Traffic Trace Info
DumpFile: 200711261400.dump
FileSize: 1685.19MB
Id: 200711261400
StartTime: Mon Nov 26 14:00:01 2007
EndTime: Mon Nov 26 14:15:00 2007
TotalTime: 899.42 seconds
TotalCapSize: 1317.64MB CapLen: 96 bytes
# of packets: 24087050 (15438.76MB)
AvgRate: 143.98Mbps stddev:27.01M
IP flow (unique src/dst pair) Information
# of flows: 660789 (avg. 36.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 2.2% 1.5% 1.3% 1.3% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 321074
Top 10 bandwidth usage (bytes/total in %):
16.4% 4.1% 3.5% 3.2% 3.0% 2.9% 2.8% 2.8% 2.5% 2.5%
# of IPv6 addresses: 2468
Top 10 bandwidth usage (bytes/total in %):
8.5% 6.9% 6.5% 6.2% 5.6% 4.9% 4.8% 4.6% 4.6% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711261400.pktlen.png)
detailed numbers
[ 32- 63]: 5978971
[ 64- 127]: 6029898
[ 128- 255]: 748509
[ 256- 511]: 571722
[ 512- 1023]: 908166
[ 1024- 2047]: 9849784
Protocol Breakdown
![[protocol breakdown chart]](200711261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24087050 (100.00%) 16188711498 (100.00%) 672.09
ip 24054793 ( 99.87%) 16183361327 ( 99.97%) 672.77
tcp 20281967 ( 84.20%) 15321112244 ( 94.64%) 755.41
http(s) 9341685 ( 38.78%) 12382011139 ( 76.49%) 1325.46
http(c) 6251561 ( 25.95%) 753407390 ( 4.65%) 120.52
squid 740753 ( 3.08%) 468503595 ( 2.89%) 632.47
smtp 687436 ( 2.85%) 167564924 ( 1.04%) 243.75
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 67707 ( 0.28%) 32473941 ( 0.20%) 479.62
pop3 22717 ( 0.09%) 14910882 ( 0.09%) 656.38
imap 8914 ( 0.04%) 2993114 ( 0.02%) 335.78
telnet 74 ( 0.00%) 4687 ( 0.00%) 63.34
ssh 401377 ( 1.67%) 93191181 ( 0.58%) 232.18
dns 3567 ( 0.01%) 255953 ( 0.00%) 71.76
bgp 250 ( 0.00%) 60867 ( 0.00%) 243.47
napster 186 ( 0.00%) 14537 ( 0.00%) 78.16
realaud 110 ( 0.00%) 13457 ( 0.00%) 122.34
rtsp 342006 ( 1.42%) 107022070 ( 0.66%) 312.92
icecast 27623 ( 0.11%) 16015085 ( 0.10%) 579.77
other 2385862 ( 9.91%) 1282661078 ( 7.92%) 537.61
udp 3048909 ( 12.66%) 777607330 ( 4.80%) 255.04
dns 1883379 ( 7.82%) 242578569 ( 1.50%) 128.80
realaud 6961 ( 0.03%) 2716704 ( 0.02%) 390.27
halflif 22 ( 0.00%) 2841 ( 0.00%) 129.14
starcra 29 ( 0.00%) 4433 ( 0.00%) 152.86
everque 103 ( 0.00%) 17060 ( 0.00%) 165.63
unreal 17 ( 0.00%) 1959 ( 0.00%) 115.24
quake 34 ( 0.00%) 2922 ( 0.00%) 85.94
cuseeme 5 ( 0.00%) 450 ( 0.00%) 90.00
other 1158350 ( 4.81%) 532281146 ( 3.29%) 459.52
icmp 554704 ( 2.30%) 51190104 ( 0.32%) 92.28
ipip 344 ( 0.00%) 40676 ( 0.00%) 118.24
ipsec 2871 ( 0.01%) 2455298 ( 0.02%) 855.21
ip6 905 ( 0.00%) 117022 ( 0.00%) 129.31
other 165093 ( 0.69%) 30838653 ( 0.19%) 186.80
frag 1009 ( 0.00%) 872977 ( 0.01%) 865.19
ip6 32257 ( 0.13%) 5350171 ( 0.03%) 165.86
tcp6 5225 ( 0.02%) 1193160 ( 0.01%) 228.36
http(s) 439 ( 0.00%) 517596 ( 0.00%) 1179.03
http(c) 712 ( 0.00%) 70998 ( 0.00%) 99.72
smtp 865 ( 0.00%) 281364 ( 0.00%) 325.28
ftp 13 ( 0.00%) 1441 ( 0.00%) 110.85
pop3 46 ( 0.00%) 4188 ( 0.00%) 91.04
ssh 30 ( 0.00%) 7788 ( 0.00%) 259.60
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 103 ( 0.00%) 12182 ( 0.00%) 118.27
other 3010 ( 0.01%) 296968 ( 0.00%) 98.66
udp6 19250 ( 0.08%) 3234136 ( 0.02%) 168.01
dns 17225 ( 0.07%) 2814447 ( 0.02%) 163.39
other 2025 ( 0.01%) 419689 ( 0.00%) 207.25
icmp6 7734 ( 0.03%) 903334 ( 0.01%) 116.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 18 ( 0.00%) 15461 ( 0.00%) 858.94
tcpdump file: 200711261400.dump.gz (608.75 MB)