Traffic Trace Info
DumpFile: 200710251400.dump
FileSize: 2401.01MB
Id: 200710251400
StartTime: Thu Oct 25 14:00:01 2007
EndTime: Thu Oct 25 14:15:01 2007
TotalTime: 900.09 seconds
TotalCapSize: 1886.76MB CapLen: 96 bytes
# of packets: 33697273 (24718.07MB)
AvgRate: 230.40Mbps stddev:28.60M
IP flow (unique src/dst pair) Information
# of flows: 839330 (avg. 40.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.2% 3.4% 3.4% 2.0% 1.6% 1.4% 1.2% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 380937
Top 10 bandwidth usage (bytes/total in %):
14.6% 12.8% 12.5% 4.6% 3.9% 3.5% 3.5% 3.4% 3.4% 2.7%
# of IPv6 addresses: 2331
Top 10 bandwidth usage (bytes/total in %):
47.8% 42.7% 18.1% 18.1% 6.5% 5.1% 2.3% 2.2% 1.9% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200710251400.pktlen.png)
detailed numbers
[ 32- 63]: 7291206
[ 64- 127]: 7618031
[ 128- 255]: 996847
[ 256- 511]: 671563
[ 512- 1023]: 878831
[ 1024- 2047]: 16240795
Protocol Breakdown
![[protocol breakdown chart]](200710251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33697273 (100.00%) 25918779680 (100.00%) 769.17
ip 33536043 ( 99.52%) 25898104098 ( 99.92%) 772.25
tcp 30718225 ( 91.16%) 25384162372 ( 97.94%) 826.36
http(s) 15174977 ( 45.03%) 20973479575 ( 80.92%) 1382.11
http(c) 9124551 ( 27.08%) 1049190007 ( 4.05%) 114.99
squid 837697 ( 2.49%) 704124283 ( 2.72%) 840.55
smtp 728629 ( 2.16%) 159528309 ( 0.62%) 218.94
nntp 32 ( 0.00%) 3162 ( 0.00%) 98.81
ftp 11140 ( 0.03%) 1444422 ( 0.01%) 129.66
pop3 25643 ( 0.08%) 14083869 ( 0.05%) 549.23
imap 4654 ( 0.01%) 1713744 ( 0.01%) 368.23
telnet 1328 ( 0.00%) 261284 ( 0.00%) 196.75
ssh 1563018 ( 4.64%) 536968455 ( 2.07%) 343.55
dns 2181 ( 0.01%) 167715 ( 0.00%) 76.90
bgp 302 ( 0.00%) 105505 ( 0.00%) 349.35
napster 864 ( 0.00%) 563118 ( 0.00%) 651.76
realaud 27 ( 0.00%) 2882 ( 0.00%) 106.74
rtsp 366585 ( 1.09%) 168181587 ( 0.65%) 458.78
icecast 32735 ( 0.10%) 21054675 ( 0.08%) 643.19
hotline 8 ( 0.00%) 862 ( 0.00%) 107.75
other 2843852 ( 8.44%) 1753288798 ( 6.76%) 616.52
udp 2258222 ( 6.70%) 452697338 ( 1.75%) 200.47
dns 1558572 ( 4.63%) 218893172 ( 0.84%) 140.44
realaud 554 ( 0.00%) 45952 ( 0.00%) 82.95
halflif 17 ( 0.00%) 1627 ( 0.00%) 95.71
starcra 22 ( 0.00%) 4354 ( 0.00%) 197.91
everque 52 ( 0.00%) 10354 ( 0.00%) 199.12
unreal 22 ( 0.00%) 3752 ( 0.00%) 170.55
quake 19 ( 0.00%) 1880 ( 0.00%) 98.95
cuseeme 8 ( 0.00%) 991 ( 0.00%) 123.88
other 698907 ( 2.07%) 233725424 ( 0.90%) 334.42
icmp 429782 ( 1.28%) 36824226 ( 0.14%) 85.68
ipip 344 ( 0.00%) 40876 ( 0.00%) 118.83
ipsec 4337 ( 0.01%) 4583910 ( 0.02%) 1056.93
ip6 6756 ( 0.02%) 4678700 ( 0.02%) 692.53
other 118377 ( 0.35%) 15116676 ( 0.06%) 127.70
frag 2967 ( 0.01%) 2410234 ( 0.01%) 812.35
ip6 161230 ( 0.48%) 20675582 ( 0.08%) 128.24
tcp6 130829 ( 0.39%) 16137733 ( 0.06%) 123.35
http(s) 904 ( 0.00%) 804663 ( 0.00%) 890.11
http(c) 12948 ( 0.04%) 1167720 ( 0.00%) 90.19
squid 107 ( 0.00%) 15386 ( 0.00%) 143.79
smtp 607 ( 0.00%) 195266 ( 0.00%) 321.69
ftp 29 ( 0.00%) 2640 ( 0.00%) 91.03
ssh 30 ( 0.00%) 7788 ( 0.00%) 259.60
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 121 ( 0.00%) 16942 ( 0.00%) 140.02
other 116076 ( 0.34%) 13926693 ( 0.05%) 119.98
udp6 24126 ( 0.07%) 3751079 ( 0.01%) 155.48
dns 22067 ( 0.07%) 3230838 ( 0.01%) 146.41
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
other 2058 ( 0.01%) 520104 ( 0.00%) 252.72
icmp6 6181 ( 0.02%) 725209 ( 0.00%) 117.33
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 64 ( 0.00%) 57481 ( 0.00%) 898.14
tcpdump file: 200710251400.dump.gz (817.08 MB)