Traffic Trace Info
DumpFile: 200711031400.dump
FileSize: 1234.29MB
Id: 200711031400
StartTime: Sat Nov 3 14:00:01 2007
EndTime: Sat Nov 3 14:15:00 2007
TotalTime: 899.03 seconds
TotalCapSize: 966.29MB CapLen: 96 bytes
# of packets: 17559504 (10408.81MB)
AvgRate: 97.11Mbps stddev:12.50M
IP flow (unique src/dst pair) Information
# of flows: 568168 (avg. 30.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.2% 1.5% 1.5% 1.3% 1.3% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 317809
Top 10 bandwidth usage (bytes/total in %):
16.5% 7.3% 7.0% 6.2% 5.8% 3.8% 3.3% 1.9% 1.6% 1.6%
# of IPv6 addresses: 2030
Top 10 bandwidth usage (bytes/total in %):
48.8% 48.8% 24.5% 22.8% 3.9% 2.4% 2.1% 1.9% 1.9% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711031400.pktlen.png)
detailed numbers
[ 32- 63]: 3767665
[ 64- 127]: 5338312
[ 128- 255]: 1047408
[ 256- 511]: 402697
[ 512- 1023]: 429714
[ 1024- 2047]: 6573708
Protocol Breakdown
![[protocol breakdown chart]](200711031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17559504 (100.00%) 10914425883 (100.00%) 621.57
ip 17428516 ( 99.25%) 10897396314 ( 99.84%) 625.26
tcp 14318253 ( 81.54%) 10420461519 ( 95.47%) 727.77
http(s) 5366139 ( 30.56%) 7154206935 ( 65.55%) 1333.21
http(c) 2931397 ( 16.69%) 319740093 ( 2.93%) 109.07
squid 914701 ( 5.21%) 823260291 ( 7.54%) 900.03
smtp 726769 ( 4.14%) 185177424 ( 1.70%) 254.80
nntp 8 ( 0.00%) 494 ( 0.00%) 61.75
ftp 1113417 ( 6.34%) 89444590 ( 0.82%) 80.33
pop3 17047 ( 0.10%) 15127832 ( 0.14%) 887.42
imap 3957 ( 0.02%) 1423021 ( 0.01%) 359.62
telnet 849 ( 0.00%) 64110 ( 0.00%) 75.51
ssh 89451 ( 0.51%) 38556582 ( 0.35%) 431.04
dns 2204 ( 0.01%) 518373 ( 0.00%) 235.20
bgp 250 ( 0.00%) 58627 ( 0.00%) 234.51
napster 66 ( 0.00%) 29898 ( 0.00%) 453.00
realaud 242 ( 0.00%) 24337 ( 0.00%) 100.57
rtsp 308361 ( 1.76%) 101133537 ( 0.93%) 327.97
icecast 18701 ( 0.11%) 2827397 ( 0.03%) 151.19
hotline 9 ( 0.00%) 1767 ( 0.00%) 196.33
other 2824680 ( 16.09%) 1688865911 ( 15.47%) 597.90
udp 2317855 ( 13.20%) 385808621 ( 3.53%) 166.45
dns 1688120 ( 9.61%) 218495277 ( 2.00%) 129.43
realaud 2833 ( 0.02%) 187724 ( 0.00%) 66.26
halflif 16 ( 0.00%) 2315 ( 0.00%) 144.69
starcra 14 ( 0.00%) 2112 ( 0.00%) 150.86
everque 82 ( 0.00%) 14545 ( 0.00%) 177.38
unreal 23 ( 0.00%) 3676 ( 0.00%) 159.83
quake 11 ( 0.00%) 1405 ( 0.00%) 127.73
cuseeme 3 ( 0.00%) 272 ( 0.00%) 90.67
other 626625 ( 3.57%) 167088528 ( 1.53%) 266.65
icmp 423509 ( 2.41%) 36863802 ( 0.34%) 87.04
ipip 333 ( 0.00%) 38726 ( 0.00%) 116.29
ipsec 26090 ( 0.15%) 3062948 ( 0.03%) 117.40
ip6 7326 ( 0.04%) 3990955 ( 0.04%) 544.77
other 335150 ( 1.91%) 47169743 ( 0.43%) 140.74
frag 2838 ( 0.02%) 2194230 ( 0.02%) 773.16
ip6 130988 ( 0.75%) 17029569 ( 0.16%) 130.01
tcp6 108157 ( 0.62%) 13620056 ( 0.12%) 125.93
http(s) 397 ( 0.00%) 447960 ( 0.00%) 1128.36
http(c) 3723 ( 0.02%) 343045 ( 0.00%) 92.14
smtp 513 ( 0.00%) 160919 ( 0.00%) 313.68
ftp 17 ( 0.00%) 1434 ( 0.00%) 84.35
ssh 30 ( 0.00%) 7788 ( 0.00%) 259.60
dns 12 ( 0.00%) 1075 ( 0.00%) 89.58
bgp 113 ( 0.00%) 15673 ( 0.00%) 138.70
other 103352 ( 0.59%) 12642162 ( 0.12%) 122.32
udp6 16211 ( 0.09%) 2611828 ( 0.02%) 161.11
dns 14575 ( 0.08%) 2367579 ( 0.02%) 162.44
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1635 ( 0.01%) 244112 ( 0.00%) 149.30
icmp6 6586 ( 0.04%) 790150 ( 0.01%) 119.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3455 ( 0.00%) 863.75
tcpdump file: 200711031400.dump.gz (454.93 MB)