Traffic Trace Info
DumpFile: 200701091245.dump
FileSize: 1255.94MB
Id: 200701091245
StartTime: Tue Jan 9 12:45:01 2007
EndTime: Tue Jan 9 13:00:00 2007
TotalTime: 899.93 seconds
TotalCapSize: 980.82MB CapLen: 96 bytes
# of packets: 18028244 (12488.60MB)
AvgRate: 116.41Mbps stddev:16.39M
IP flow (unique src/dst pair) Information
# of flows: 640052 (avg. 28.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.4% 1.9% 1.6% 1.4% 1.2% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 319673
Top 10 bandwidth usage (bytes/total in %):
10.9% 9.1% 6.9% 3.1% 2.7% 2.6% 2.4% 2.3% 1.9% 1.8%
# of IPv6 addresses: 1324
Top 10 bandwidth usage (bytes/total in %):
56.2% 56.2% 23.5% 23.5% 2.7% 1.5% 1.5% 1.5% 1.2% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701091245.pktlen.png)
detailed numbers
[ 32- 63]: 4611375
[ 64- 127]: 3938000
[ 128- 255]: 489360
[ 256- 511]: 493207
[ 512- 1023]: 454456
[ 1024- 2047]: 8041846
Protocol Breakdown
![[protocol breakdown chart]](200701091245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18028244 (100.00%) 13095251424 (100.00%) 726.37
ip 17964560 ( 99.65%) 13062043467 ( 99.75%) 727.10
tcp 15621819 ( 86.65%) 12660524522 ( 96.68%) 810.44
http(s) 7432258 ( 41.23%) 9907930945 ( 75.66%) 1333.10
http(c) 4385587 ( 24.33%) 581499124 ( 4.44%) 132.59
squid 383107 ( 2.13%) 228499964 ( 1.74%) 596.44
smtp 353748 ( 1.96%) 87901329 ( 0.67%) 248.49
nntp 7863 ( 0.04%) 3668107 ( 0.03%) 466.50
ftp 77278 ( 0.43%) 57499125 ( 0.44%) 744.06
pop3 8488 ( 0.05%) 3588278 ( 0.03%) 422.75
imap 10594 ( 0.06%) 7554478 ( 0.06%) 713.09
telnet 1088 ( 0.01%) 141090 ( 0.00%) 129.68
ssh 32659 ( 0.18%) 11807969 ( 0.09%) 361.55
dns 1264 ( 0.01%) 100840 ( 0.00%) 79.78
bgp 862 ( 0.00%) 110829 ( 0.00%) 128.57
napster 184 ( 0.00%) 14159 ( 0.00%) 76.95
realaud 81 ( 0.00%) 6299 ( 0.00%) 77.77
rtsp 238202 ( 1.32%) 159949655 ( 1.22%) 671.49
icecast 39783 ( 0.22%) 45366135 ( 0.35%) 1140.34
other 2648752 ( 14.69%) 1564884936 ( 11.95%) 590.80
udp 1881895 ( 10.44%) 348016758 ( 2.66%) 184.93
dns 1454973 ( 8.07%) 182620187 ( 1.39%) 125.51
realaud 9416 ( 0.05%) 5823890 ( 0.04%) 618.51
halflif 56 ( 0.00%) 7254 ( 0.00%) 129.54
starcra 17 ( 0.00%) 2735 ( 0.00%) 160.88
everque 43 ( 0.00%) 5778 ( 0.00%) 134.37
unreal 31 ( 0.00%) 5737 ( 0.00%) 185.06
quake 18 ( 0.00%) 2088 ( 0.00%) 116.00
cuseeme 8 ( 0.00%) 1102 ( 0.00%) 137.75
other 417317 ( 2.31%) 159544254 ( 1.22%) 382.31
icmp 362876 ( 2.01%) 29681995 ( 0.23%) 81.80
ip6 6689 ( 0.04%) 8063570 ( 0.06%) 1205.50
other 91281 ( 0.51%) 15756622 ( 0.12%) 172.62
frag 409 ( 0.00%) 329641 ( 0.00%) 805.97
ip6 63684 ( 0.35%) 33207957 ( 0.25%) 521.45
tcp6 17276 ( 0.10%) 19381252 ( 0.15%) 1121.86
http(s) 44 ( 0.00%) 56555 ( 0.00%) 1285.34
http(c) 724 ( 0.00%) 150015 ( 0.00%) 207.20
smtp 184 ( 0.00%) 105557 ( 0.00%) 573.68
ssh 18 ( 0.00%) 1740 ( 0.00%) 96.67
dns 28 ( 0.00%) 3571 ( 0.00%) 127.54
bgp 116 ( 0.00%) 12210 ( 0.00%) 105.26
other 16162 ( 0.09%) 19051604 ( 0.15%) 1178.79
udp6 31213 ( 0.17%) 4786280 ( 0.04%) 153.34
dns 29044 ( 0.16%) 4541985 ( 0.03%) 156.38
other 2169 ( 0.01%) 244295 ( 0.00%) 112.63
icmp6 7631 ( 0.04%) 1082109 ( 0.01%) 141.80
ip6 2145 ( 0.01%) 260863 ( 0.00%) 121.61
ipsec6 1 ( 0.00%) 122 ( 0.00%) 122.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5388 ( 0.03%) 7693251 ( 0.06%) 1427.85
tcpdump file: 200701091245.dump.gz (457.89 MB)