Traffic Trace Info
DumpFile: 200711231400.dump
FileSize: 1296.12MB
Id: 200711231400
StartTime: Fri Nov 23 14:00:00 2007
EndTime: Fri Nov 23 14:15:01 2007
TotalTime: 900.65 seconds
TotalCapSize: 1011.58MB CapLen: 96 bytes
# of packets: 18647627 (12712.04MB)
AvgRate: 118.41Mbps stddev:17.10M
IP flow (unique src/dst pair) Information
# of flows: 630903 (avg. 29.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 1.9% 1.8% 1.8% 1.6% 1.4% 1.3% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 328888
Top 10 bandwidth usage (bytes/total in %):
23.6% 7.9% 6.8% 4.0% 4.0% 3.6% 3.0% 2.8% 2.2% 1.9%
# of IPv6 addresses: 1952
Top 10 bandwidth usage (bytes/total in %):
43.1% 43.1% 4.5% 4.4% 3.9% 3.6% 3.4% 3.3% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711231400.pktlen.png)
detailed numbers
[ 32- 63]: 4160930
[ 64- 127]: 4537212
[ 128- 255]: 718446
[ 256- 511]: 437077
[ 512- 1023]: 547478
[ 1024- 2047]: 8246484
Protocol Breakdown
![[protocol breakdown chart]](200711231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18647627 (100.00%) 13329536580 (100.00%) 714.81
ip 18611040 ( 99.80%) 13320714770 ( 99.93%) 715.74
tcp 14725642 ( 78.97%) 12515518147 ( 93.89%) 849.91
http(s) 6982687 ( 37.45%) 9311079867 ( 69.85%) 1333.45
http(c) 2963940 ( 15.89%) 321369773 ( 2.41%) 108.43
squid 850452 ( 4.56%) 587096220 ( 4.40%) 690.33
smtp 662194 ( 3.55%) 129733973 ( 0.97%) 195.92
ftp 31260 ( 0.17%) 28357970 ( 0.21%) 907.16
pop3 14506 ( 0.08%) 11499671 ( 0.09%) 792.75
imap 3021 ( 0.02%) 930502 ( 0.01%) 308.01
telnet 59 ( 0.00%) 25442 ( 0.00%) 431.22
ssh 95233 ( 0.51%) 39629334 ( 0.30%) 416.13
dns 3451 ( 0.02%) 245291 ( 0.00%) 71.08
bgp 249 ( 0.00%) 66305 ( 0.00%) 266.29
realaud 56 ( 0.00%) 8317 ( 0.00%) 148.52
rtsp 153301 ( 0.82%) 39700984 ( 0.30%) 258.97
icecast 1167 ( 0.01%) 127921 ( 0.00%) 109.62
other 2963947 ( 15.89%) 2045639437 ( 15.35%) 690.17
udp 2943709 ( 15.79%) 703285943 ( 5.28%) 238.91
dns 1876319 ( 10.06%) 233167428 ( 1.75%) 124.27
realaud 59983 ( 0.32%) 28454332 ( 0.21%) 474.37
halflif 29 ( 0.00%) 3087 ( 0.00%) 106.45
starcra 11038 ( 0.06%) 8138119 ( 0.06%) 737.28
everque 101 ( 0.00%) 13775 ( 0.00%) 136.39
unreal 16 ( 0.00%) 1968 ( 0.00%) 123.00
quake 26 ( 0.00%) 3031 ( 0.00%) 116.58
cuseeme 8 ( 0.00%) 782 ( 0.00%) 97.75
other 996180 ( 5.34%) 433500550 ( 3.25%) 435.16
icmp 776613 ( 4.16%) 67680496 ( 0.51%) 87.15
ipip 390 ( 0.00%) 45380 ( 0.00%) 116.36
ipsec 1473 ( 0.01%) 1665366 ( 0.01%) 1130.59
ip6 978 ( 0.01%) 132202 ( 0.00%) 135.18
other 162235 ( 0.87%) 32387236 ( 0.24%) 199.63
frag 811 ( 0.00%) 657472 ( 0.00%) 810.69
ip6 36587 ( 0.20%) 8821810 ( 0.07%) 241.12
tcp6 6785 ( 0.04%) 4403347 ( 0.03%) 648.98
http(s) 150 ( 0.00%) 117954 ( 0.00%) 786.36
http(c) 173 ( 0.00%) 19887 ( 0.00%) 114.95
smtp 361 ( 0.00%) 118095 ( 0.00%) 327.13
ftp 48 ( 0.00%) 4945 ( 0.00%) 103.02
pop3 35 ( 0.00%) 3258 ( 0.00%) 93.09
ssh 31 ( 0.00%) 7862 ( 0.00%) 253.61
bgp 74 ( 0.00%) 8271 ( 0.00%) 111.77
other 5913 ( 0.03%) 4123075 ( 0.03%) 697.29
udp6 22046 ( 0.12%) 3467415 ( 0.03%) 157.28
dns 20538 ( 0.11%) 3167826 ( 0.02%) 154.24
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 91 ( 0.00%) 91.00
other 1506 ( 0.01%) 299390 ( 0.00%) 198.80
icmp6 7702 ( 0.04%) 935405 ( 0.01%) 121.45
ip6 14 ( 0.00%) 2352 ( 0.00%) 168.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 9211 ( 0.00%) 921.10
tcpdump file: 200711231400.dump.gz (472.56 MB)