Traffic Trace Info
DumpFile: 200711041400.dump
FileSize: 1123.98MB
Id: 200711041400
StartTime: Sun Nov 4 14:00:01 2007
EndTime: Sun Nov 4 14:15:00 2007
TotalTime: 898.98 seconds
TotalCapSize: 877.08MB CapLen: 96 bytes
# of packets: 16176551 (9432.35MB)
AvgRate: 88.01Mbps stddev:10.85M
IP flow (unique src/dst pair) Information
# of flows: 589491 (avg. 27.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.4% 2.2% 2.1% 2.0% 1.9% 1.8% 1.8% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 345446
Top 10 bandwidth usage (bytes/total in %):
22.0% 7.0% 5.9% 5.5% 4.0% 3.0% 2.9% 2.6% 2.5% 2.5%
# of IPv6 addresses: 2022
Top 10 bandwidth usage (bytes/total in %):
47.8% 47.8% 26.0% 26.0% 3.5% 3.5% 3.0% 2.4% 2.2% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711041400.pktlen.png)
detailed numbers
[ 32- 63]: 3857618
[ 64- 127]: 4806976
[ 128- 255]: 596497
[ 256- 511]: 386633
[ 512- 1023]: 540582
[ 1024- 2047]: 5988245
Protocol Breakdown
![[protocol breakdown chart]](200711041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16176551 (100.00%) 9890534858 (100.00%) 611.41
ip 16040299 ( 99.16%) 9871885859 ( 99.81%) 615.44
tcp 11989722 ( 74.12%) 8981785007 ( 90.81%) 749.12
http(s) 4836126 ( 29.90%) 6635929542 ( 67.09%) 1372.16
http(c) 2346856 ( 14.51%) 240886802 ( 2.44%) 102.64
squid 615045 ( 3.80%) 442099734 ( 4.47%) 718.81
smtp 550604 ( 3.40%) 122090291 ( 1.23%) 221.74
ftp 1013892 ( 6.27%) 172276306 ( 1.74%) 169.92
pop3 13314 ( 0.08%) 8222839 ( 0.08%) 617.61
imap 4895 ( 0.03%) 2520988 ( 0.03%) 515.01
telnet 215 ( 0.00%) 14477 ( 0.00%) 67.33
ssh 70341 ( 0.43%) 35807864 ( 0.36%) 509.06
dns 3139 ( 0.02%) 835035 ( 0.01%) 266.02
bgp 321 ( 0.00%) 108113 ( 0.00%) 336.80
napster 4 ( 0.00%) 240 ( 0.00%) 60.00
realaud 8 ( 0.00%) 1078 ( 0.00%) 134.75
rtsp 177118 ( 1.09%) 10963408 ( 0.11%) 61.90
icecast 12865 ( 0.08%) 816524 ( 0.01%) 63.47
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2344978 ( 14.50%) 1309211706 ( 13.24%) 558.30
udp 3440184 ( 21.27%) 824252062 ( 8.33%) 239.60
dns 1397350 ( 8.64%) 179068111 ( 1.81%) 128.15
realaud 688 ( 0.00%) 46029 ( 0.00%) 66.90
halflif 15 ( 0.00%) 1322 ( 0.00%) 88.13
starcra 31 ( 0.00%) 4680 ( 0.00%) 150.97
everque 63 ( 0.00%) 11954 ( 0.00%) 189.75
unreal 22 ( 0.00%) 4598 ( 0.00%) 209.00
quake 32 ( 0.00%) 4951 ( 0.00%) 154.72
cuseeme 7 ( 0.00%) 1232 ( 0.00%) 176.00
other 2041918 ( 12.62%) 645105180 ( 6.52%) 315.93
icmp 584610 ( 3.61%) 53985765 ( 0.55%) 92.34
igmp 1 ( 0.00%) 189 ( 0.00%) 189.00
ipip 323 ( 0.00%) 38293 ( 0.00%) 118.55
ipsec 5090 ( 0.03%) 5830092 ( 0.06%) 1145.40
ip6 7301 ( 0.05%) 3982163 ( 0.04%) 545.43
pim 2 ( 0.00%) 284 ( 0.00%) 142.00
sctp 1 ( 0.00%) 1313 ( 0.00%) 1313.00
other 13065 ( 0.08%) 2010691 ( 0.02%) 153.90
frag 2481 ( 0.02%) 1984267 ( 0.02%) 799.79
ip6 136252 ( 0.84%) 18648999 ( 0.19%) 136.87
tcp6 113190 ( 0.70%) 15292213 ( 0.15%) 135.10
http(s) 911 ( 0.01%) 858379 ( 0.01%) 942.24
http(c) 263 ( 0.00%) 32551 ( 0.00%) 123.77
smtp 295 ( 0.00%) 121094 ( 0.00%) 410.49
pop3 34 ( 0.00%) 3128 ( 0.00%) 92.00
ssh 32 ( 0.00%) 7936 ( 0.00%) 248.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 130 ( 0.00%) 19163 ( 0.00%) 147.41
other 111518 ( 0.69%) 14249327 ( 0.14%) 127.78
udp6 15747 ( 0.10%) 2474436 ( 0.03%) 157.14
dns 14254 ( 0.09%) 2251951 ( 0.02%) 157.99
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1492 ( 0.01%) 222348 ( 0.00%) 149.03
icmp6 7279 ( 0.04%) 873489 ( 0.01%) 120.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 4781 ( 0.00%) 796.83
tcpdump file: 200711041400.dump.gz (408.09 MB)