Traffic Trace Info
DumpFile: 200710211400.dump
FileSize: 1294.12MB
Id: 200710211400
StartTime: Sun Oct 21 14:00:01 2007
EndTime: Sun Oct 21 14:15:00 2007
TotalTime: 899.60 seconds
TotalCapSize: 1004.92MB CapLen: 96 bytes
# of packets: 18948993 (12008.41MB)
AvgRate: 111.98Mbps stddev:24.98M
IP flow (unique src/dst pair) Information
# of flows: 633226 (avg. 29.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.3% 1.8% 1.6% 1.4% 1.0% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 361107
Top 10 bandwidth usage (bytes/total in %):
18.6% 13.1% 6.3% 5.7% 5.4% 5.3% 4.9% 4.0% 3.3% 3.3%
# of IPv6 addresses: 1913
Top 10 bandwidth usage (bytes/total in %):
63.7% 63.7% 7.5% 4.5% 4.3% 3.0% 2.5% 1.7% 1.4% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200710211400.pktlen.png)
detailed numbers
[ 32- 63]: 4208793
[ 64- 127]: 5082901
[ 128- 255]: 570452
[ 256- 511]: 465811
[ 512- 1023]: 1041855
[ 1024- 2047]: 7579181
Protocol Breakdown
![[protocol breakdown chart]](200710211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18948993 (100.00%) 12591727171 (100.00%) 664.51
ip 18906739 ( 99.78%) 12575208308 ( 99.87%) 665.12
tcp 14049613 ( 74.14%) 11327736276 ( 89.96%) 806.27
http(s) 6289235 ( 33.19%) 8593129152 ( 68.24%) 1366.32
http(c) 3524934 ( 18.60%) 319176723 ( 2.53%) 90.55
squid 482096 ( 2.54%) 230258354 ( 1.83%) 477.62
smtp 387632 ( 2.05%) 75954422 ( 0.60%) 195.94
ftp 12629 ( 0.07%) 1092650 ( 0.01%) 86.52
pop3 9376 ( 0.05%) 5707304 ( 0.05%) 608.71
imap 3211 ( 0.02%) 874082 ( 0.01%) 272.21
telnet 644 ( 0.00%) 41854 ( 0.00%) 64.99
ssh 220024 ( 1.16%) 56681194 ( 0.45%) 257.61
dns 30478 ( 0.16%) 6602611 ( 0.05%) 216.64
bgp 252 ( 0.00%) 55731 ( 0.00%) 221.15
realaud 2824 ( 0.01%) 191456 ( 0.00%) 67.80
rtsp 387262 ( 2.04%) 86842791 ( 0.69%) 224.25
icecast 453 ( 0.00%) 37901 ( 0.00%) 83.67
other 2698562 ( 14.24%) 1951089991 ( 15.50%) 723.01
udp 4138671 ( 21.84%) 1176928506 ( 9.35%) 284.37
dns 1155183 ( 6.10%) 171461227 ( 1.36%) 148.43
realaud 2425 ( 0.01%) 172130 ( 0.00%) 70.98
halflif 18 ( 0.00%) 2060 ( 0.00%) 114.44
starcra 6 ( 0.00%) 1069 ( 0.00%) 178.17
everque 58 ( 0.00%) 10828 ( 0.00%) 186.69
unreal 14 ( 0.00%) 2141 ( 0.00%) 152.93
quake 12 ( 0.00%) 948 ( 0.00%) 79.00
cuseeme 5 ( 0.00%) 850 ( 0.00%) 170.00
other 2980932 ( 15.73%) 1005265201 ( 7.98%) 337.23
icmp 698963 ( 3.69%) 63360586 ( 0.50%) 90.65
ipip 355 ( 0.00%) 42402 ( 0.00%) 119.44
ipsec 926 ( 0.00%) 893988 ( 0.01%) 965.43
ip6 6553 ( 0.03%) 4597846 ( 0.04%) 701.64
other 11658 ( 0.06%) 1648704 ( 0.01%) 141.42
frag 9462 ( 0.05%) 10339092 ( 0.08%) 1092.70
ip6 42252 ( 0.22%) 16518743 ( 0.13%) 390.96
tcp6 20272 ( 0.11%) 13232692 ( 0.11%) 652.76
http(s) 309 ( 0.00%) 321317 ( 0.00%) 1039.86
http(c) 737 ( 0.00%) 94102 ( 0.00%) 127.68
smtp 1572 ( 0.01%) 953051 ( 0.01%) 606.27
pop3 54 ( 0.00%) 4912 ( 0.00%) 90.96
ssh 27 ( 0.00%) 7290 ( 0.00%) 270.00
bgp 108 ( 0.00%) 14187 ( 0.00%) 131.36
other 17465 ( 0.09%) 11837833 ( 0.09%) 677.80
udp6 14676 ( 0.08%) 2392631 ( 0.02%) 163.03
dns 13369 ( 0.07%) 2203876 ( 0.02%) 164.85
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1306 ( 0.01%) 188639 ( 0.00%) 144.44
icmp6 7214 ( 0.04%) 864889 ( 0.01%) 119.89
ip6 39 ( 0.00%) 5302 ( 0.00%) 135.95
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 21 ( 0.00%) 19149 ( 0.00%) 911.86
tcpdump file: 200710211400.dump.gz (449.59 MB)