Traffic Trace Info
DumpFile: 200710261400.dump
FileSize: 2052.85MB
Id: 200710261400
StartTime: Fri Oct 26 14:00:00 2007
EndTime: Fri Oct 26 14:15:00 2007
TotalTime: 899.63 seconds
TotalCapSize: 1600.88MB CapLen: 96 bytes
# of packets: 29616221 (20221.39MB)
AvgRate: 188.55Mbps stddev:44.53M
IP flow (unique src/dst pair) Information
# of flows: 769371 (avg. 38.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.2% 1.9% 1.8% 1.3% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 371976
Top 10 bandwidth usage (bytes/total in %):
14.5% 4.8% 3.3% 2.6% 2.4% 2.4% 2.3% 2.3% 2.3% 2.1%
# of IPv6 addresses: 2508
Top 10 bandwidth usage (bytes/total in %):
30.8% 30.8% 12.0% 6.5% 5.7% 5.6% 5.5% 4.9% 3.1% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200710261400.pktlen.png)
detailed numbers
[ 32- 63]: 6792865
[ 64- 127]: 6837266
[ 128- 255]: 1006957
[ 256- 511]: 756384
[ 512- 1023]: 987814
[ 1024- 2047]: 13234935
Protocol Breakdown
![[protocol breakdown chart]](200710261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29616221 (100.00%) 21203661554 (100.00%) 715.95
ip 29567530 ( 99.84%) 21191547410 ( 99.94%) 716.72
tcp 24558113 ( 82.92%) 19655070890 ( 92.70%) 800.35
http(s) 11704531 ( 39.52%) 15777011047 ( 74.41%) 1347.94
http(c) 7557370 ( 25.52%) 993292531 ( 4.68%) 131.43
squid 578971 ( 1.95%) 459481594 ( 2.17%) 793.62
smtp 870582 ( 2.94%) 404540123 ( 1.91%) 464.68
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 29292 ( 0.10%) 6004658 ( 0.03%) 204.99
pop3 31720 ( 0.11%) 26100560 ( 0.12%) 822.84
imap 9867 ( 0.03%) 3632286 ( 0.02%) 368.12
telnet 113 ( 0.00%) 23747 ( 0.00%) 210.15
ssh 255114 ( 0.86%) 55374821 ( 0.26%) 217.06
dns 3205 ( 0.01%) 245538 ( 0.00%) 76.61
bgp 320 ( 0.00%) 111054 ( 0.00%) 347.04
napster 164 ( 0.00%) 11960 ( 0.00%) 72.93
realaud 118 ( 0.00%) 15920 ( 0.00%) 134.92
rtsp 255318 ( 0.86%) 144530099 ( 0.68%) 566.08
icecast 43394 ( 0.15%) 31848463 ( 0.15%) 733.94
other 3218027 ( 10.87%) 1752846069 ( 8.27%) 544.70
udp 4590300 ( 15.50%) 1487165639 ( 7.01%) 323.98
dns 1792478 ( 6.05%) 249715239 ( 1.18%) 139.31
realaud 14161 ( 0.05%) 5849318 ( 0.03%) 413.06
halflif 24 ( 0.00%) 2689 ( 0.00%) 112.04
starcra 43 ( 0.00%) 8775 ( 0.00%) 204.07
everque 56 ( 0.00%) 11232 ( 0.00%) 200.57
unreal 33 ( 0.00%) 7271 ( 0.00%) 220.33
quake 22 ( 0.00%) 2128 ( 0.00%) 96.73
cuseeme 5 ( 0.00%) 2671 ( 0.00%) 534.20
other 2783412 ( 9.40%) 1231554531 ( 5.81%) 442.46
icmp 332333 ( 1.12%) 30168751 ( 0.14%) 90.78
ipip 330 ( 0.00%) 38508 ( 0.00%) 116.69
ipsec 5120 ( 0.02%) 5528912 ( 0.03%) 1079.87
ip6 6537 ( 0.02%) 4605222 ( 0.02%) 704.49
other 74797 ( 0.25%) 8969488 ( 0.04%) 119.92
frag 6327 ( 0.02%) 7525536 ( 0.04%) 1189.43
ip6 48691 ( 0.16%) 12114144 ( 0.06%) 248.80
tcp6 19202 ( 0.06%) 7779357 ( 0.04%) 405.13
http(s) 1429 ( 0.00%) 1396014 ( 0.01%) 976.92
http(c) 1846 ( 0.01%) 220841 ( 0.00%) 119.63
squid 36 ( 0.00%) 23591 ( 0.00%) 655.31
smtp 1663 ( 0.01%) 840016 ( 0.00%) 505.12
ftp 107 ( 0.00%) 12679 ( 0.00%) 118.50
ssh 32 ( 0.00%) 8044 ( 0.00%) 251.38
dns 4 ( 0.00%) 480 ( 0.00%) 120.00
bgp 158 ( 0.00%) 22567 ( 0.00%) 142.83
icecast 4 ( 0.00%) 360 ( 0.00%) 90.00
other 13923 ( 0.05%) 5254765 ( 0.02%) 377.42
udp6 22184 ( 0.07%) 3446253 ( 0.02%) 155.35
dns 20263 ( 0.07%) 3129737 ( 0.01%) 154.46
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1919 ( 0.01%) 316242 ( 0.00%) 164.80
icmp6 7252 ( 0.02%) 862932 ( 0.00%) 118.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 23 ( 0.00%) 21522 ( 0.00%) 935.74
tcpdump file: 200710261400.dump.gz (718.28 MB)