Traffic Trace Info
DumpFile: 200711301400.dump
FileSize: 1680.88MB
Id: 200711301400
StartTime: Fri Nov 30 14:00:01 2007
EndTime: Fri Nov 30 14:15:01 2007
TotalTime: 899.93 seconds
TotalCapSize: 1316.38MB CapLen: 96 bytes
# of packets: 23887076 (16574.51MB)
AvgRate: 154.49Mbps stddev:18.83M
IP flow (unique src/dst pair) Information
# of flows: 694652 (avg. 34.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.2% 1.5% 1.3% 1.1% 1.0% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 331362
Top 10 bandwidth usage (bytes/total in %):
17.5% 3.9% 3.8% 3.8% 3.7% 3.5% 3.4% 2.6% 2.5% 2.3%
# of IPv6 addresses: 1900
Top 10 bandwidth usage (bytes/total in %):
57.7% 17.5% 17.4% 8.2% 8.2% 6.2% 6.2% 2.5% 2.4% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711301400.pktlen.png)
detailed numbers
[ 32- 63]: 5275107
[ 64- 127]: 5882063
[ 128- 255]: 674529
[ 256- 511]: 576777
[ 512- 1023]: 740530
[ 1024- 2047]: 10738070
Protocol Breakdown
![[protocol breakdown chart]](200711301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23887076 (100.00%) 17379633101 (100.00%) 727.57
ip 23505394 ( 98.40%) 17317794222 ( 99.64%) 736.76
tcp 20105670 ( 84.17%) 16661282453 ( 95.87%) 828.69
http(s) 9728132 ( 40.73%) 12836690243 ( 73.86%) 1319.54
http(c) 5755632 ( 24.10%) 715434956 ( 4.12%) 124.30
squid 746766 ( 3.13%) 618964157 ( 3.56%) 828.86
smtp 770490 ( 3.23%) 208115532 ( 1.20%) 270.11
ftp 70778 ( 0.30%) 10564208 ( 0.06%) 149.26
pop3 17186 ( 0.07%) 11495765 ( 0.07%) 668.90
imap 14582 ( 0.06%) 10708914 ( 0.06%) 734.39
telnet 387 ( 0.00%) 57036 ( 0.00%) 147.38
ssh 149530 ( 0.63%) 87695859 ( 0.50%) 586.48
dns 3429 ( 0.01%) 333709 ( 0.00%) 97.32
bgp 231 ( 0.00%) 57512 ( 0.00%) 248.97
napster 26 ( 0.00%) 4971 ( 0.00%) 191.19
realaud 115 ( 0.00%) 8965 ( 0.00%) 77.96
rtsp 106472 ( 0.45%) 57580506 ( 0.33%) 540.80
icecast 22528 ( 0.09%) 15934903 ( 0.09%) 707.34
other 2719382 ( 11.38%) 2087634977 ( 12.01%) 767.69
udp 2718019 ( 11.38%) 579113509 ( 3.33%) 213.06
dns 1689145 ( 7.07%) 229618452 ( 1.32%) 135.94
realaud 29196 ( 0.12%) 15449130 ( 0.09%) 529.15
halflif 9 ( 0.00%) 1086 ( 0.00%) 120.67
starcra 13 ( 0.00%) 2345 ( 0.00%) 180.38
everque 72 ( 0.00%) 13293 ( 0.00%) 184.62
unreal 7 ( 0.00%) 969 ( 0.00%) 138.43
quake 19 ( 0.00%) 1826 ( 0.00%) 96.11
cuseeme 3 ( 0.00%) 248 ( 0.00%) 82.67
other 999438 ( 4.18%) 333926719 ( 1.92%) 334.11
icmp 559629 ( 2.34%) 51690585 ( 0.30%) 92.37
ipip 312 ( 0.00%) 38028 ( 0.00%) 121.88
ipsec 8185 ( 0.03%) 4475406 ( 0.03%) 546.78
ip6 801 ( 0.00%) 100881 ( 0.00%) 125.94
other 112778 ( 0.47%) 21093360 ( 0.12%) 187.03
frag 11878 ( 0.05%) 10581797 ( 0.06%) 890.87
ip6 381680 ( 1.60%) 61838759 ( 0.36%) 162.02
tcp6 355025 ( 1.49%) 57772212 ( 0.33%) 162.73
http(s) 1400 ( 0.01%) 1425057 ( 0.01%) 1017.90
http(c) 338591 ( 1.42%) 41136460 ( 0.24%) 121.49
squid 41 ( 0.00%) 5475 ( 0.00%) 133.54
smtp 430 ( 0.00%) 126151 ( 0.00%) 293.37
ftp 105 ( 0.00%) 12905 ( 0.00%) 122.90
pop3 35 ( 0.00%) 3226 ( 0.00%) 92.17
ssh 200 ( 0.00%) 33460 ( 0.00%) 167.30
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 63 ( 0.00%) 6549 ( 0.00%) 103.95
icecast 41 ( 0.00%) 3198 ( 0.00%) 78.00
other 14112 ( 0.06%) 15019096 ( 0.09%) 1064.28
udp6 19477 ( 0.08%) 3166760 ( 0.02%) 162.59
dns 18627 ( 0.08%) 3036566 ( 0.02%) 163.02
other 850 ( 0.00%) 130194 ( 0.00%) 153.17
icmp6 7112 ( 0.03%) 862939 ( 0.00%) 121.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 36 ( 0.00%) 32768 ( 0.00%) 910.22
tcpdump file: 200711301400.dump.gz (595.83 MB)