Traffic Trace Info
DumpFile: 200701091130.dump
FileSize: 1245.59MB
Id: 200701091130
StartTime: Tue Jan 9 11:30:01 2007
EndTime: Tue Jan 9 11:45:00 2007
TotalTime: 899.27 seconds
TotalCapSize: 975.77MB CapLen: 96 bytes
# of packets: 17680984 (12791.93MB)
AvgRate: 119.32Mbps stddev:10.03M
IP flow (unique src/dst pair) Information
# of flows: 524124 (avg. 33.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.2% 2.0% 1.6% 1.5% 1.5% 1.4% 1.3% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 259395
Top 10 bandwidth usage (bytes/total in %):
18.1% 11.9% 9.2% 6.8% 2.5% 2.0% 2.0% 1.7% 1.6% 1.5%
# of IPv6 addresses: 1346
Top 10 bandwidth usage (bytes/total in %):
59.1% 50.5% 20.5% 20.5% 8.6% 2.1% 1.5% 1.5% 1.4% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701091130.pktlen.png)
detailed numbers
[ 32- 63]: 3831571
[ 64- 127]: 4232243
[ 128- 255]: 432769
[ 256- 511]: 447675
[ 512- 1023]: 415478
[ 1024- 2047]: 8321248
Protocol Breakdown
![[protocol breakdown chart]](200701091130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17680984 (100.00%) 13413315359 (100.00%) 758.63
ip 17576336 ( 99.41%) 13375431170 ( 99.72%) 760.99
tcp 15244392 ( 86.22%) 12926576961 ( 96.37%) 847.96
http(s) 7274142 ( 41.14%) 9787382541 ( 72.97%) 1345.50
http(c) 3994833 ( 22.59%) 513775892 ( 3.83%) 128.61
squid 340649 ( 1.93%) 188794030 ( 1.41%) 554.22
smtp 377535 ( 2.14%) 100446588 ( 0.75%) 266.06
nntp 10585 ( 0.06%) 5157136 ( 0.04%) 487.21
ftp 40608 ( 0.23%) 6672022 ( 0.05%) 164.30
pop3 9514 ( 0.05%) 3970890 ( 0.03%) 417.37
imap 6200 ( 0.04%) 2304625 ( 0.02%) 371.71
telnet 1316 ( 0.01%) 152715 ( 0.00%) 116.04
ssh 27382 ( 0.15%) 8871087 ( 0.07%) 323.98
dns 2402 ( 0.01%) 1185258 ( 0.01%) 493.45
bgp 938 ( 0.01%) 118881 ( 0.00%) 126.74
napster 33 ( 0.00%) 2046 ( 0.00%) 62.00
realaud 257 ( 0.00%) 38058 ( 0.00%) 148.09
rtsp 202079 ( 1.14%) 101747893 ( 0.76%) 503.51
icecast 41958 ( 0.24%) 46718479 ( 0.35%) 1113.46
other 2913939 ( 16.48%) 2159237500 ( 16.10%) 741.00
udp 1827198 ( 10.33%) 393499926 ( 2.93%) 215.36
dns 1382046 ( 7.82%) 170176863 ( 1.27%) 123.13
realaud 5 ( 0.00%) 657 ( 0.00%) 131.40
halflif 22 ( 0.00%) 2309 ( 0.00%) 104.95
starcra 17 ( 0.00%) 3095 ( 0.00%) 182.06
everque 20 ( 0.00%) 3161 ( 0.00%) 158.05
unreal 56 ( 0.00%) 7111 ( 0.00%) 126.98
quake 16 ( 0.00%) 1413 ( 0.00%) 88.31
cuseeme 4 ( 0.00%) 332 ( 0.00%) 83.00
other 444995 ( 2.52%) 223301981 ( 1.66%) 501.81
icmp 397314 ( 2.25%) 32407910 ( 0.24%) 81.57
ip6 6554 ( 0.04%) 7943144 ( 0.06%) 1211.95
other 100878 ( 0.57%) 15003229 ( 0.11%) 148.73
frag 293 ( 0.00%) 234751 ( 0.00%) 801.20
ip6 104645 ( 0.59%) 37884009 ( 0.28%) 362.02
tcp6 55519 ( 0.31%) 23555613 ( 0.18%) 424.28
http(s) 48 ( 0.00%) 47811 ( 0.00%) 996.06
http(c) 36872 ( 0.21%) 3384999 ( 0.03%) 91.80
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 260 ( 0.00%) 132341 ( 0.00%) 509.00
ftp 110 ( 0.00%) 13211 ( 0.00%) 120.10
ssh 1351 ( 0.01%) 149306 ( 0.00%) 110.52
dns 4 ( 0.00%) 485 ( 0.00%) 121.25
bgp 124 ( 0.00%) 12987 ( 0.00%) 104.73
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 16747 ( 0.09%) 19814251 ( 0.15%) 1183.15
udp6 33421 ( 0.19%) 5222562 ( 0.04%) 156.27
dns 31222 ( 0.18%) 4975493 ( 0.04%) 159.36
other 2199 ( 0.01%) 247069 ( 0.00%) 112.36
icmp6 7919 ( 0.04%) 1127884 ( 0.01%) 142.43
ip6 2370 ( 0.01%) 286317 ( 0.00%) 120.81
ipsec6 1 ( 0.00%) 122 ( 0.00%) 122.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5385 ( 0.03%) 7687431 ( 0.06%) 1427.56
tcpdump file: 200701091130.dump.gz (449.08 MB)