Traffic Trace Info
DumpFile: 200711201400.dump
FileSize: 1843.15MB
Id: 200711201400
StartTime: Tue Nov 20 14:00:00 2007
EndTime: Tue Nov 20 14:15:00 2007
TotalTime: 899.67 seconds
TotalCapSize: 1445.71MB CapLen: 96 bytes
# of packets: 26045888 (17588.92MB)
AvgRate: 163.98Mbps stddev:41.93M
IP flow (unique src/dst pair) Information
# of flows: 629200 (avg. 41.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.3% 1.9% 1.5% 1.5% 1.2% 1.2% 1.2% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 306478
Top 10 bandwidth usage (bytes/total in %):
14.6% 6.2% 4.2% 3.9% 3.3% 3.0% 2.7% 2.6% 2.5% 2.3%
# of IPv6 addresses: 2117
Top 10 bandwidth usage (bytes/total in %):
45.6% 45.6% 18.2% 18.2% 5.9% 4.2% 3.8% 3.0% 2.7% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711201400.pktlen.png)
detailed numbers
[ 32- 63]: 5927881
[ 64- 127]: 6610790
[ 128- 255]: 842837
[ 256- 511]: 572421
[ 512- 1023]: 704881
[ 1024- 2047]: 11387078
Protocol Breakdown
![[protocol breakdown chart]](200711201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26045888 (100.00%) 18443322708 (100.00%) 708.11
ip 25983954 ( 99.76%) 18422080417 ( 99.88%) 708.98
tcp 22130299 ( 84.97%) 17819182058 ( 96.62%) 805.19
http(s) 9796877 ( 37.61%) 13204974819 ( 71.60%) 1347.88
http(c) 6246589 ( 23.98%) 847298634 ( 4.59%) 135.64
squid 700928 ( 2.69%) 551321273 ( 2.99%) 786.56
smtp 675633 ( 2.59%) 216129901 ( 1.17%) 319.89
nntp 170 ( 0.00%) 23263 ( 0.00%) 136.84
ftp 108183 ( 0.42%) 126755047 ( 0.69%) 1171.67
pop3 23194 ( 0.09%) 13523864 ( 0.07%) 583.08
imap 10655 ( 0.04%) 3399592 ( 0.02%) 319.06
telnet 751 ( 0.00%) 153124 ( 0.00%) 203.89
ssh 139208 ( 0.53%) 65068680 ( 0.35%) 467.42
dns 1911 ( 0.01%) 259644 ( 0.00%) 135.87
bgp 262 ( 0.00%) 64377 ( 0.00%) 245.71
realaud 78 ( 0.00%) 10859 ( 0.00%) 139.22
rtsp 452867 ( 1.74%) 68452699 ( 0.37%) 151.15
icecast 83674 ( 0.32%) 70957384 ( 0.38%) 848.02
other 3889312 ( 14.93%) 2650788478 ( 14.37%) 681.56
udp 3196467 ( 12.27%) 527336925 ( 2.86%) 164.97
dns 2303407 ( 8.84%) 293308333 ( 1.59%) 127.34
realaud 4999 ( 0.02%) 317609 ( 0.00%) 63.53
halflif 21 ( 0.00%) 2395 ( 0.00%) 114.05
starcra 21 ( 0.00%) 2507 ( 0.00%) 119.38
everque 1478 ( 0.01%) 250621 ( 0.00%) 169.57
unreal 15 ( 0.00%) 2180 ( 0.00%) 145.33
quake 23 ( 0.00%) 2294 ( 0.00%) 99.74
cuseeme 2 ( 0.00%) 156 ( 0.00%) 78.00
other 886497 ( 3.40%) 233449399 ( 1.27%) 263.34
icmp 512722 ( 1.97%) 47744890 ( 0.26%) 93.12
ipip 648 ( 0.00%) 93084 ( 0.00%) 143.65
ipsec 4524 ( 0.02%) 3795320 ( 0.02%) 838.93
ip6 925 ( 0.00%) 129603 ( 0.00%) 140.11
other 138369 ( 0.53%) 23798537 ( 0.13%) 171.99
frag 6204 ( 0.02%) 8312082 ( 0.05%) 1339.79
ip6 61934 ( 0.24%) 21242291 ( 0.12%) 342.98
tcp6 16496 ( 0.06%) 14722075 ( 0.08%) 892.46
http(s) 3348 ( 0.01%) 4308414 ( 0.02%) 1286.86
http(c) 1994 ( 0.01%) 194078 ( 0.00%) 97.33
smtp 353 ( 0.00%) 112429 ( 0.00%) 318.50
ftp 15 ( 0.00%) 1613 ( 0.00%) 107.53
telnet 799 ( 0.00%) 59888 ( 0.00%) 74.95
ssh 215 ( 0.00%) 38702 ( 0.00%) 180.01
bgp 87 ( 0.00%) 10246 ( 0.00%) 117.77
other 9685 ( 0.04%) 9996705 ( 0.05%) 1032.18
udp6 37688 ( 0.14%) 5513979 ( 0.03%) 146.31
dns 36146 ( 0.14%) 5163471 ( 0.03%) 142.85
unreal 2 ( 0.00%) 232 ( 0.00%) 116.00
other 1540 ( 0.01%) 350276 ( 0.00%) 227.45
icmp6 7665 ( 0.03%) 981463 ( 0.01%) 128.04
ip6 42 ( 0.00%) 5756 ( 0.00%) 137.05
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13 ( 0.00%) 14938 ( 0.00%) 1149.08
tcpdump file: 200711201400.dump.gz (635.33 MB)