Traffic Trace Info
DumpFile: 200711091400.dump
FileSize: 1927.31MB
Id: 200711091400
StartTime: Fri Nov 9 14:00:01 2007
EndTime: Fri Nov 9 14:15:00 2007
TotalTime: 899.65 seconds
TotalCapSize: 1512.22MB CapLen: 96 bytes
# of packets: 27198978 (17894.47MB)
AvgRate: 166.87Mbps stddev:25.30M
IP flow (unique src/dst pair) Information
# of flows: 714708 (avg. 38.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.6% 1.7% 1.6% 1.4% 1.2% 1.1% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 366725
Top 10 bandwidth usage (bytes/total in %):
10.9% 5.3% 3.5% 3.4% 3.4% 3.0% 2.7% 2.7% 2.5% 1.8%
# of IPv6 addresses: 2014
Top 10 bandwidth usage (bytes/total in %):
39.1% 39.1% 6.6% 5.3% 4.5% 4.3% 3.5% 3.4% 2.6% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711091400.pktlen.png)
detailed numbers
[ 32- 63]: 6355259
[ 64- 127]: 7162883
[ 128- 255]: 836851
[ 256- 511]: 677525
[ 512- 1023]: 697367
[ 1024- 2047]: 11469093
Protocol Breakdown
![[protocol breakdown chart]](200711091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27198978 (100.00%) 18763709000 (100.00%) 689.87
ip 27158094 ( 99.85%) 18754006818 ( 99.95%) 690.55
tcp 23631051 ( 86.88%) 18232884969 ( 97.17%) 771.56
http(s) 8870681 ( 32.61%) 12049906404 ( 64.22%) 1358.40
http(c) 6463569 ( 23.76%) 755504867 ( 4.03%) 116.89
squid 702187 ( 2.58%) 525399031 ( 2.80%) 748.23
smtp 762748 ( 2.80%) 279459307 ( 1.49%) 366.38
ftp 792115 ( 2.91%) 79562013 ( 0.42%) 100.44
pop3 53494 ( 0.20%) 58797772 ( 0.31%) 1099.15
imap 10120 ( 0.04%) 4307789 ( 0.02%) 425.67
telnet 467 ( 0.00%) 41449 ( 0.00%) 88.76
ssh 637136 ( 2.34%) 539481590 ( 2.88%) 846.73
dns 2936 ( 0.01%) 304488 ( 0.00%) 103.71
bgp 252 ( 0.00%) 60687 ( 0.00%) 240.82
napster 32 ( 0.00%) 2863 ( 0.00%) 89.47
realaud 178 ( 0.00%) 79953 ( 0.00%) 449.17
rtsp 275699 ( 1.01%) 152864873 ( 0.81%) 554.46
icecast 44611 ( 0.16%) 31380967 ( 0.17%) 703.44
other 5014824 ( 18.44%) 3755730796 ( 20.02%) 748.93
udp 2396795 ( 8.81%) 415295229 ( 2.21%) 173.27
dns 1726084 ( 6.35%) 225740764 ( 1.20%) 130.78
realaud 21950 ( 0.08%) 11000342 ( 0.06%) 501.15
halflif 25 ( 0.00%) 3797 ( 0.00%) 151.88
starcra 21 ( 0.00%) 3846 ( 0.00%) 183.14
everque 80 ( 0.00%) 15036 ( 0.00%) 187.95
unreal 22 ( 0.00%) 3784 ( 0.00%) 172.00
quake 25 ( 0.00%) 2416 ( 0.00%) 96.64
cuseeme 5 ( 0.00%) 505 ( 0.00%) 101.00
other 648529 ( 2.38%) 178502837 ( 0.95%) 275.24
icmp 948771 ( 3.49%) 72346989 ( 0.39%) 76.25
igmp 2 ( 0.00%) 2290 ( 0.00%) 1145.00
ipip 316 ( 0.00%) 37536 ( 0.00%) 118.78
ipsec 2990 ( 0.01%) 2692026 ( 0.01%) 900.34
ip6 7502 ( 0.03%) 4029162 ( 0.02%) 537.08
pim 2 ( 0.00%) 2570 ( 0.00%) 1285.00
sctp 1 ( 0.00%) 134 ( 0.00%) 134.00
other 170664 ( 0.63%) 26715913 ( 0.14%) 156.54
frag 10661 ( 0.04%) 11216834 ( 0.06%) 1052.14
ip6 40884 ( 0.15%) 9702182 ( 0.05%) 237.31
tcp6 13299 ( 0.05%) 5608583 ( 0.03%) 421.73
http(s) 1165 ( 0.00%) 538074 ( 0.00%) 461.87
http(c) 80 ( 0.00%) 8998 ( 0.00%) 112.47
smtp 1023 ( 0.00%) 378481 ( 0.00%) 369.97
ftp 5 ( 0.00%) 388 ( 0.00%) 77.60
pop3 37 ( 0.00%) 3404 ( 0.00%) 92.00
ssh 575 ( 0.00%) 89121 ( 0.00%) 154.99
dns 18 ( 0.00%) 1667 ( 0.00%) 92.61
bgp 127 ( 0.00%) 15658 ( 0.00%) 123.29
other 10269 ( 0.04%) 4572792 ( 0.02%) 445.30
udp6 20980 ( 0.08%) 3278684 ( 0.02%) 156.28
dns 19749 ( 0.07%) 3062914 ( 0.02%) 155.09
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1230 ( 0.00%) 215654 ( 0.00%) 175.33
icmp6 6551 ( 0.02%) 789417 ( 0.00%) 120.50
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 24 ( 0.00%) 21418 ( 0.00%) 892.42
tcpdump file: 200711091400.dump.gz (699.73 MB)