Traffic Trace Info
DumpFile: 200711271400.dump
FileSize: 1946.67MB
Id: 200711271400
StartTime: Tue Nov 27 14:00:00 2007
EndTime: Tue Nov 27 14:15:01 2007
TotalTime: 900.79 seconds
TotalCapSize: 1527.68MB CapLen: 96 bytes
# of packets: 27458728 (18063.90MB)
AvgRate: 168.22Mbps stddev:17.82M
IP flow (unique src/dst pair) Information
# of flows: 713820 (avg. 38.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.4% 1.3% 0.8% 0.8% 0.6% 0.6% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 359624
Top 10 bandwidth usage (bytes/total in %):
16.3% 7.7% 7.4% 4.4% 3.7% 2.0% 1.9% 1.7% 1.7% 1.5%
# of IPv6 addresses: 2026
Top 10 bandwidth usage (bytes/total in %):
56.4% 32.0% 32.0% 4.3% 2.6% 1.6% 1.6% 1.3% 1.3% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711271400.pktlen.png)
detailed numbers
[ 32- 63]: 6735224
[ 64- 127]: 6871813
[ 128- 255]: 694714
[ 256- 511]: 705747
[ 512- 1023]: 887118
[ 1024- 2047]: 11564112
Protocol Breakdown
![[protocol breakdown chart]](200711271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27458728 (100.00%) 18941376197 (100.00%) 689.81
ip 27168074 ( 98.94%) 18881251501 ( 99.68%) 694.98
tcp 23808014 ( 86.70%) 18376772814 ( 97.02%) 771.87
http(s) 10799322 ( 39.33%) 14347878737 ( 75.75%) 1328.59
http(c) 7614253 ( 27.73%) 910265725 ( 4.81%) 119.55
squid 856664 ( 3.12%) 660020237 ( 3.48%) 770.45
smtp 706014 ( 2.57%) 165284191 ( 0.87%) 234.11
ftp 199811 ( 0.73%) 136754873 ( 0.72%) 684.42
pop3 18279 ( 0.07%) 9068474 ( 0.05%) 496.11
imap 4332 ( 0.02%) 1060710 ( 0.01%) 244.85
telnet 29 ( 0.00%) 6472 ( 0.00%) 223.17
ssh 63256 ( 0.23%) 34329866 ( 0.18%) 542.71
dns 4931 ( 0.02%) 398321 ( 0.00%) 80.78
bgp 271 ( 0.00%) 85110 ( 0.00%) 314.06
napster 29 ( 0.00%) 3832 ( 0.00%) 132.14
realaud 288 ( 0.00%) 40040 ( 0.00%) 139.03
rtsp 248048 ( 0.90%) 62556953 ( 0.33%) 252.20
icecast 23527 ( 0.09%) 16615142 ( 0.09%) 706.22
other 3266608 ( 11.90%) 2032263011 ( 10.73%) 622.13
udp 2637379 ( 9.60%) 420643132 ( 2.22%) 159.49
dns 2052466 ( 7.47%) 265610920 ( 1.40%) 129.41
realaud 8876 ( 0.03%) 2917771 ( 0.02%) 328.73
halflif 20 ( 0.00%) 1697 ( 0.00%) 84.85
starcra 13 ( 0.00%) 2493 ( 0.00%) 191.77
everque 118 ( 0.00%) 27747 ( 0.00%) 235.14
unreal 20 ( 0.00%) 1842 ( 0.00%) 92.10
quake 31 ( 0.00%) 2573 ( 0.00%) 83.00
cuseeme 8 ( 0.00%) 644 ( 0.00%) 80.50
other 575761 ( 2.10%) 152046913 ( 0.80%) 264.08
icmp 588831 ( 2.14%) 53449975 ( 0.28%) 90.77
ipip 340 ( 0.00%) 40972 ( 0.00%) 120.51
ipsec 3540 ( 0.01%) 2976736 ( 0.02%) 840.89
ip6 1749 ( 0.01%) 423614 ( 0.00%) 242.20
other 128221 ( 0.47%) 26944258 ( 0.14%) 210.14
frag 21457 ( 0.08%) 21508352 ( 0.11%) 1002.39
ip6 290654 ( 1.06%) 60124696 ( 0.32%) 206.86
tcp6 258820 ( 0.94%) 55349020 ( 0.29%) 213.85
http(s) 452 ( 0.00%) 488578 ( 0.00%) 1080.92
http(c) 239886 ( 0.87%) 34174231 ( 0.18%) 142.46
squid 55 ( 0.00%) 5610 ( 0.00%) 102.00
smtp 1918 ( 0.01%) 1064839 ( 0.01%) 555.18
pop3 34 ( 0.00%) 3140 ( 0.00%) 92.35
telnet 128 ( 0.00%) 9574 ( 0.00%) 74.80
ssh 28 ( 0.00%) 7616 ( 0.00%) 272.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 119 ( 0.00%) 14593 ( 0.00%) 122.63
icecast 9 ( 0.00%) 702 ( 0.00%) 78.00
other 16184 ( 0.06%) 19579502 ( 0.10%) 1209.81
udp6 24050 ( 0.09%) 3785329 ( 0.02%) 157.39
dns 23002 ( 0.08%) 3630826 ( 0.02%) 157.85
starcra 5 ( 0.00%) 643 ( 0.00%) 128.60
other 1043 ( 0.00%) 153860 ( 0.00%) 147.52
icmp6 7748 ( 0.03%) 980596 ( 0.01%) 126.56
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5671 ( 0.00%) 945.17
tcpdump file: 200711271400.dump.gz (719.05 MB)