Traffic Trace Info
DumpFile: 200711151400.dump
FileSize: 2171.72MB
Id: 200711151400
StartTime: Thu Nov 15 14:00:01 2007
EndTime: Thu Nov 15 14:15:01 2007
TotalTime: 900.04 seconds
TotalCapSize: 1700.46MB CapLen: 96 bytes
# of packets: 30883940 (21249.15MB)
AvgRate: 198.05Mbps stddev:29.96M
IP flow (unique src/dst pair) Information
# of flows: 720020 (avg. 42.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.1% 1.9% 1.8% 1.7% 1.2% 1.1% 1.1% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 380751
Top 10 bandwidth usage (bytes/total in %):
13.4% 8.1% 8.1% 3.2% 2.7% 2.5% 2.5% 2.2% 2.0% 2.0%
# of IPv6 addresses: 1951
Top 10 bandwidth usage (bytes/total in %):
45.6% 45.5% 18.1% 18.1% 8.0% 3.4% 3.2% 3.2% 2.1% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711151400.pktlen.png)
detailed numbers
[ 32- 63]: 7240992
[ 64- 127]: 7462399
[ 128- 255]: 873437
[ 256- 511]: 668924
[ 512- 1023]: 874947
[ 1024- 2047]: 13763241
Protocol Breakdown
![[protocol breakdown chart]](200711151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30883940 (100.00%) 22281353526 (100.00%) 721.45
ip 30731988 ( 99.51%) 22260503038 ( 99.91%) 724.34
tcp 26313712 ( 85.20%) 19802949723 ( 88.88%) 752.57
http(s) 11677824 ( 37.81%) 15905054356 ( 71.38%) 1361.99
http(c) 8341515 ( 27.01%) 997554741 ( 4.48%) 119.59
squid 913244 ( 2.96%) 768495509 ( 3.45%) 841.50
smtp 802280 ( 2.60%) 217588584 ( 0.98%) 271.21
nntp 73 ( 0.00%) 6475 ( 0.00%) 88.70
ftp 351187 ( 1.14%) 34348712 ( 0.15%) 97.81
pop3 18246 ( 0.06%) 9015956 ( 0.04%) 494.13
imap 24783 ( 0.08%) 2838006 ( 0.01%) 114.51
telnet 779 ( 0.00%) 148132 ( 0.00%) 190.16
ssh 978170 ( 3.17%) 388560437 ( 1.74%) 397.23
dns 3467 ( 0.01%) 289769 ( 0.00%) 83.58
bgp 267 ( 0.00%) 74033 ( 0.00%) 277.28
napster 15 ( 0.00%) 1334 ( 0.00%) 88.93
realaud 15269 ( 0.05%) 13360420 ( 0.06%) 875.00
rtsp 486350 ( 1.57%) 119243031 ( 0.54%) 245.18
icecast 776 ( 0.00%) 64889 ( 0.00%) 83.62
hotline 8 ( 0.00%) 858 ( 0.00%) 107.25
other 2699458 ( 8.74%) 1346304421 ( 6.04%) 498.73
udp 3942984 ( 12.77%) 2403119991 ( 10.79%) 609.47
dns 1825454 ( 5.91%) 259914664 ( 1.17%) 142.38
rip 21 ( 0.00%) 30735 ( 0.00%) 1463.57
realaud 7354 ( 0.02%) 1932077 ( 0.01%) 262.72
halflif 18 ( 0.00%) 2579 ( 0.00%) 143.28
starcra 6042 ( 0.02%) 522217 ( 0.00%) 86.43
everque 582 ( 0.00%) 421379 ( 0.00%) 724.02
unreal 97 ( 0.00%) 124312 ( 0.00%) 1281.57
quake 21 ( 0.00%) 3077 ( 0.00%) 146.52
cuseeme 87 ( 0.00%) 123466 ( 0.00%) 1419.15
other 2103105 ( 6.81%) 2139878631 ( 9.60%) 1017.49
icmp 453182 ( 1.47%) 43164081 ( 0.19%) 95.25
ipip 375 ( 0.00%) 47582 ( 0.00%) 126.89
ipsec 8053 ( 0.03%) 8817118 ( 0.04%) 1094.89
ip6 962 ( 0.00%) 155132 ( 0.00%) 161.26
other 12720 ( 0.04%) 2249411 ( 0.01%) 176.84
frag 1246391 ( 4.04%) 1818208298 ( 8.16%) 1458.78
ip6 151952 ( 0.49%) 20850488 ( 0.09%) 137.22
tcp6 120711 ( 0.39%) 16209087 ( 0.07%) 134.28
http(s) 2680 ( 0.01%) 2162190 ( 0.01%) 806.79
http(c) 562 ( 0.00%) 46160 ( 0.00%) 82.14
smtp 1172 ( 0.00%) 371300 ( 0.00%) 316.81
ftp 94 ( 0.00%) 9553 ( 0.00%) 101.63
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 29 ( 0.00%) 7702 ( 0.00%) 265.59
bgp 92 ( 0.00%) 12171 ( 0.00%) 132.29
other 116049 ( 0.38%) 13596969 ( 0.06%) 117.17
udp6 24237 ( 0.08%) 3749518 ( 0.02%) 154.70
dns 22859 ( 0.07%) 3547118 ( 0.02%) 155.17
everque 1 ( 0.00%) 142 ( 0.00%) 142.00
other 1377 ( 0.00%) 202258 ( 0.00%) 146.88
icmp6 6954 ( 0.02%) 866441 ( 0.00%) 124.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 20 ( 0.00%) 21362 ( 0.00%) 1068.10
tcpdump file: 200711151400.dump.gz (766.67 MB)