Traffic Trace Info
DumpFile: 200711051400.dump
FileSize: 2001.42MB
Id: 200711051400
StartTime: Mon Nov 5 14:00:01 2007
EndTime: Mon Nov 5 14:15:01 2007
TotalTime: 900.00 seconds
TotalCapSize: 1560.37MB CapLen: 96 bytes
# of packets: 28900346 (19286.35MB)
AvgRate: 179.79Mbps stddev:24.05M
IP flow (unique src/dst pair) Information
# of flows: 669313 (avg. 43.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 3.6% 2.6% 1.4% 1.2% 1.2% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 348534
Top 10 bandwidth usage (bytes/total in %):
11.0% 9.4% 5.4% 3.7% 3.7% 3.4% 3.4% 3.4% 2.9% 2.2%
# of IPv6 addresses: 1988
Top 10 bandwidth usage (bytes/total in %):
49.6% 49.6% 18.8% 18.8% 3.6% 3.6% 3.5% 2.3% 2.0% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711051400.pktlen.png)
detailed numbers
[ 32- 63]: 6989146
[ 64- 127]: 7088164
[ 128- 255]: 699103
[ 256- 511]: 714957
[ 512- 1023]: 964759
[ 1024- 2047]: 12444217
Protocol Breakdown
![[protocol breakdown chart]](200711051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28900346 (100.00%) 20223201319 (100.00%) 699.76
ip 28844969 ( 99.81%) 20203181385 ( 99.90%) 700.41
tcp 24141427 ( 83.53%) 18436035718 ( 91.16%) 763.67
http(s) 10086732 ( 34.90%) 13580008897 ( 67.15%) 1346.32
http(c) 7071163 ( 24.47%) 958977322 ( 4.74%) 135.62
squid 548327 ( 1.90%) 477338341 ( 2.36%) 870.54
smtp 652491 ( 2.26%) 144583376 ( 0.71%) 221.59
ftp 886681 ( 3.07%) 72084275 ( 0.36%) 81.30
pop3 19077 ( 0.07%) 9011665 ( 0.04%) 472.38
imap 11080 ( 0.04%) 6443118 ( 0.03%) 581.51
telnet 1258 ( 0.00%) 169819 ( 0.00%) 134.99
ssh 943618 ( 3.27%) 716856501 ( 3.54%) 759.69
dns 2042 ( 0.01%) 150169 ( 0.00%) 73.54
bgp 252 ( 0.00%) 60297 ( 0.00%) 239.27
napster 249 ( 0.00%) 17788 ( 0.00%) 71.44
realaud 282 ( 0.00%) 115081 ( 0.00%) 408.09
rtsp 225313 ( 0.78%) 131105985 ( 0.65%) 581.88
icecast 4879 ( 0.02%) 554831 ( 0.00%) 113.72
hotline 10 ( 0.00%) 1827 ( 0.00%) 182.70
other 3687971 ( 12.76%) 2338556306 ( 11.56%) 634.10
udp 4038678 ( 13.97%) 1653766261 ( 8.18%) 409.48
dns 1625896 ( 5.63%) 219741789 ( 1.09%) 135.15
realaud 783 ( 0.00%) 76206 ( 0.00%) 97.33
halflif 25 ( 0.00%) 2692 ( 0.00%) 107.68
starcra 47 ( 0.00%) 7998 ( 0.00%) 170.17
everque 68 ( 0.00%) 13802 ( 0.00%) 202.97
unreal 46 ( 0.00%) 7309 ( 0.00%) 158.89
quake 13 ( 0.00%) 1663 ( 0.00%) 127.92
cuseeme 3 ( 0.00%) 259 ( 0.00%) 86.33
other 2411662 ( 8.34%) 1433898140 ( 7.09%) 594.57
icmp 476602 ( 1.65%) 39891597 ( 0.20%) 83.70
ipip 342 ( 0.00%) 40828 ( 0.00%) 119.38
ipsec 985 ( 0.00%) 816318 ( 0.00%) 828.75
ip6 7320 ( 0.03%) 3974636 ( 0.02%) 542.98
other 179615 ( 0.62%) 68656027 ( 0.34%) 382.24
frag 1337 ( 0.00%) 1091659 ( 0.01%) 816.50
ip6 55377 ( 0.19%) 20019934 ( 0.10%) 361.52
tcp6 28440 ( 0.10%) 16048665 ( 0.08%) 564.30
http(s) 1076 ( 0.00%) 621144 ( 0.00%) 577.27
http(c) 6988 ( 0.02%) 863886 ( 0.00%) 123.62
smtp 450 ( 0.00%) 111960 ( 0.00%) 248.80
ftp 60 ( 0.00%) 5991 ( 0.00%) 99.85
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 157 ( 0.00%) 23121 ( 0.00%) 147.27
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 134 ( 0.00%) 19016 ( 0.00%) 141.91
other 19535 ( 0.07%) 14399870 ( 0.07%) 737.13
udp6 19706 ( 0.07%) 3075703 ( 0.02%) 156.08
dns 18341 ( 0.06%) 2873601 ( 0.01%) 156.68
starcra 2 ( 0.00%) 253 ( 0.00%) 126.50
other 1363 ( 0.00%) 201849 ( 0.00%) 148.09
icmp6 7149 ( 0.02%) 877630 ( 0.00%) 122.76
ip6 42 ( 0.00%) 5706 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 8150 ( 0.00%) 815.00
tcpdump file: 200711051400.dump.gz (724.92 MB)