Traffic Trace Info
DumpFile: 200711021400.dump
FileSize: 1783.21MB
Id: 200711021400
StartTime: Fri Nov 2 14:00:01 2007
EndTime: Fri Nov 2 14:15:00 2007
TotalTime: 899.68 seconds
TotalCapSize: 1396.26MB CapLen: 96 bytes
# of packets: 25354338 (15850.41MB)
AvgRate: 147.83Mbps stddev:22.41M
IP flow (unique src/dst pair) Information
# of flows: 679892 (avg. 37.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.7% 2.3% 1.6% 1.4% 0.9% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 361822
Top 10 bandwidth usage (bytes/total in %):
15.3% 6.6% 6.4% 4.2% 3.6% 2.7% 2.7% 2.5% 2.3% 2.3%
# of IPv6 addresses: 4041
Top 10 bandwidth usage (bytes/total in %):
10.5% 8.4% 8.1% 5.3% 5.1% 4.9% 4.6% 4.5% 4.5% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711021400.pktlen.png)
detailed numbers
[ 32- 63]: 6354753
[ 64- 127]: 6951008
[ 128- 255]: 642859
[ 256- 511]: 606466
[ 512- 1023]: 762327
[ 1024- 2047]: 10036925
Protocol Breakdown
![[protocol breakdown chart]](200711021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25354338 (100.00%) 16620360182 (100.00%) 655.52
ip 25306610 ( 99.81%) 16612954823 ( 99.96%) 656.47
tcp 22267988 ( 87.83%) 16109241697 ( 96.92%) 723.43
http(s) 7846000 ( 30.95%) 10490257031 ( 63.12%) 1337.02
http(c) 6490620 ( 25.60%) 886188740 ( 5.33%) 136.53
squid 1103067 ( 4.35%) 994114485 ( 5.98%) 901.23
smtp 639525 ( 2.52%) 174136778 ( 1.05%) 272.29
nntp 124 ( 0.00%) 13600 ( 0.00%) 109.68
ftp 1242852 ( 4.90%) 108132799 ( 0.65%) 87.00
pop3 19089 ( 0.08%) 10252949 ( 0.06%) 537.11
imap 7744 ( 0.03%) 2816342 ( 0.02%) 363.68
telnet 595 ( 0.00%) 41848 ( 0.00%) 70.33
ssh 496666 ( 1.96%) 68612425 ( 0.41%) 138.15
dns 3422 ( 0.01%) 283024 ( 0.00%) 82.71
bgp 259 ( 0.00%) 61929 ( 0.00%) 239.11
napster 113 ( 0.00%) 42641 ( 0.00%) 377.35
realaud 182 ( 0.00%) 22938 ( 0.00%) 126.03
rtsp 393706 ( 1.55%) 67701105 ( 0.41%) 171.96
icecast 39749 ( 0.16%) 29555429 ( 0.18%) 743.55
hotline 5 ( 0.00%) 748 ( 0.00%) 149.60
other 3984262 ( 15.71%) 3277006406 ( 19.72%) 822.49
udp 2458688 ( 9.70%) 440656072 ( 2.65%) 179.22
dns 1762040 ( 6.95%) 230698682 ( 1.39%) 130.93
realaud 34290 ( 0.14%) 14115263 ( 0.08%) 411.64
halflif 19 ( 0.00%) 2414 ( 0.00%) 127.05
starcra 50 ( 0.00%) 9157 ( 0.00%) 183.14
everque 2046 ( 0.01%) 337022 ( 0.00%) 164.72
unreal 21 ( 0.00%) 3847 ( 0.00%) 183.19
quake 25 ( 0.00%) 2050 ( 0.00%) 82.00
cuseeme 6 ( 0.00%) 579 ( 0.00%) 96.50
other 660040 ( 2.60%) 195463298 ( 1.18%) 296.14
icmp 470297 ( 1.85%) 41150266 ( 0.25%) 87.50
ipip 293 ( 0.00%) 34110 ( 0.00%) 116.42
ipsec 179 ( 0.00%) 19690 ( 0.00%) 110.00
ip6 7202 ( 0.03%) 3958062 ( 0.02%) 549.58
other 101963 ( 0.40%) 17894926 ( 0.11%) 175.50
frag 3201 ( 0.01%) 2785293 ( 0.02%) 870.13
ip6 47728 ( 0.19%) 7405359 ( 0.04%) 155.16
tcp6 15624 ( 0.06%) 2505887 ( 0.02%) 160.39
http(s) 1491 ( 0.01%) 785257 ( 0.00%) 526.66
http(c) 1372 ( 0.01%) 131810 ( 0.00%) 96.07
smtp 1053 ( 0.00%) 354629 ( 0.00%) 336.78
ftp 34 ( 0.00%) 3658 ( 0.00%) 107.59
telnet 13 ( 0.00%) 971 ( 0.00%) 74.69
ssh 3705 ( 0.01%) 396846 ( 0.00%) 107.11
dns 6 ( 0.00%) 559 ( 0.00%) 93.17
bgp 79 ( 0.00%) 9154 ( 0.00%) 115.87
other 7871 ( 0.03%) 823003 ( 0.00%) 104.56
udp6 23551 ( 0.09%) 3899208 ( 0.02%) 165.56
dns 17868 ( 0.07%) 2787322 ( 0.02%) 156.00
starcra 5 ( 0.00%) 664 ( 0.00%) 132.80
everque 2 ( 0.00%) 246 ( 0.00%) 123.00
other 5676 ( 0.02%) 1110976 ( 0.01%) 195.73
icmp6 8475 ( 0.03%) 953244 ( 0.01%) 112.48
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 48 ( 0.00%) 42940 ( 0.00%) 894.58
tcpdump file: 200711021400.dump.gz (652.40 MB)