Traffic Trace Info
DumpFile: 200711251400.dump
FileSize: 1162.06MB
Id: 200711251400
StartTime: Sun Nov 25 14:00:00 2007
EndTime: Sun Nov 25 14:15:01 2007
TotalTime: 900.12 seconds
TotalCapSize: 903.04MB CapLen: 96 bytes
# of packets: 16975085 (11279.51MB)
AvgRate: 105.12Mbps stddev:24.83M
IP flow (unique src/dst pair) Information
# of flows: 521975 (avg. 32.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.1% 1.6% 1.4% 1.0% 0.9% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 277061
Top 10 bandwidth usage (bytes/total in %):
13.3% 12.4% 8.0% 7.3% 3.9% 3.8% 3.8% 2.9% 2.9% 2.1%
# of IPv6 addresses: 2194
Top 10 bandwidth usage (bytes/total in %):
44.4% 44.4% 4.4% 3.8% 3.7% 3.7% 3.5% 3.4% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711251400.pktlen.png)
detailed numbers
[ 32- 63]: 3775429
[ 64- 127]: 4246659
[ 128- 255]: 612216
[ 256- 511]: 387645
[ 512- 1023]: 774553
[ 1024- 2047]: 7178583
Protocol Breakdown
![[protocol breakdown chart]](200711251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16975085 (100.00%) 11827422082 (100.00%) 696.75
ip 16943496 ( 99.81%) 11818905039 ( 99.93%) 697.55
tcp 12854600 ( 75.73%) 10309957480 ( 87.17%) 802.04
http(s) 5547501 ( 32.68%) 7508119029 ( 63.48%) 1353.42
http(c) 3102030 ( 18.27%) 312094469 ( 2.64%) 100.61
squid 772205 ( 4.55%) 561376819 ( 4.75%) 726.98
smtp 517121 ( 3.05%) 87080736 ( 0.74%) 168.40
ftp 31730 ( 0.19%) 2846756 ( 0.02%) 89.72
pop3 10588 ( 0.06%) 7570249 ( 0.06%) 714.98
imap 2399 ( 0.01%) 582232 ( 0.00%) 242.70
telnet 848 ( 0.00%) 54180 ( 0.00%) 63.89
ssh 108039 ( 0.64%) 39297876 ( 0.33%) 363.74
dns 2956 ( 0.02%) 261161 ( 0.00%) 88.35
bgp 269 ( 0.00%) 61812 ( 0.00%) 229.78
napster 2 ( 0.00%) 122 ( 0.00%) 61.00
realaud 75 ( 0.00%) 9190 ( 0.00%) 122.53
rtsp 159803 ( 0.94%) 74937784 ( 0.63%) 468.94
icecast 4588 ( 0.03%) 3308835 ( 0.03%) 721.19
hotline 10 ( 0.00%) 607 ( 0.00%) 60.70
other 2594326 ( 15.28%) 1712349023 ( 14.48%) 660.04
udp 3565260 ( 21.00%) 1450637188 ( 12.27%) 406.88
dns 1601870 ( 9.44%) 202918710 ( 1.72%) 126.68
realaud 572 ( 0.00%) 35796 ( 0.00%) 62.58
halflif 20 ( 0.00%) 2270 ( 0.00%) 113.50
starcra 4 ( 0.00%) 707 ( 0.00%) 176.75
everque 64 ( 0.00%) 12306 ( 0.00%) 192.28
unreal 23 ( 0.00%) 3266 ( 0.00%) 142.00
quake 30 ( 0.00%) 2513 ( 0.00%) 83.77
cuseeme 8 ( 0.00%) 893 ( 0.00%) 111.62
other 1962611 ( 11.56%) 1247587072 ( 10.55%) 635.68
icmp 473707 ( 2.79%) 44718567 ( 0.38%) 94.40
ipip 474 ( 0.00%) 70800 ( 0.00%) 149.37
ipsec 1789 ( 0.01%) 1903422 ( 0.02%) 1063.96
ip6 980 ( 0.01%) 133202 ( 0.00%) 135.92
other 46686 ( 0.28%) 11484380 ( 0.10%) 245.99
frag 1290 ( 0.01%) 1168171 ( 0.01%) 905.56
ip6 31589 ( 0.19%) 8517043 ( 0.07%) 269.62
tcp6 6916 ( 0.04%) 4592028 ( 0.04%) 663.97
http(s) 278 ( 0.00%) 240662 ( 0.00%) 865.69
http(c) 311 ( 0.00%) 35913 ( 0.00%) 115.48
smtp 658 ( 0.00%) 219726 ( 0.00%) 333.93
pop3 35 ( 0.00%) 3258 ( 0.00%) 93.09
ssh 28 ( 0.00%) 7616 ( 0.00%) 272.00
bgp 111 ( 0.00%) 13495 ( 0.00%) 121.58
other 5495 ( 0.03%) 4071358 ( 0.03%) 740.92
udp6 17766 ( 0.10%) 3073643 ( 0.03%) 173.01
dns 15793 ( 0.09%) 2535630 ( 0.02%) 160.55
everque 2 ( 0.00%) 255 ( 0.00%) 127.50
other 1971 ( 0.01%) 537758 ( 0.00%) 272.84
icmp6 6852 ( 0.04%) 825136 ( 0.01%) 120.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 25 ( 0.00%) 22156 ( 0.00%) 886.24
tcpdump file: 200711251400.dump.gz (415.74 MB)