Traffic Trace Info
DumpFile: 200711221400.dump
FileSize: 1832.30MB
Id: 200711221400
StartTime: Thu Nov 22 14:00:01 2007
EndTime: Thu Nov 22 14:15:00 2007
TotalTime: 899.29 seconds
TotalCapSize: 1434.57MB CapLen: 96 bytes
# of packets: 26064822 (17526.93MB)
AvgRate: 163.52Mbps stddev:29.87M
IP flow (unique src/dst pair) Information
# of flows: 678109 (avg. 38.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 1.7% 1.4% 1.3% 1.2% 1.2% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 342795
Top 10 bandwidth usage (bytes/total in %):
16.2% 6.2% 4.6% 3.9% 3.9% 3.0% 3.0% 2.9% 2.9% 2.4%
# of IPv6 addresses: 1691
Top 10 bandwidth usage (bytes/total in %):
35.4% 35.4% 6.3% 6.3% 5.8% 4.1% 4.0% 3.8% 3.7% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711221400.pktlen.png)
detailed numbers
[ 32- 63]: 5582024
[ 64- 127]: 6980973
[ 128- 255]: 809692
[ 256- 511]: 580373
[ 512- 1023]: 795896
[ 1024- 2047]: 11315864
Protocol Breakdown
![[protocol breakdown chart]](200711221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26064822 (100.00%) 18378320503 (100.00%) 705.10
ip 26022571 ( 99.84%) 18367615402 ( 99.94%) 705.83
tcp 21203247 ( 81.35%) 17079411848 ( 92.93%) 805.51
http(s) 9300412 ( 35.68%) 12401729433 ( 67.48%) 1333.46
http(c) 6018536 ( 23.09%) 669375597 ( 3.64%) 111.22
squid 964064 ( 3.70%) 662477493 ( 3.60%) 687.17
smtp 780051 ( 2.99%) 214701710 ( 1.17%) 275.24
ftp 49439 ( 0.19%) 7411713 ( 0.04%) 149.92
pop3 21172 ( 0.08%) 13079624 ( 0.07%) 617.78
imap 7639 ( 0.03%) 5689058 ( 0.03%) 744.74
telnet 751 ( 0.00%) 54541 ( 0.00%) 72.62
ssh 181316 ( 0.70%) 49904561 ( 0.27%) 275.24
dns 3512 ( 0.01%) 247350 ( 0.00%) 70.43
bgp 268 ( 0.00%) 84467 ( 0.00%) 315.18
napster 132 ( 0.00%) 8311 ( 0.00%) 62.96
realaud 3 ( 0.00%) 182 ( 0.00%) 60.67
rtsp 303304 ( 1.16%) 87526641 ( 0.48%) 288.58
icecast 14151 ( 0.05%) 8109248 ( 0.04%) 573.05
other 3558371 ( 13.65%) 2959004359 ( 16.10%) 831.56
udp 4009916 ( 15.38%) 1199754557 ( 6.53%) 299.20
dns 2204813 ( 8.46%) 275954559 ( 1.50%) 125.16
realaud 117 ( 0.00%) 8023 ( 0.00%) 68.57
halflif 21 ( 0.00%) 1830 ( 0.00%) 87.14
starcra 9405 ( 0.04%) 630243 ( 0.00%) 67.01
everque 96 ( 0.00%) 16895 ( 0.00%) 175.99
unreal 4 ( 0.00%) 295 ( 0.00%) 73.75
quake 31 ( 0.00%) 3190 ( 0.00%) 102.90
cuseeme 7 ( 0.00%) 560 ( 0.00%) 80.00
other 1795414 ( 6.89%) 923134583 ( 5.02%) 514.16
icmp 669409 ( 2.57%) 62166120 ( 0.34%) 92.87
ipip 352 ( 0.00%) 43344 ( 0.00%) 123.14
ipsec 1277 ( 0.00%) 1078342 ( 0.01%) 844.43
ip6 985 ( 0.00%) 129605 ( 0.00%) 131.58
other 137385 ( 0.53%) 25031586 ( 0.14%) 182.20
frag 1019 ( 0.00%) 863866 ( 0.00%) 847.76
ip6 42251 ( 0.16%) 10705101 ( 0.06%) 253.37
tcp6 7483 ( 0.03%) 5696777 ( 0.03%) 761.30
http(s) 999 ( 0.00%) 1144527 ( 0.01%) 1145.67
http(c) 755 ( 0.00%) 86319 ( 0.00%) 114.33
smtp 560 ( 0.00%) 195001 ( 0.00%) 348.22
ssh 13 ( 0.00%) 3722 ( 0.00%) 286.31
bgp 79 ( 0.00%) 9434 ( 0.00%) 119.42
other 5077 ( 0.02%) 4257774 ( 0.02%) 838.64
udp6 28493 ( 0.11%) 4207770 ( 0.02%) 147.68
dns 27589 ( 0.11%) 4058984 ( 0.02%) 147.12
halflif 1 ( 0.00%) 100 ( 0.00%) 100.00
starcra 10 ( 0.00%) 1265 ( 0.00%) 126.50
other 893 ( 0.00%) 147421 ( 0.00%) 165.09
icmp6 6236 ( 0.02%) 788833 ( 0.00%) 126.50
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 8 ( 0.00%) 7505 ( 0.00%) 938.12
tcpdump file: 200711221400.dump.gz (655.20 MB)