Traffic Trace Info
DumpFile: 200711191400.dump
FileSize: 2154.73MB
Id: 200711191400
StartTime: Mon Nov 19 14:00:01 2007
EndTime: Mon Nov 19 14:15:00 2007
TotalTime: 899.91 seconds
TotalCapSize: 1686.06MB CapLen: 96 bytes
# of packets: 30713592 (19910.79MB)
AvgRate: 185.56Mbps stddev:28.10M
IP flow (unique src/dst pair) Information
# of flows: 652748 (avg. 47.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.8% 1.6% 1.4% 1.3% 1.2% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 328722
Top 10 bandwidth usage (bytes/total in %):
13.3% 6.3% 5.1% 3.8% 3.6% 2.6% 2.5% 2.4% 2.3% 1.9%
# of IPv6 addresses: 1851
Top 10 bandwidth usage (bytes/total in %):
85.8% 85.8% 5.1% 5.1% 1.1% 1.0% 0.9% 0.8% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711191400.pktlen.png)
detailed numbers
[ 32- 63]: 7622409
[ 64- 127]: 7806236
[ 128- 255]: 757881
[ 256- 511]: 711538
[ 512- 1023]: 1037590
[ 1024- 2047]: 12777938
Protocol Breakdown
![[protocol breakdown chart]](200711191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30713592 (100.00%) 20877973692 (100.00%) 679.76
ip 30606610 ( 99.65%) 20800665863 ( 99.63%) 679.61
tcp 25712780 ( 83.72%) 19243314179 ( 92.17%) 748.39
http(s) 10507398 ( 34.21%) 13941005364 ( 66.77%) 1326.78
http(c) 8493399 ( 27.65%) 1001165450 ( 4.80%) 117.88
squid 889929 ( 2.90%) 636780120 ( 3.05%) 715.54
smtp 701370 ( 2.28%) 222665546 ( 1.07%) 317.47
nntp 83 ( 0.00%) 9152 ( 0.00%) 110.27
ftp 98955 ( 0.32%) 10391931 ( 0.05%) 105.02
pop3 24600 ( 0.08%) 16519091 ( 0.08%) 671.51
imap 7538 ( 0.02%) 3103094 ( 0.01%) 411.66
telnet 354 ( 0.00%) 80560 ( 0.00%) 227.57
ssh 67214 ( 0.22%) 35891119 ( 0.17%) 533.98
dns 4986 ( 0.02%) 432959 ( 0.00%) 86.83
bgp 226 ( 0.00%) 57238 ( 0.00%) 253.27
napster 129 ( 0.00%) 9894 ( 0.00%) 76.70
realaud 76 ( 0.00%) 10669 ( 0.00%) 140.38
rtsp 266288 ( 0.87%) 67912242 ( 0.33%) 255.03
icecast 30293 ( 0.10%) 3175016 ( 0.02%) 104.81
other 4619939 ( 15.04%) 3304104554 ( 15.83%) 715.18
udp 4216427 ( 13.73%) 1481383792 ( 7.10%) 351.34
dns 2007189 ( 6.54%) 258505467 ( 1.24%) 128.79
realaud 1931 ( 0.01%) 128497 ( 0.00%) 66.54
halflif 28 ( 0.00%) 3030 ( 0.00%) 108.21
starcra 34 ( 0.00%) 5800 ( 0.00%) 170.59
everque 60 ( 0.00%) 9354 ( 0.00%) 155.90
unreal 16 ( 0.00%) 2237 ( 0.00%) 139.81
quake 17 ( 0.00%) 1826 ( 0.00%) 107.41
cuseeme 51 ( 0.00%) 3584 ( 0.00%) 70.27
other 2207093 ( 7.19%) 1222722072 ( 5.86%) 554.00
icmp 522040 ( 1.70%) 49129726 ( 0.24%) 94.11
ipip 375 ( 0.00%) 49282 ( 0.00%) 131.42
ipsec 1465 ( 0.00%) 1389518 ( 0.01%) 948.48
ip6 971 ( 0.00%) 126772 ( 0.00%) 130.56
other 152552 ( 0.50%) 25272594 ( 0.12%) 165.67
frag 924 ( 0.00%) 809346 ( 0.00%) 875.92
ip6 106982 ( 0.35%) 77307829 ( 0.37%) 722.62
tcp6 75477 ( 0.25%) 72838707 ( 0.35%) 965.05
http(s) 45768 ( 0.15%) 65670894 ( 0.31%) 1434.86
http(c) 21060 ( 0.07%) 1879079 ( 0.01%) 89.23
smtp 2479 ( 0.01%) 1010432 ( 0.00%) 407.60
ftp 20 ( 0.00%) 1578 ( 0.00%) 78.90
pop3 47 ( 0.00%) 4274 ( 0.00%) 90.94
ssh 27 ( 0.00%) 6746 ( 0.00%) 249.85
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 75 ( 0.00%) 8541 ( 0.00%) 113.88
other 5994 ( 0.02%) 4256528 ( 0.02%) 710.13
udp6 24337 ( 0.08%) 3598523 ( 0.02%) 147.86
dns 23318 ( 0.08%) 3435051 ( 0.02%) 147.31
other 1019 ( 0.00%) 163472 ( 0.00%) 160.42
icmp6 7096 ( 0.02%) 860418 ( 0.00%) 121.25
ip6 41 ( 0.00%) 5638 ( 0.00%) 137.51
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1 ( 0.00%) 463 ( 0.00%) 463.00
tcpdump file: 200711191400.dump.gz (767.96 MB)