Traffic Trace Info
DumpFile: 200711071400.dump
FileSize: 2313.47MB
Id: 200711071400
StartTime: Wed Nov 7 14:00:01 2007
EndTime: Wed Nov 7 14:15:01 2007
TotalTime: 899.81 seconds
TotalCapSize: 1807.62MB CapLen: 96 bytes
# of packets: 33146629 (21497.60MB)
AvgRate: 200.42Mbps stddev:20.23M
IP flow (unique src/dst pair) Information
# of flows: 668345 (avg. 49.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.1% 2.1% 1.7% 1.5% 1.4% 1.1% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 351064
Top 10 bandwidth usage (bytes/total in %):
12.8% 10.5% 3.7% 3.6% 3.4% 3.3% 3.1% 2.9% 2.8% 2.7%
# of IPv6 addresses: 1919
Top 10 bandwidth usage (bytes/total in %):
43.2% 43.2% 25.3% 15.1% 11.5% 11.5% 10.0% 4.1% 4.1% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711071400.pktlen.png)
detailed numbers
[ 32- 63]: 7829124
[ 64- 127]: 8780818
[ 128- 255]: 961646
[ 256- 511]: 922457
[ 512- 1023]: 841230
[ 1024- 2047]: 13811354
Protocol Breakdown
![[protocol breakdown chart]](200711071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33146629 (100.00%) 22541867291 (100.00%) 680.07
ip 33023570 ( 99.63%) 22504105992 ( 99.83%) 681.46
tcp 28613494 ( 86.32%) 21372147176 ( 94.81%) 746.93
http(s) 9404719 ( 28.37%) 12390725749 ( 54.97%) 1317.50
http(c) 7592796 ( 22.91%) 2115149946 ( 9.38%) 278.57
squid 912313 ( 2.75%) 734149327 ( 3.26%) 804.71
smtp 848652 ( 2.56%) 234512699 ( 1.04%) 276.34
nntp 12 ( 0.00%) 744 ( 0.00%) 62.00
ftp 955628 ( 2.88%) 204547027 ( 0.91%) 214.04
pop3 26323 ( 0.08%) 13498923 ( 0.06%) 512.82
imap 15527 ( 0.05%) 10581273 ( 0.05%) 681.48
telnet 810 ( 0.00%) 57342 ( 0.00%) 70.79
ssh 619761 ( 1.87%) 128524412 ( 0.57%) 207.38
dns 3182 ( 0.01%) 233762 ( 0.00%) 73.46
bgp 288 ( 0.00%) 84324 ( 0.00%) 292.79
napster 7 ( 0.00%) 937 ( 0.00%) 133.86
realaud 2612 ( 0.01%) 174764 ( 0.00%) 66.91
rtsp 222240 ( 0.67%) 97266496 ( 0.43%) 437.66
icecast 109738 ( 0.33%) 58448457 ( 0.26%) 532.62
hotline 48 ( 0.00%) 7356 ( 0.00%) 153.25
other 7898818 ( 23.83%) 5384182438 ( 23.89%) 681.64
udp 3794134 ( 11.45%) 1058838710 ( 4.70%) 279.07
dns 1764196 ( 5.32%) 239592207 ( 1.06%) 135.81
realaud 1074 ( 0.00%) 93511 ( 0.00%) 87.07
halflif 25 ( 0.00%) 2174 ( 0.00%) 86.96
starcra 23 ( 0.00%) 2911 ( 0.00%) 126.57
everque 91 ( 0.00%) 13806 ( 0.00%) 151.71
unreal 24 ( 0.00%) 2008 ( 0.00%) 83.67
quake 31 ( 0.00%) 5469 ( 0.00%) 176.42
cuseeme 3 ( 0.00%) 214 ( 0.00%) 71.33
other 2028571 ( 6.12%) 819116148 ( 3.63%) 403.79
icmp 494690 ( 1.49%) 44843806 ( 0.20%) 90.65
ipip 316 ( 0.00%) 37480 ( 0.00%) 118.61
ipsec 3089 ( 0.01%) 3356222 ( 0.01%) 1086.51
ip6 7108 ( 0.02%) 3944188 ( 0.02%) 554.89
other 110739 ( 0.33%) 20938410 ( 0.09%) 189.08
frag 2591 ( 0.01%) 2111153 ( 0.01%) 814.80
ip6 123059 ( 0.37%) 37761299 ( 0.17%) 306.86
tcp6 93512 ( 0.28%) 33411802 ( 0.15%) 357.30
http(s) 12976 ( 0.04%) 17563614 ( 0.08%) 1353.55
http(c) 67270 ( 0.20%) 5991576 ( 0.03%) 89.07
squid 1092 ( 0.00%) 993736 ( 0.00%) 910.01
smtp 605 ( 0.00%) 276138 ( 0.00%) 456.43
ssh 4249 ( 0.01%) 4364794 ( 0.02%) 1027.25
dns 12 ( 0.00%) 1118 ( 0.00%) 93.17
bgp 110 ( 0.00%) 15239 ( 0.00%) 138.54
other 7198 ( 0.02%) 4205587 ( 0.02%) 584.27
udp6 22101 ( 0.07%) 3416605 ( 0.02%) 154.59
dns 20902 ( 0.06%) 3229847 ( 0.01%) 154.52
other 1199 ( 0.00%) 186758 ( 0.00%) 155.76
icmp6 7407 ( 0.02%) 921937 ( 0.00%) 124.47
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 8 ( 0.00%) 6739 ( 0.00%) 842.38
tcpdump file: 200711071400.dump.gz (851.05 MB)