Traffic Trace Info
DumpFile: 200711281400.dump
FileSize: 2145.34MB
Id: 200711281400
StartTime: Wed Nov 28 14:00:01 2007
EndTime: Wed Nov 28 14:15:01 2007
TotalTime: 899.89 seconds
TotalCapSize: 1683.21MB CapLen: 96 bytes
# of packets: 30285155 (20006.28MB)
AvgRate: 186.53Mbps stddev:32.43M
IP flow (unique src/dst pair) Information
# of flows: 628270 (avg. 48.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.2% 1.2% 1.1% 1.1% 0.8% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 318111
Top 10 bandwidth usage (bytes/total in %):
16.0% 5.5% 5.3% 3.9% 3.8% 3.7% 3.6% 3.1% 2.2% 2.1%
# of IPv6 addresses: 2438
Top 10 bandwidth usage (bytes/total in %):
76.9% 8.1% 8.1% 4.1% 3.9% 3.0% 2.5% 2.3% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711281400.pktlen.png)
detailed numbers
[ 32- 63]: 7138923
[ 64- 127]: 7689577
[ 128- 255]: 1044966
[ 256- 511]: 683648
[ 512- 1023]: 954131
[ 1024- 2047]: 12773910
Protocol Breakdown
![[protocol breakdown chart]](200711281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30285155 (100.00%) 20978105575 (100.00%) 692.69
ip 29970464 ( 98.96%) 20931260340 ( 99.78%) 698.40
tcp 26614870 ( 87.88%) 20302066926 ( 96.78%) 762.81
http(s) 11058398 ( 36.51%) 15084502185 ( 71.91%) 1364.08
http(c) 7914176 ( 26.13%) 939153043 ( 4.48%) 118.67
squid 451006 ( 1.49%) 225185304 ( 1.07%) 499.30
smtp 711872 ( 2.35%) 184168768 ( 0.88%) 258.71
nntp 4 ( 0.00%) 296 ( 0.00%) 74.00
ftp 155286 ( 0.51%) 75685759 ( 0.36%) 487.40
pop3 22080 ( 0.07%) 14636344 ( 0.07%) 662.88
imap 93002 ( 0.31%) 97769722 ( 0.47%) 1051.26
telnet 275 ( 0.00%) 17532 ( 0.00%) 63.75
ssh 1480843 ( 4.89%) 300097597 ( 1.43%) 202.65
dns 4261 ( 0.01%) 365615 ( 0.00%) 85.80
bgp 446 ( 0.00%) 84269 ( 0.00%) 188.94
napster 517 ( 0.00%) 354135 ( 0.00%) 684.98
realaud 4647 ( 0.02%) 2653025 ( 0.01%) 570.91
rtsp 244671 ( 0.81%) 128628568 ( 0.61%) 525.72
icecast 20959 ( 0.07%) 15809623 ( 0.08%) 754.31
hotline 8 ( 0.00%) 723 ( 0.00%) 90.38
other 4452416 ( 14.70%) 3232954238 ( 15.41%) 726.11
udp 2712030 ( 8.95%) 554439089 ( 2.64%) 204.44
dns 1800967 ( 5.95%) 242720041 ( 1.16%) 134.77
realaud 15675 ( 0.05%) 8153294 ( 0.04%) 520.15
halflif 21 ( 0.00%) 2152 ( 0.00%) 102.48
starcra 21 ( 0.00%) 3280 ( 0.00%) 156.19
everque 96 ( 0.00%) 13903 ( 0.00%) 144.82
unreal 21 ( 0.00%) 2946 ( 0.00%) 140.29
quake 11 ( 0.00%) 886 ( 0.00%) 80.55
cuseeme 7 ( 0.00%) 614 ( 0.00%) 87.71
other 895161 ( 2.96%) 303524794 ( 1.45%) 339.07
icmp 465489 ( 1.54%) 45019793 ( 0.21%) 96.72
ipip 345 ( 0.00%) 42670 ( 0.00%) 123.68
ipsec 2236 ( 0.01%) 2061480 ( 0.01%) 921.95
ip6 1057 ( 0.00%) 158241 ( 0.00%) 149.71
other 174437 ( 0.58%) 27472141 ( 0.13%) 157.49
frag 11712 ( 0.04%) 10899681 ( 0.05%) 930.64
ip6 314689 ( 1.04%) 46845115 ( 0.22%) 148.86
tcp6 283656 ( 0.94%) 42307440 ( 0.20%) 149.15
http(s) 1212 ( 0.00%) 1252543 ( 0.01%) 1033.45
http(c) 274084 ( 0.91%) 36258687 ( 0.17%) 132.29
squid 13 ( 0.00%) 1406 ( 0.00%) 108.15
smtp 1245 ( 0.00%) 512700 ( 0.00%) 411.81
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 820 ( 0.00%) 129460 ( 0.00%) 157.88
bgp 105 ( 0.00%) 12499 ( 0.00%) 119.04
other 6144 ( 0.02%) 4137103 ( 0.02%) 673.36
udp6 23213 ( 0.08%) 3589113 ( 0.02%) 154.62
dns 21353 ( 0.07%) 3270934 ( 0.02%) 153.18
starcra 3 ( 0.00%) 435 ( 0.00%) 145.00
other 1857 ( 0.01%) 317744 ( 0.00%) 171.11
icmp6 7735 ( 0.03%) 893409 ( 0.00%) 115.50
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 55 ( 0.00%) 51073 ( 0.00%) 928.60
tcpdump file: 200711281400.dump.gz (788.21 MB)