 ( 0.00%) 3790 ( 0.00%) 180.48
cuseeme 1 ( 0.00%) 88 ( 0.00%) 88.00
other 2718300 ( 11.95%) 1256525232 ( 7.08%) 462.25
icmp 418872 ( 1.84%) 35730690 ( 0.20%) 85.30
ipip 370 ( 0.00%) 44496 ( 0.00%) 120.26
ipsec 302 ( 0.00%) 163444 ( 0.00%) 541.21
ip6 6648 ( 0.03%) 4588109 ( 0.03%) 690.15
other 136134 ( 0.60%) 20879351 ( 0.12%) 153.37
frag 2532 ( 0.01%) 1962047 ( 0.01%) 774.90
ip6 271166 ( 1.19%) 173728455 ( 0.98%) 640.67
tcp6 224508 ( 0.99%) 165940847 ( 0.94%) 739.13
http(s) 2270 ( 0.01%) 2791398 ( 0.02%) 1229.69
http(c) 52334 ( 0.23%) 5847959 ( 0.03%) 111.74
smtp 649 ( 0.00%) 146759 ( 0.00%) 226.13
ftp 65 ( 0.00%) 6476 ( 0.00%) 99.63
pop3 46 ( 0.00%) 4220 ( 0.00%) 91.74
ssh 73 ( 0.00%) 11408 ( 0.00%) 156.27
dns 11 ( 0.00%) 1402 ( 0.00%) 127.45
bgp 138 ( 0.00%) 16512 ( 0.00%) 119.65
other 168922 ( 0.74%) 157114713 ( 0.89%) 930.10
udp6 35567 ( 0.16%) 6488041 ( 0.04%) 182.42
dns 31117 ( 0.14%) 5859314 ( 0.03%) 188.30
other 4450 ( 0.02%) 628727 ( 0.00%) 141.29
icmp6 10976 ( 0.05%) 1273457 ( 0.01%) 116.02
ip6 74 ( 0.00%) 11125 ( 0.00%) 150.34
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 12 ( 0.00%) 11041 ( 0.00%) 920.08
tcpdump file: 200710201400.dump.gz (540.25 MB)