Traffic Trace Info
DumpFile: 200711211400.dump
FileSize: 1800.64MB
Id: 200711211400
StartTime: Wed Nov 21 14:00:01 2007
EndTime: Wed Nov 21 14:15:00 2007
TotalTime: 899.16 seconds
TotalCapSize: 1410.27MB CapLen: 96 bytes
# of packets: 25582558 (16671.82MB)
AvgRate: 155.55Mbps stddev:18.91M
IP flow (unique src/dst pair) Information
# of flows: 631801 (avg. 40.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.4% 1.0% 0.9% 0.9% 0.8% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 310984
Top 10 bandwidth usage (bytes/total in %):
16.9% 5.1% 4.6% 3.3% 3.1% 3.1% 2.7% 2.3% 2.1% 2.1%
# of IPv6 addresses: 2048
Top 10 bandwidth usage (bytes/total in %):
38.4% 37.7% 8.2% 5.2% 4.9% 4.4% 3.7% 3.3% 3.3% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711211400.pktlen.png)
detailed numbers
[ 32- 63]: 6102101
[ 64- 127]: 6635698
[ 128- 255]: 743654
[ 256- 511]: 553936
[ 512- 1023]: 757767
[ 1024- 2047]: 10789402
Protocol Breakdown
![[protocol breakdown chart]](200711211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25582558 (100.00%) 17481669230 (100.00%) 683.34
ip 25539558 ( 99.83%) 17471619993 ( 99.94%) 684.10
tcp 21853011 ( 85.42%) 16915438047 ( 96.76%) 774.06
http(s) 8565095 ( 33.48%) 11347217115 ( 64.91%) 1324.82
http(c) 6410160 ( 25.06%) 773881583 ( 4.43%) 120.73
squid 921401 ( 3.60%) 718140344 ( 4.11%) 779.40
smtp 748555 ( 2.93%) 179347351 ( 1.03%) 239.59
ftp 32377 ( 0.13%) 18779355 ( 0.11%) 580.02
pop3 18242 ( 0.07%) 10455087 ( 0.06%) 573.13
imap 6216 ( 0.02%) 1693564 ( 0.01%) 272.45
telnet 323 ( 0.00%) 26365 ( 0.00%) 81.63
ssh 332142 ( 1.30%) 408759513 ( 2.34%) 1230.68
dns 3581 ( 0.01%) 265624 ( 0.00%) 74.18
bgp 276 ( 0.00%) 75307 ( 0.00%) 272.85
realaud 1119 ( 0.00%) 93585 ( 0.00%) 83.63
rtsp 269778 ( 1.05%) 45075832 ( 0.26%) 167.08
icecast 38461 ( 0.15%) 19476711 ( 0.11%) 506.40
hotline 9 ( 0.00%) 614 ( 0.00%) 68.22
other 4505172 ( 17.61%) 3392143857 ( 19.40%) 752.94
udp 3080690 ( 12.04%) 488379557 ( 2.79%) 158.53
dns 2206837 ( 8.63%) 276865803 ( 1.58%) 125.46
realaud 3946 ( 0.02%) 1526912 ( 0.01%) 386.95
halflif 23 ( 0.00%) 3210 ( 0.00%) 139.57
starcra 27 ( 0.00%) 4060 ( 0.00%) 150.37
everque 69 ( 0.00%) 11245 ( 0.00%) 162.97
unreal 23 ( 0.00%) 2346 ( 0.00%) 102.00
quake 2912 ( 0.01%) 2548199 ( 0.01%) 875.07
cuseeme 59 ( 0.00%) 4552 ( 0.00%) 77.15
other 866788 ( 3.39%) 207408759 ( 1.19%) 239.28
icmp 518650 ( 2.03%) 48536634 ( 0.28%) 93.58
ipip 324 ( 0.00%) 39824 ( 0.00%) 122.91
ipsec 3116 ( 0.01%) 3219736 ( 0.02%) 1033.29
ip6 1224 ( 0.00%) 288994 ( 0.00%) 236.11
other 82543 ( 0.32%) 15717201 ( 0.09%) 190.41
frag 1070 ( 0.00%) 1006501 ( 0.01%) 940.66
ip6 43000 ( 0.17%) 10049237 ( 0.06%) 233.70
tcp6 8781 ( 0.03%) 5089642 ( 0.03%) 579.62
http(s) 639 ( 0.00%) 527633 ( 0.00%) 825.72
http(c) 1390 ( 0.01%) 176420 ( 0.00%) 126.92
smtp 830 ( 0.00%) 261198 ( 0.00%) 314.70
ftp 8 ( 0.00%) 616 ( 0.00%) 77.00
ssh 185 ( 0.00%) 26534 ( 0.00%) 143.43
bgp 73 ( 0.00%) 8034 ( 0.00%) 110.05
other 5656 ( 0.02%) 4089207 ( 0.02%) 722.99
udp6 27722 ( 0.11%) 4167644 ( 0.02%) 150.34
dns 26337 ( 0.10%) 3950081 ( 0.02%) 149.98
starcra 3 ( 0.00%) 778 ( 0.00%) 259.33
everque 1 ( 0.00%) 127 ( 0.00%) 127.00
other 1381 ( 0.01%) 216658 ( 0.00%) 156.88
icmp6 6467 ( 0.03%) 787871 ( 0.00%) 121.83
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200711211400.dump.gz (651.06 MB)