Traffic Trace Info
DumpFile: 200711061400.dump
FileSize: 2038.11MB
Id: 200711061400
StartTime: Tue Nov 6 14:00:00 2007
EndTime: Tue Nov 6 14:15:01 2007
TotalTime: 900.80 seconds
TotalCapSize: 1603.26MB CapLen: 96 bytes
# of packets: 28493994 (18221.04MB)
AvgRate: 169.68Mbps stddev:24.97M
IP flow (unique src/dst pair) Information
# of flows: 645673 (avg. 44.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 1.3% 1.2% 1.0% 0.8% 0.8% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 324788
Top 10 bandwidth usage (bytes/total in %):
17.0% 5.5% 3.5% 3.2% 3.1% 2.8% 2.4% 2.0% 1.6% 1.5%
# of IPv6 addresses: 2039
Top 10 bandwidth usage (bytes/total in %):
37.4% 37.4% 7.6% 5.5% 5.4% 4.1% 3.8% 3.7% 3.6% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711061400.pktlen.png)
detailed numbers
[ 32- 63]: 6489556
[ 64- 127]: 7992257
[ 128- 255]: 848753
[ 256- 511]: 648844
[ 512- 1023]: 866250
[ 1024- 2047]: 11648334
Protocol Breakdown
![[protocol breakdown chart]](200711061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28493994 (100.00%) 19106145055 (100.00%) 670.53
ip 28454169 ( 99.86%) 19094981260 ( 99.94%) 671.08
tcp 25684973 ( 90.14%) 18663156145 ( 97.68%) 726.62
http(s) 10373206 ( 36.40%) 13916158791 ( 72.84%) 1341.55
http(c) 7340758 ( 25.76%) 935648884 ( 4.90%) 127.46
squid 529278 ( 1.86%) 363692943 ( 1.90%) 687.15
smtp 695437 ( 2.44%) 163559858 ( 0.86%) 235.19
ftp 948593 ( 3.33%) 94448235 ( 0.49%) 99.57
pop3 18168 ( 0.06%) 6455446 ( 0.03%) 355.32
imap 8813 ( 0.03%) 3482499 ( 0.02%) 395.15
telnet 64 ( 0.00%) 12150 ( 0.00%) 189.84
ssh 1444738 ( 5.07%) 242064452 ( 1.27%) 167.55
dns 2337 ( 0.01%) 223527 ( 0.00%) 95.65
bgp 269 ( 0.00%) 69816 ( 0.00%) 259.54
napster 58 ( 0.00%) 7052 ( 0.00%) 121.59
realaud 69 ( 0.00%) 9942 ( 0.00%) 144.09
rtsp 186915 ( 0.66%) 19096550 ( 0.10%) 102.17
icecast 29507 ( 0.10%) 16274091 ( 0.09%) 551.53
hotline 15 ( 0.00%) 3713 ( 0.00%) 247.53
other 4106735 ( 14.41%) 2901947416 ( 15.19%) 706.63
udp 2287220 ( 8.03%) 373634570 ( 1.96%) 163.36
dns 1634153 ( 5.74%) 220424702 ( 1.15%) 134.89
realaud 4850 ( 0.02%) 2048066 ( 0.01%) 422.28
halflif 15 ( 0.00%) 1186 ( 0.00%) 79.07
starcra 18 ( 0.00%) 2685 ( 0.00%) 149.17
everque 77 ( 0.00%) 14993 ( 0.00%) 194.71
unreal 42 ( 0.00%) 3633 ( 0.00%) 86.50
quake 27 ( 0.00%) 2606 ( 0.00%) 96.52
cuseeme 7 ( 0.00%) 582 ( 0.00%) 83.14
other 647173 ( 2.27%) 150102149 ( 0.79%) 231.94
icmp 402442 ( 1.41%) 36571013 ( 0.19%) 90.87
ipip 320 ( 0.00%) 37140 ( 0.00%) 116.06
ipsec 6080 ( 0.02%) 6448080 ( 0.03%) 1060.54
ip6 7204 ( 0.03%) 3956627 ( 0.02%) 549.23
other 65930 ( 0.23%) 11177685 ( 0.06%) 169.54
frag 7752 ( 0.03%) 9339496 ( 0.05%) 1204.79
ip6 39825 ( 0.14%) 11163795 ( 0.06%) 280.32
tcp6 10525 ( 0.04%) 6669258 ( 0.03%) 633.66
http(s) 1318 ( 0.00%) 1349648 ( 0.01%) 1024.01
http(c) 468 ( 0.00%) 56581 ( 0.00%) 120.90
smtp 1169 ( 0.00%) 394310 ( 0.00%) 337.31
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 29 ( 0.00%) 7702 ( 0.00%) 265.59
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 129 ( 0.00%) 18266 ( 0.00%) 141.60
other 7372 ( 0.03%) 4839074 ( 0.03%) 656.41
udp6 21969 ( 0.08%) 3566037 ( 0.02%) 162.32
dns 20429 ( 0.07%) 3206916 ( 0.02%) 156.98
everque 1 ( 0.00%) 137 ( 0.00%) 137.00
other 1539 ( 0.01%) 358984 ( 0.00%) 233.26
icmp6 7291 ( 0.03%) 915524 ( 0.00%) 125.57
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 8896 ( 0.00%) 889.60
tcpdump file: 200711061400.dump.gz (749.43 MB)