Traffic Trace Info
DumpFile: 200701091215.dump
FileSize: 1210.50MB
Id: 200701091215
StartTime: Tue Jan 9 12:15:00 2007
EndTime: Tue Jan 9 12:30:00 2007
TotalTime: 899.77 seconds
TotalCapSize: 947.89MB CapLen: 96 bytes
# of packets: 17208486 (11912.85MB)
AvgRate: 111.07Mbps stddev:14.82M
IP flow (unique src/dst pair) Information
# of flows: 482547 (avg. 35.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 2.8% 2.7% 2.1% 1.9% 1.7% 1.6% 1.4% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 258270
Top 10 bandwidth usage (bytes/total in %):
13.3% 11.3% 5.5% 5.3% 4.7% 2.9% 2.8% 2.8% 2.6% 2.2%
# of IPv6 addresses: 1348
Top 10 bandwidth usage (bytes/total in %):
54.0% 53.9% 23.4% 23.4% 2.8% 2.5% 1.6% 1.5% 1.5% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701091215.pktlen.png)
detailed numbers
[ 32- 63]: 3960177
[ 64- 127]: 4211279
[ 128- 255]: 455892
[ 256- 511]: 461066
[ 512- 1023]: 444591
[ 1024- 2047]: 7675481
Protocol Breakdown
![[protocol breakdown chart]](200701091215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17208486 (100.00%) 12491525296 (100.00%) 725.89
ip 17142643 ( 99.62%) 12457993877 ( 99.73%) 726.73
tcp 14954238 ( 86.90%) 12072159518 ( 96.64%) 807.27
http(s) 6264643 ( 36.40%) 8256449676 ( 66.10%) 1317.94
http(c) 3766567 ( 21.89%) 510733749 ( 4.09%) 135.60
squid 450903 ( 2.62%) 307479730 ( 2.46%) 681.92
smtp 309606 ( 1.80%) 71585813 ( 0.57%) 231.22
nntp 8219 ( 0.05%) 3809287 ( 0.03%) 463.47
ftp 58051 ( 0.34%) 23686494 ( 0.19%) 408.03
pop3 7534 ( 0.04%) 3302953 ( 0.03%) 438.41
imap 3850 ( 0.02%) 1416512 ( 0.01%) 367.93
telnet 1086 ( 0.01%) 98858 ( 0.00%) 91.03
ssh 12807 ( 0.07%) 8277829 ( 0.07%) 646.35
dns 7341 ( 0.04%) 8527087 ( 0.07%) 1161.57
bgp 1035 ( 0.01%) 135068 ( 0.00%) 130.50
napster 75 ( 0.00%) 4914 ( 0.00%) 65.52
realaud 67 ( 0.00%) 4934 ( 0.00%) 73.64
rtsp 371865 ( 2.16%) 374068677 ( 2.99%) 1005.93
icecast 40048 ( 0.23%) 45446478 ( 0.36%) 1134.80
hotline 5 ( 0.00%) 427 ( 0.00%) 85.40
other 3650515 ( 21.21%) 2457129772 ( 19.67%) 673.09
udp 1779262 ( 10.34%) 327299617 ( 2.62%) 183.95
dns 1400150 ( 8.14%) 177256409 ( 1.42%) 126.60
realaud 9 ( 0.00%) 1321 ( 0.00%) 146.78
halflif 18 ( 0.00%) 2167 ( 0.00%) 120.39
starcra 9 ( 0.00%) 1586 ( 0.00%) 176.22
everque 40 ( 0.00%) 5504 ( 0.00%) 137.60
unreal 19 ( 0.00%) 3302 ( 0.00%) 173.79
quake 17 ( 0.00%) 1672 ( 0.00%) 98.35
cuseeme 5 ( 0.00%) 563 ( 0.00%) 112.60
other 378413 ( 2.20%) 149207072 ( 1.19%) 394.30
icmp 304508 ( 1.77%) 25303434 ( 0.20%) 83.10
ip6 6584 ( 0.04%) 7975102 ( 0.06%) 1211.29
other 98051 ( 0.57%) 25256206 ( 0.20%) 257.58
frag 8019 ( 0.05%) 10279322 ( 0.08%) 1281.87
ip6 65840 ( 0.38%) 33531239 ( 0.27%) 509.28
tcp6 16493 ( 0.10%) 18746734 ( 0.15%) 1136.65
http(s) 38 ( 0.00%) 41083 ( 0.00%) 1081.13
http(c) 386 ( 0.00%) 112225 ( 0.00%) 290.74
smtp 156 ( 0.00%) 91148 ( 0.00%) 584.28
ssh 30 ( 0.00%) 3300 ( 0.00%) 110.00
bgp 145 ( 0.00%) 16270 ( 0.00%) 112.21
other 15738 ( 0.09%) 18482708 ( 0.15%) 1174.40
udp6 33852 ( 0.20%) 5654951 ( 0.05%) 167.05
dns 31909 ( 0.19%) 5425657 ( 0.04%) 170.04
other 1943 ( 0.01%) 229294 ( 0.00%) 118.01
icmp6 7737 ( 0.04%) 1131429 ( 0.01%) 146.24
ip6 2306 ( 0.01%) 279359 ( 0.00%) 121.14
ipsec6 19 ( 0.00%) 3086 ( 0.00%) 162.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5403 ( 0.03%) 7711600 ( 0.06%) 1427.28
tcpdump file: 200701091215.dump.gz (437.12 MB)