Traffic Trace Info
DumpFile: 200701091200.dump
FileSize: 1399.99MB
Id: 200701091200
StartTime: Tue Jan 9 12:00:01 2007
EndTime: Tue Jan 9 12:15:00 2007
TotalTime: 899.59 seconds
TotalCapSize: 1100.06MB CapLen: 96 bytes
# of packets: 19653955 (14179.21MB)
AvgRate: 132.21Mbps stddev:11.54M
IP flow (unique src/dst pair) Information
# of flows: 521169 (avg. 37.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.5% 2.4% 1.8% 1.7% 1.4% 1.3% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 264522
Top 10 bandwidth usage (bytes/total in %):
20.7% 15.1% 10.4% 6.4% 4.5% 2.5% 2.2% 2.0% 1.8% 1.7%
# of IPv6 addresses: 1424
Top 10 bandwidth usage (bytes/total in %):
54.2% 51.6% 22.5% 22.5% 3.4% 2.8% 2.7% 1.4% 1.4% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701091200.pktlen.png)
detailed numbers
[ 32- 63]: 3860179
[ 64- 127]: 5167641
[ 128- 255]: 436967
[ 256- 511]: 471037
[ 512- 1023]: 447516
[ 1024- 2047]: 9270615
Protocol Breakdown
![[protocol breakdown chart]](200701091200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19653955 (100.00%) 14867982817 (100.00%) 756.49
ip 19571016 ( 99.58%) 14830863865 ( 99.75%) 757.80
tcp 17330507 ( 88.18%) 14463983323 ( 97.28%) 834.60
http(s) 6578084 ( 33.47%) 8725169579 ( 58.68%) 1326.40
http(c) 3783901 ( 19.25%) 532785539 ( 3.58%) 140.80
squid 474775 ( 2.42%) 345755929 ( 2.33%) 728.25
smtp 333988 ( 1.70%) 89737937 ( 0.60%) 268.69
nntp 8365 ( 0.04%) 3956612 ( 0.03%) 473.00
ftp 77303 ( 0.39%) 45101723 ( 0.30%) 583.44
pop3 6460 ( 0.03%) 2252613 ( 0.02%) 348.70
imap 4003 ( 0.02%) 1434041 ( 0.01%) 358.24
telnet 1229 ( 0.01%) 124233 ( 0.00%) 101.08
ssh 21706 ( 0.11%) 9961599 ( 0.07%) 458.93
dns 1155 ( 0.01%) 84597 ( 0.00%) 73.24
bgp 856 ( 0.00%) 110398 ( 0.00%) 128.97
napster 117 ( 0.00%) 12602 ( 0.00%) 107.71
realaud 99 ( 0.00%) 11158 ( 0.00%) 112.71
rtsp 453712 ( 2.31%) 482920823 ( 3.25%) 1064.38
icecast 40082 ( 0.20%) 45391617 ( 0.31%) 1132.47
hotline 4 ( 0.00%) 246 ( 0.00%) 61.50
other 5544653 ( 28.21%) 4179171177 ( 28.11%) 753.73
udp 1812724 ( 9.22%) 309912564 ( 2.08%) 170.97
dns 1488496 ( 7.57%) 183650610 ( 1.24%) 123.38
realaud 14 ( 0.00%) 1525 ( 0.00%) 108.93
halflif 31 ( 0.00%) 3582 ( 0.00%) 115.55
starcra 17 ( 0.00%) 2875 ( 0.00%) 169.12
everque 29 ( 0.00%) 3329 ( 0.00%) 114.79
unreal 17 ( 0.00%) 2306 ( 0.00%) 135.65
quake 16 ( 0.00%) 1330 ( 0.00%) 83.12
cuseeme 4 ( 0.00%) 626 ( 0.00%) 156.50
other 324071 ( 1.65%) 126237492 ( 0.85%) 389.54
icmp 331325 ( 1.69%) 27721690 ( 0.19%) 83.67
ip6 6634 ( 0.03%) 8036374 ( 0.05%) 1211.39
other 89826 ( 0.46%) 21209914 ( 0.14%) 236.12
frag 419 ( 0.00%) 354780 ( 0.00%) 846.73
ip6 82936 ( 0.42%) 37118772 ( 0.25%) 447.56
tcp6 30942 ( 0.16%) 21437817 ( 0.14%) 692.84
http(s) 443 ( 0.00%) 480247 ( 0.00%) 1084.08
http(c) 12034 ( 0.06%) 1153784 ( 0.01%) 95.88
smtp 157 ( 0.00%) 55412 ( 0.00%) 352.94
ftp 24 ( 0.00%) 2294 ( 0.00%) 95.58
pop3 11 ( 0.00%) 1018 ( 0.00%) 92.55
ssh 753 ( 0.00%) 81014 ( 0.00%) 107.59
dns 5 ( 0.00%) 412 ( 0.00%) 82.40
bgp 122 ( 0.00%) 12857 ( 0.00%) 105.39
other 17393 ( 0.09%) 19650779 ( 0.13%) 1129.81
udp6 36001 ( 0.18%) 6028318 ( 0.04%) 167.45
dns 33859 ( 0.17%) 5785197 ( 0.04%) 170.86
other 2142 ( 0.01%) 243121 ( 0.00%) 113.50
icmp6 8370 ( 0.04%) 1664499 ( 0.01%) 198.86
ip6 2183 ( 0.01%) 265021 ( 0.00%) 121.40
ipsec6 3 ( 0.00%) 382 ( 0.00%) 127.33
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5407 ( 0.03%) 7718655 ( 0.05%) 1427.53
tcpdump file: 200701091200.dump.gz (493.21 MB)