Traffic Trace Info
DumpFile: 200701092030.dump
FileSize: 1045.60MB
Id: 200701092030
StartTime: Tue Jan 9 20:30:01 2007
EndTime: Tue Jan 9 20:45:00 2007
TotalTime: 899.26 seconds
TotalCapSize: 818.33MB CapLen: 96 bytes
# of packets: 14833335 (9834.86MB)
AvgRate: 91.72Mbps stddev:19.65M
IP flow (unique src/dst pair) Information
# of flows: 476841 (avg. 31.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.8% 5.8% 3.3% 3.1% 1.3% 1.2% 1.0% 0.9% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 253184
Top 10 bandwidth usage (bytes/total in %):
10.6% 9.9% 8.7% 8.1% 6.0% 4.7% 4.3% 4.0% 3.9% 3.5%
# of IPv6 addresses: 1719
Top 10 bandwidth usage (bytes/total in %):
29.0% 29.0% 26.7% 26.7% 8.1% 8.0% 4.8% 4.4% 2.7% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701092030.pktlen.png)
detailed numbers
[ 32- 63]: 2961954
[ 64- 127]: 4448963
[ 128- 255]: 389101
[ 256- 511]: 349563
[ 512- 1023]: 290374
[ 1024- 2047]: 6393380
Protocol Breakdown
![[protocol breakdown chart]](200701092030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14833335 (100.00%) 10312601087 (100.00%) 695.23
ip 14756206 ( 99.48%) 10285740470 ( 99.74%) 697.05
tcp 12090588 ( 81.51%) 9702482555 ( 94.08%) 802.48
http(s) 4696399 ( 31.66%) 6379596654 ( 61.86%) 1358.40
http(c) 3040346 ( 20.50%) 345529270 ( 3.35%) 113.65
squid 798213 ( 5.38%) 633595672 ( 6.14%) 793.77
smtp 392505 ( 2.65%) 101426039 ( 0.98%) 258.41
nntp 11396 ( 0.08%) 5231964 ( 0.05%) 459.11
ftp 126064 ( 0.85%) 141524306 ( 1.37%) 1122.64
pop3 4794 ( 0.03%) 2584451 ( 0.03%) 539.10
imap 3466 ( 0.02%) 1491984 ( 0.01%) 430.46
telnet 405 ( 0.00%) 45334 ( 0.00%) 111.94
ssh 6402 ( 0.04%) 4744870 ( 0.05%) 741.15
dns 7706 ( 0.05%) 1549078 ( 0.02%) 201.02
bgp 1058 ( 0.01%) 120075 ( 0.00%) 113.49
napster 218 ( 0.00%) 13736 ( 0.00%) 63.01
realaud 4 ( 0.00%) 306 ( 0.00%) 76.50
rtsp 168237 ( 1.13%) 155609674 ( 1.51%) 924.94
icecast 19594 ( 0.13%) 15485580 ( 0.15%) 790.32
hotline 3 ( 0.00%) 198 ( 0.00%) 66.00
other 2813743 ( 18.97%) 1913931264 ( 18.56%) 680.21
udp 2262060 ( 15.25%) 538758616 ( 5.22%) 238.17
dns 1690029 ( 11.39%) 194345580 ( 1.88%) 115.00
realaud 10 ( 0.00%) 843 ( 0.00%) 84.30
halflif 13 ( 0.00%) 1265 ( 0.00%) 97.31
starcra 5 ( 0.00%) 500 ( 0.00%) 100.00
everque 32 ( 0.00%) 2919 ( 0.00%) 91.22
unreal 13 ( 0.00%) 1665 ( 0.00%) 128.08
quake 14 ( 0.00%) 1156 ( 0.00%) 82.57
cuseeme 4 ( 0.00%) 343 ( 0.00%) 85.75
other 571886 ( 3.86%) 344398656 ( 3.34%) 602.22
icmp 340500 ( 2.30%) 27617842 ( 0.27%) 81.11
ip6 6542 ( 0.04%) 7938152 ( 0.08%) 1213.41
other 56516 ( 0.38%) 8943305 ( 0.09%) 158.24
frag 54795 ( 0.37%) 58016901 ( 0.56%) 1058.80
ip6 77126 ( 0.52%) 26860437 ( 0.26%) 348.27
tcp6 18563 ( 0.13%) 10742200 ( 0.10%) 578.69
http(s) 1845 ( 0.01%) 2506465 ( 0.02%) 1358.52
http(c) 2000 ( 0.01%) 262048 ( 0.00%) 131.02
smtp 304 ( 0.00%) 116461 ( 0.00%) 383.10
ftp 94 ( 0.00%) 10711 ( 0.00%) 113.95
bgp 143 ( 0.00%) 16294 ( 0.00%) 113.94
other 14177 ( 0.10%) 7830221 ( 0.08%) 552.32
udp6 43346 ( 0.29%) 7077487 ( 0.07%) 163.28
dns 41173 ( 0.28%) 6834367 ( 0.07%) 165.99
other 2173 ( 0.01%) 243120 ( 0.00%) 111.88
icmp6 7600 ( 0.05%) 1086793 ( 0.01%) 143.00
ip6 2208 ( 0.01%) 267933 ( 0.00%) 121.35
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5379 ( 0.04%) 7681944 ( 0.07%) 1428.14
tcpdump file: 200701092030.dump.gz (387.21 MB)