Traffic Trace Info
DumpFile: 200711181400.dump
FileSize: 949.70MB
Id: 200711181400
StartTime: Sun Nov 18 14:00:00 2007
EndTime: Sun Nov 18 14:15:01 2007
TotalTime: 900.41 seconds
TotalCapSize: 743.87MB CapLen: 96 bytes
# of packets: 13488877 (8619.23MB)
AvgRate: 80.30Mbps stddev:11.23M
IP flow (unique src/dst pair) Information
# of flows: 458562 (avg. 29.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.2% 1.9% 1.8% 1.7% 1.6% 1.5% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 238170
Top 10 bandwidth usage (bytes/total in %):
29.6% 4.7% 4.2% 4.1% 3.9% 3.7% 3.6% 2.2% 2.1% 2.0%
# of IPv6 addresses: 1802
Top 10 bandwidth usage (bytes/total in %):
41.7% 41.7% 9.8% 9.6% 7.2% 6.0% 5.5% 4.3% 3.3% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711181400.pktlen.png)
detailed numbers
[ 32- 63]: 2903054
[ 64- 127]: 3754855
[ 128- 255]: 515487
[ 256- 511]: 342832
[ 512- 1023]: 391698
[ 1024- 2047]: 5580951
Protocol Breakdown
![[protocol breakdown chart]](200711181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13488877 (100.00%) 9037916694 (100.00%) 670.03
ip 13452755 ( 99.73%) 9028394440 ( 99.89%) 671.12
tcp 10907981 ( 80.87%) 8552114133 ( 94.62%) 784.02
http(s) 4763992 ( 35.32%) 6452478523 ( 71.39%) 1354.43
http(c) 2461409 ( 18.25%) 249291030 ( 2.76%) 101.28
squid 810666 ( 6.01%) 655740612 ( 7.26%) 808.89
smtp 570513 ( 4.23%) 92545840 ( 1.02%) 162.22
nntp 4 ( 0.00%) 296 ( 0.00%) 74.00
ftp 233884 ( 1.73%) 20746369 ( 0.23%) 88.70
pop3 12852 ( 0.10%) 6712951 ( 0.07%) 522.33
imap 2805 ( 0.02%) 552171 ( 0.01%) 196.85
telnet 660 ( 0.00%) 52652 ( 0.00%) 79.78
ssh 125415 ( 0.93%) 44836364 ( 0.50%) 357.50
dns 2352 ( 0.02%) 184539 ( 0.00%) 78.46
bgp 267 ( 0.00%) 84988 ( 0.00%) 318.31
napster 6 ( 0.00%) 422 ( 0.00%) 70.33
realaud 1439 ( 0.01%) 91251 ( 0.00%) 63.41
rtsp 52121 ( 0.39%) 14928760 ( 0.17%) 286.43
icecast 35558 ( 0.26%) 16780067 ( 0.19%) 471.91
other 1834030 ( 13.60%) 997086818 ( 11.03%) 543.66
udp 2162512 ( 16.03%) 437078757 ( 4.84%) 202.12
dns 1435356 ( 10.64%) 190153714 ( 2.10%) 132.48
realaud 2352 ( 0.02%) 155667 ( 0.00%) 66.18
halflif 20 ( 0.00%) 2678 ( 0.00%) 133.90
starcra 14 ( 0.00%) 2930 ( 0.00%) 209.29
everque 104 ( 0.00%) 16853 ( 0.00%) 162.05
unreal 16 ( 0.00%) 2621 ( 0.00%) 163.81
quake 14 ( 0.00%) 1200 ( 0.00%) 85.71
cuseeme 4 ( 0.00%) 336 ( 0.00%) 84.00
other 724621 ( 5.37%) 246736889 ( 2.73%) 340.50
icmp 377370 ( 2.80%) 37758952 ( 0.42%) 100.06
ipip 308 ( 0.00%) 35668 ( 0.00%) 115.81
ipsec 724 ( 0.01%) 650168 ( 0.01%) 898.02
ip6 1246 ( 0.01%) 376403 ( 0.00%) 302.09
other 2614 ( 0.02%) 380359 ( 0.00%) 145.51
frag 834 ( 0.01%) 702030 ( 0.01%) 841.76
ip6 36122 ( 0.27%) 9522254 ( 0.11%) 263.61
tcp6 8580 ( 0.06%) 5578509 ( 0.06%) 650.18
http(s) 142 ( 0.00%) 117959 ( 0.00%) 830.70
http(c) 310 ( 0.00%) 41668 ( 0.00%) 134.41
smtp 1908 ( 0.01%) 1100417 ( 0.01%) 576.74
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 30 ( 0.00%) 7788 ( 0.00%) 259.60
dns 11 ( 0.00%) 1075 ( 0.00%) 97.73
bgp 81 ( 0.00%) 9415 ( 0.00%) 116.23
other 6065 ( 0.04%) 4297145 ( 0.05%) 708.52
udp6 20719 ( 0.15%) 3115760 ( 0.03%) 150.38
dns 19623 ( 0.15%) 2942342 ( 0.03%) 149.94
other 1096 ( 0.01%) 173418 ( 0.00%) 158.23
icmp6 6793 ( 0.05%) 823905 ( 0.01%) 121.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200711181400.dump.gz (342.99 MB)