Traffic Trace Info
DumpFile: 200711241400.dump
FileSize: 1303.65MB
Id: 200711241400
StartTime: Sat Nov 24 14:00:01 2007
EndTime: Sat Nov 24 14:15:01 2007
TotalTime: 900.36 seconds
TotalCapSize: 1020.18MB CapLen: 96 bytes
# of packets: 18576982 (11345.62MB)
AvgRate: 105.71Mbps stddev:12.39M
IP flow (unique src/dst pair) Information
# of flows: 567851 (avg. 32.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.4% 1.8% 1.3% 1.3% 1.3% 1.3% 1.2% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 304924
Top 10 bandwidth usage (bytes/total in %):
25.6% 3.5% 3.4% 3.4% 3.3% 3.2% 3.1% 3.0% 2.5% 2.4%
# of IPv6 addresses: 1610
Top 10 bandwidth usage (bytes/total in %):
73.3% 73.2% 3.5% 3.5% 2.6% 2.2% 2.0% 1.5% 1.5% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711241400.pktlen.png)
detailed numbers
[ 32- 63]: 3720887
[ 64- 127]: 5740846
[ 128- 255]: 803878
[ 256- 511]: 388951
[ 512- 1023]: 706782
[ 1024- 2047]: 7215638
Protocol Breakdown
![[protocol breakdown chart]](200711241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18576982 (100.00%) 11896745433 (100.00%) 640.40
ip 18529047 ( 99.74%) 11877418652 ( 99.84%) 641.02
tcp 14837302 ( 79.87%) 11045321464 ( 92.84%) 744.43
http(s) 6252082 ( 33.65%) 8392567984 ( 70.55%) 1342.36
http(c) 3412156 ( 18.37%) 347697258 ( 2.92%) 101.90
squid 795175 ( 4.28%) 573932877 ( 4.82%) 721.77
smtp 685807 ( 3.69%) 151432445 ( 1.27%) 220.81
ftp 81042 ( 0.44%) 57220870 ( 0.48%) 706.06
pop3 13137 ( 0.07%) 8333221 ( 0.07%) 634.33
imap 3372 ( 0.02%) 1159014 ( 0.01%) 343.72
telnet 320 ( 0.00%) 24976 ( 0.00%) 78.05
ssh 1620186 ( 8.72%) 265156519 ( 2.23%) 163.66
dns 5647 ( 0.03%) 2618759 ( 0.02%) 463.74
bgp 325 ( 0.00%) 104998 ( 0.00%) 323.07
napster 19 ( 0.00%) 1746 ( 0.00%) 91.89
realaud 27 ( 0.00%) 3018 ( 0.00%) 111.78
rtsp 226406 ( 1.22%) 14193906 ( 0.12%) 62.69
icecast 12141 ( 0.07%) 15098345 ( 0.13%) 1243.58
other 1729336 ( 9.31%) 1215768088 ( 10.22%) 703.03
udp 3073374 ( 16.54%) 754799765 ( 6.34%) 245.59
dns 1771703 ( 9.54%) 218917619 ( 1.84%) 123.56
realaud 2542 ( 0.01%) 178811 ( 0.00%) 70.34
halflif 22 ( 0.00%) 2597 ( 0.00%) 118.05
starcra 8 ( 0.00%) 1283 ( 0.00%) 160.38
everque 2764 ( 0.01%) 1353632 ( 0.01%) 489.74
unreal 18 ( 0.00%) 2198 ( 0.00%) 122.11
quake 31 ( 0.00%) 2869 ( 0.00%) 92.55
cuseeme 4 ( 0.00%) 329 ( 0.00%) 82.25
other 1296271 ( 6.98%) 534331167 ( 4.49%) 412.21
icmp 512034 ( 2.76%) 48062179 ( 0.40%) 93.87
ipip 321 ( 0.00%) 38774 ( 0.00%) 120.79
ipsec 7383 ( 0.04%) 9164962 ( 0.08%) 1241.36
ip6 795 ( 0.00%) 97222 ( 0.00%) 122.29
other 97838 ( 0.53%) 19934286 ( 0.17%) 203.75
frag 1072 ( 0.01%) 987655 ( 0.01%) 921.32
ip6 47935 ( 0.26%) 19326781 ( 0.16%) 403.19
tcp6 22375 ( 0.12%) 15548110 ( 0.13%) 694.89
http(s) 677 ( 0.00%) 865563 ( 0.01%) 1278.53
http(c) 469 ( 0.00%) 49809 ( 0.00%) 106.20
smtp 560 ( 0.00%) 168457 ( 0.00%) 300.82
ftp 41 ( 0.00%) 3735 ( 0.00%) 91.10
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 31 ( 0.00%) 7862 ( 0.00%) 253.61
bgp 110 ( 0.00%) 13476 ( 0.00%) 122.51
other 20454 ( 0.11%) 14436166 ( 0.12%) 705.79
udp6 19255 ( 0.10%) 2976199 ( 0.03%) 154.57
dns 18252 ( 0.10%) 2826326 ( 0.02%) 154.85
starcra 2 ( 0.00%) 253 ( 0.00%) 126.50
other 1001 ( 0.01%) 149620 ( 0.00%) 149.47
icmp6 6271 ( 0.03%) 794660 ( 0.01%) 126.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3732 ( 0.00%) 933.00
tcpdump file: 200711241400.dump.gz (480.06 MB)