Traffic Trace Info
DumpFile: 200710271400.dump
FileSize: 1177.10MB
Id: 200710271400
StartTime: Sat Oct 27 14:00:00 2007
EndTime: Sat Oct 27 14:15:01 2007
TotalTime: 900.55 seconds
TotalCapSize: 921.63MB CapLen: 96 bytes
# of packets: 16737433 (11554.06MB)
AvgRate: 107.64Mbps stddev:32.80M
IP flow (unique src/dst pair) Information
# of flows: 631138 (avg. 26.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 1.5% 1.4% 1.3% 1.3% 1.2% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 380529
Top 10 bandwidth usage (bytes/total in %):
19.7% 4.5% 4.2% 4.0% 3.5% 3.0% 2.6% 1.6% 1.6% 1.6%
# of IPv6 addresses: 3007
Top 10 bandwidth usage (bytes/total in %):
45.4% 42.5% 11.1% 5.4% 3.9% 2.9% 2.7% 2.7% 2.4% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200710271400.pktlen.png)
detailed numbers
[ 32- 63]: 3612576
[ 64- 127]: 4027192
[ 128- 255]: 730348
[ 256- 511]: 440545
[ 512- 1023]: 447028
[ 1024- 2047]: 7479744
Protocol Breakdown
![[protocol breakdown chart]](200710271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16737433 (100.00%) 12115309000 (100.00%) 723.85
ip 16698234 ( 99.77%) 12106281856 ( 99.93%) 725.00
tcp 14045054 ( 83.91%) 11673412861 ( 96.35%) 831.14
http(s) 6612599 ( 39.51%) 9079558074 ( 74.94%) 1373.07
http(c) 3460454 ( 20.67%) 357067208 ( 2.95%) 103.19
squid 658065 ( 3.93%) 531071752 ( 4.38%) 807.02
smtp 613260 ( 3.66%) 120140247 ( 0.99%) 195.90
nntp 14 ( 0.00%) 1063 ( 0.00%) 75.93
ftp 8638 ( 0.05%) 995153 ( 0.01%) 115.21
pop3 16193 ( 0.10%) 6761398 ( 0.06%) 417.55
imap 9076 ( 0.05%) 5421875 ( 0.04%) 597.39
telnet 912 ( 0.01%) 112842 ( 0.00%) 123.73
ssh 147901 ( 0.88%) 47426950 ( 0.39%) 320.67
dns 3810 ( 0.02%) 924386 ( 0.01%) 242.62
bgp 263 ( 0.00%) 68460 ( 0.00%) 260.30
realaud 11 ( 0.00%) 682 ( 0.00%) 62.00
rtsp 131617 ( 0.79%) 11986957 ( 0.10%) 91.07
icecast 2373 ( 0.01%) 149534 ( 0.00%) 63.01
other 2379862 ( 14.22%) 1511725920 ( 12.48%) 635.22
udp 2134613 ( 12.75%) 373979184 ( 3.09%) 175.20
dns 1367542 ( 8.17%) 186930376 ( 1.54%) 136.69
realaud 3620 ( 0.02%) 279051 ( 0.00%) 77.09
halflif 12 ( 0.00%) 924 ( 0.00%) 77.00
starcra 8 ( 0.00%) 1236 ( 0.00%) 154.50
everque 25 ( 0.00%) 4748 ( 0.00%) 189.92
unreal 1 ( 0.00%) 73 ( 0.00%) 73.00
quake 12 ( 0.00%) 975 ( 0.00%) 81.25
cuseeme 7 ( 0.00%) 578 ( 0.00%) 82.57
other 760133 ( 4.54%) 184570618 ( 1.52%) 242.81
icmp 380885 ( 2.28%) 33480410 ( 0.28%) 87.90
ipip 331 ( 0.00%) 40422 ( 0.00%) 122.12
ipsec 888 ( 0.01%) 667224 ( 0.01%) 751.38
ip6 7523 ( 0.04%) 3994063 ( 0.03%) 530.91
other 128940 ( 0.77%) 20707692 ( 0.17%) 160.60
frag 8098 ( 0.05%) 7200131 ( 0.06%) 889.12
ip6 39199 ( 0.23%) 9027144 ( 0.07%) 230.29
tcp6 15140 ( 0.09%) 5538380 ( 0.05%) 365.81
http(s) 196 ( 0.00%) 134484 ( 0.00%) 686.14
http(c) 512 ( 0.00%) 61124 ( 0.00%) 119.38
smtp 324 ( 0.00%) 84666 ( 0.00%) 261.31
ftp 29 ( 0.00%) 3292 ( 0.00%) 113.52
pop3 56 ( 0.00%) 5099 ( 0.00%) 91.05
ssh 249 ( 0.00%) 56958 ( 0.00%) 228.75
dns 12 ( 0.00%) 1189 ( 0.00%) 99.08
bgp 108 ( 0.00%) 14397 ( 0.00%) 133.31
other 13654 ( 0.08%) 5177171 ( 0.04%) 379.17
udp6 16151 ( 0.10%) 2610534 ( 0.02%) 161.63
dns 13293 ( 0.08%) 2189676 ( 0.02%) 164.72
starcra 3 ( 0.00%) 348 ( 0.00%) 116.00
other 2855 ( 0.02%) 420510 ( 0.00%) 147.29
icmp6 7866 ( 0.05%) 862453 ( 0.01%) 109.64
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12 ( 0.00%) 11697 ( 0.00%) 974.75
tcpdump file: 200710271400.dump.gz (410.74 MB)