Traffic Trace Info
DumpFile: 200711161400.dump
FileSize: 1683.39MB
Id: 200711161400
StartTime: Fri Nov 16 14:00:01 2007
EndTime: Fri Nov 16 14:15:01 2007
TotalTime: 899.61 seconds
TotalCapSize: 1319.73MB CapLen: 96 bytes
# of packets: 23832238 (15765.66MB)
AvgRate: 147.01Mbps stddev:23.45M
IP flow (unique src/dst pair) Information
# of flows: 695982 (avg. 34.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.4% 1.2% 1.2% 1.0% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 350977
Top 10 bandwidth usage (bytes/total in %):
18.6% 3.6% 3.5% 3.4% 2.6% 2.1% 1.9% 1.9% 1.9% 1.6%
# of IPv6 addresses: 1963
Top 10 bandwidth usage (bytes/total in %):
47.9% 47.1% 39.7% 39.7% 2.0% 1.0% 0.8% 0.7% 0.6% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711161400.pktlen.png)
detailed numbers
[ 32- 63]: 5496275
[ 64- 127]: 6089222
[ 128- 255]: 751349
[ 256- 511]: 625529
[ 512- 1023]: 795871
[ 1024- 2047]: 10073992
Protocol Breakdown
![[protocol breakdown chart]](200711161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23832238 (100.00%) 16531492589 (100.00%) 693.66
ip 23774862 ( 99.76%) 16490989656 ( 99.75%) 693.63
tcp 20389583 ( 85.55%) 15851327898 ( 95.89%) 777.42
http(s) 9480098 ( 39.78%) 12616499029 ( 76.32%) 1330.84
http(c) 6324002 ( 26.54%) 867540479 ( 5.25%) 137.18
squid 714438 ( 3.00%) 627155779 ( 3.79%) 877.83
smtp 708724 ( 2.97%) 212585090 ( 1.29%) 299.95
nntp 22 ( 0.00%) 1778 ( 0.00%) 80.82
ftp 286193 ( 1.20%) 23190335 ( 0.14%) 81.03
pop3 19558 ( 0.08%) 9282594 ( 0.06%) 474.62
imap 7431 ( 0.03%) 3104329 ( 0.02%) 417.75
telnet 343 ( 0.00%) 34153 ( 0.00%) 99.57
ssh 113900 ( 0.48%) 43093643 ( 0.26%) 378.35
dns 3836 ( 0.02%) 286501 ( 0.00%) 74.69
bgp 248 ( 0.00%) 70381 ( 0.00%) 283.79
napster 5 ( 0.00%) 467 ( 0.00%) 93.40
realaud 177 ( 0.00%) 21037 ( 0.00%) 118.85
rtsp 339383 ( 1.42%) 45616107 ( 0.28%) 134.41
icecast 55026 ( 0.23%) 32429141 ( 0.20%) 589.34
other 2336157 ( 9.80%) 1370414535 ( 8.29%) 586.61
udp 2791635 ( 11.71%) 567494176 ( 3.43%) 203.28
dns 1853127 ( 7.78%) 246238327 ( 1.49%) 132.88
realaud 12552 ( 0.05%) 5705985 ( 0.03%) 454.59
halflif 15 ( 0.00%) 1721 ( 0.00%) 114.73
starcra 29 ( 0.00%) 4362 ( 0.00%) 150.41
everque 90 ( 0.00%) 16047 ( 0.00%) 178.30
unreal 22 ( 0.00%) 3728 ( 0.00%) 169.45
quake 23 ( 0.00%) 2389 ( 0.00%) 103.87
cuseeme 6 ( 0.00%) 528 ( 0.00%) 88.00
other 925644 ( 3.88%) 315469765 ( 1.91%) 340.81
icmp 451522 ( 1.89%) 44884312 ( 0.27%) 99.41
ipip 354 ( 0.00%) 41920 ( 0.00%) 118.42
ipsec 8879 ( 0.04%) 4018144 ( 0.02%) 452.54
ip6 791 ( 0.00%) 97802 ( 0.00%) 123.64
other 132098 ( 0.55%) 23125404 ( 0.14%) 175.06
frag 11601 ( 0.05%) 11015505 ( 0.07%) 949.53
ip6 57376 ( 0.24%) 40502933 ( 0.25%) 705.92
tcp6 29723 ( 0.12%) 36286584 ( 0.22%) 1220.83
http(s) 13652 ( 0.06%) 19534835 ( 0.12%) 1430.91
http(c) 259 ( 0.00%) 29004 ( 0.00%) 111.98
squid 1 ( 0.00%) 74 ( 0.00%) 74.00
smtp 715 ( 0.00%) 201515 ( 0.00%) 281.84
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 861 ( 0.00%) 96958 ( 0.00%) 112.61
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 98 ( 0.00%) 11876 ( 0.00%) 121.18
other 14097 ( 0.06%) 16408645 ( 0.10%) 1163.98
udp6 20565 ( 0.09%) 3353970 ( 0.02%) 163.09
dns 19392 ( 0.08%) 3173779 ( 0.02%) 163.66
other 1173 ( 0.00%) 180191 ( 0.00%) 153.62
icmp6 7054 ( 0.03%) 854711 ( 0.01%) 121.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3588 ( 0.00%) 897.00
tcpdump file: 200711161400.dump.gz (607.07 MB)