Traffic Trace Info
DumpFile: 200711111400.dump
FileSize: 1305.54MB
Id: 200711111400
StartTime: Sun Nov 11 14:00:01 2007
EndTime: Sun Nov 11 14:15:01 2007
TotalTime: 900.25 seconds
TotalCapSize: 1020.73MB CapLen: 96 bytes
# of packets: 18661241 (13190.72MB)
AvgRate: 122.95Mbps stddev:20.18M
IP flow (unique src/dst pair) Information
# of flows: 566591 (avg. 32.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.6% 3.2% 2.5% 1.9% 1.9% 1.6% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 300757
Top 10 bandwidth usage (bytes/total in %):
20.8% 7.1% 6.6% 5.9% 4.3% 3.8% 3.6% 3.6% 3.2% 3.2%
# of IPv6 addresses: 1693
Top 10 bandwidth usage (bytes/total in %):
68.0% 68.0% 15.3% 15.3% 1.9% 1.8% 1.4% 0.8% 0.8% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711111400.pktlen.png)
detailed numbers
[ 32- 63]: 3711345
[ 64- 127]: 4731207
[ 128- 255]: 649988
[ 256- 511]: 408925
[ 512- 1023]: 521763
[ 1024- 2047]: 8638013
Protocol Breakdown
![[protocol breakdown chart]](200711111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18661241 (100.00%) 13831471566 (100.00%) 741.19
ip 18613631 ( 99.74%) 13806847120 ( 99.82%) 741.76
tcp 15261137 ( 81.78%) 13015748787 ( 94.10%) 852.87
http(s) 6391927 ( 34.25%) 8714515548 ( 63.00%) 1363.36
http(c) 2943809 ( 15.77%) 298325509 ( 2.16%) 101.34
squid 756140 ( 4.05%) 701988583 ( 5.08%) 928.38
smtp 559223 ( 3.00%) 131637394 ( 0.95%) 235.39
ftp 990590 ( 5.31%) 691885936 ( 5.00%) 698.46
pop3 13705 ( 0.07%) 10057393 ( 0.07%) 733.85
imap 3564 ( 0.02%) 963830 ( 0.01%) 270.43
telnet 1792 ( 0.01%) 133498 ( 0.00%) 74.50
ssh 607306 ( 3.25%) 136904622 ( 0.99%) 225.43
dns 1952 ( 0.01%) 173879 ( 0.00%) 89.08
bgp 359 ( 0.00%) 135701 ( 0.00%) 378.00
napster 6 ( 0.00%) 360 ( 0.00%) 60.00
realaud 1906 ( 0.01%) 201513 ( 0.00%) 105.73
rtsp 189617 ( 1.02%) 97472140 ( 0.70%) 514.05
icecast 17755 ( 0.10%) 15686252 ( 0.11%) 883.48
hotline 10 ( 0.00%) 600 ( 0.00%) 60.00
other 2781471 ( 14.91%) 2215665729 ( 16.02%) 796.58
udp 2518837 ( 13.50%) 721895079 ( 5.22%) 286.60
dns 1348503 ( 7.23%) 201895480 ( 1.46%) 149.72
realaud 115218 ( 0.62%) 78771866 ( 0.57%) 683.68
halflif 27 ( 0.00%) 2891 ( 0.00%) 107.07
starcra 15 ( 0.00%) 2411 ( 0.00%) 160.73
everque 75 ( 0.00%) 12812 ( 0.00%) 170.83
unreal 11 ( 0.00%) 3650 ( 0.00%) 331.82
quake 22 ( 0.00%) 6311 ( 0.00%) 286.86
cuseeme 6 ( 0.00%) 563 ( 0.00%) 93.83
other 1054895 ( 5.65%) 441191673 ( 3.19%) 418.23
icmp 808858 ( 4.33%) 62398891 ( 0.45%) 77.14
ipip 339 ( 0.00%) 40618 ( 0.00%) 119.82
ipsec 180 ( 0.00%) 19800 ( 0.00%) 110.00
ip6 7200 ( 0.04%) 3985352 ( 0.03%) 553.52
other 17080 ( 0.09%) 2758593 ( 0.02%) 161.51
frag 10890 ( 0.06%) 9999135 ( 0.07%) 918.19
ip6 47610 ( 0.26%) 24624446 ( 0.18%) 517.21
tcp6 24833 ( 0.13%) 21432108 ( 0.15%) 863.05
http(s) 121 ( 0.00%) 106262 ( 0.00%) 878.20
http(c) 215 ( 0.00%) 25146 ( 0.00%) 116.96
smtp 805 ( 0.00%) 249878 ( 0.00%) 310.41
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 29 ( 0.00%) 7702 ( 0.00%) 265.59
dns 13 ( 0.00%) 1222 ( 0.00%) 94.00
bgp 111 ( 0.00%) 13389 ( 0.00%) 120.62
other 23506 ( 0.13%) 21025467 ( 0.15%) 894.47
udp6 14640 ( 0.08%) 2296731 ( 0.02%) 156.88
dns 13656 ( 0.07%) 2141914 ( 0.02%) 156.85
other 984 ( 0.01%) 154817 ( 0.00%) 157.33
icmp6 8098 ( 0.04%) 884026 ( 0.01%) 109.17
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 8 ( 0.00%) 7365 ( 0.00%) 920.62
tcpdump file: 200711111400.dump.gz (470.50 MB)