Traffic Trace Info
DumpFile: 200701092300.dump
FileSize: 899.92MB
Id: 200701092300
StartTime: Tue Jan 9 23:00:00 2007
EndTime: Tue Jan 9 23:15:01 2007
TotalTime: 900.65 seconds
TotalCapSize: 703.93MB CapLen: 96 bytes
# of packets: 12841933 (7430.62MB)
AvgRate: 69.21Mbps stddev:5.95M
IP flow (unique src/dst pair) Information
# of flows: 695955 (avg. 18.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 1.7% 1.5% 1.5% 1.3% 1.2% 1.2% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 426449
Top 10 bandwidth usage (bytes/total in %):
7.7% 5.9% 5.4% 5.2% 4.8% 4.2% 3.0% 2.9% 2.8% 2.5%
# of IPv6 addresses: 1517
Top 10 bandwidth usage (bytes/total in %):
45.5% 45.5% 7.8% 7.3% 4.0% 3.8% 3.3% 3.2% 3.0% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701092300.pktlen.png)
detailed numbers
[ 32- 63]: 2703006
[ 64- 127]: 4366189
[ 128- 255]: 444058
[ 256- 511]: 326832
[ 512- 1023]: 380296
[ 1024- 2047]: 4621552
Protocol Breakdown
![[protocol breakdown chart]](200701092300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12841933 (100.00%) 7791570831 (100.00%) 606.73
ip 12776319 ( 99.49%) 7774404312 ( 99.78%) 608.50
tcp 9965736 ( 77.60%) 7202545426 ( 92.44%) 722.73
http(s) 3246890 ( 25.28%) 4394365507 ( 56.40%) 1353.41
http(c) 2023712 ( 15.76%) 224765183 ( 2.88%) 111.07
squid 553445 ( 4.31%) 419834794 ( 5.39%) 758.58
smtp 460790 ( 3.59%) 123136143 ( 1.58%) 267.23
nntp 13581 ( 0.11%) 6358884 ( 0.08%) 468.22
ftp 37278 ( 0.29%) 3192867 ( 0.04%) 85.65
pop3 4013 ( 0.03%) 1776995 ( 0.02%) 442.81
imap 1833 ( 0.01%) 392336 ( 0.01%) 214.04
telnet 559 ( 0.00%) 58841 ( 0.00%) 105.26
ssh 580243 ( 4.52%) 114852134 ( 1.47%) 197.94
dns 7551 ( 0.06%) 2083730 ( 0.03%) 275.95
bgp 1475 ( 0.01%) 194958 ( 0.00%) 132.17
napster 54 ( 0.00%) 3348 ( 0.00%) 62.00
realaud 5 ( 0.00%) 1124 ( 0.00%) 224.80
rtsp 146329 ( 1.14%) 46541608 ( 0.60%) 318.06
icecast 19490 ( 0.15%) 15506995 ( 0.20%) 795.64
hotline 6 ( 0.00%) 784 ( 0.00%) 130.67
other 2868469 ( 22.34%) 1849478349 ( 23.74%) 644.76
udp 2276576 ( 17.73%) 512177036 ( 6.57%) 224.98
dns 1686014 ( 13.13%) 190131270 ( 2.44%) 112.77
realaud 4815 ( 0.04%) 2613730 ( 0.03%) 542.83
halflif 27 ( 0.00%) 2454 ( 0.00%) 90.89
starcra 4 ( 0.00%) 645 ( 0.00%) 161.25
everque 30 ( 0.00%) 3105 ( 0.00%) 103.50
unreal 3 ( 0.00%) 534 ( 0.00%) 178.00
quake 16 ( 0.00%) 1370 ( 0.00%) 85.62
cuseeme 2 ( 0.00%) 230 ( 0.00%) 115.00
other 585423 ( 4.56%) 319308225 ( 4.10%) 545.43
icmp 403494 ( 3.14%) 32487303 ( 0.42%) 80.51
ip6 6550 ( 0.05%) 7950204 ( 0.10%) 1213.77
other 123963 ( 0.97%) 19244343 ( 0.25%) 155.24
frag 1665 ( 0.01%) 1629165 ( 0.02%) 978.48
ip6 65611 ( 0.51%) 17166339 ( 0.22%) 261.64
tcp6 4749 ( 0.04%) 756247 ( 0.01%) 159.24
http(s) 24 ( 0.00%) 20866 ( 0.00%) 869.42
http(c) 817 ( 0.01%) 71948 ( 0.00%) 88.06
smtp 487 ( 0.00%) 228600 ( 0.00%) 469.40
ftp 51 ( 0.00%) 5009 ( 0.00%) 98.22
ssh 108 ( 0.00%) 22116 ( 0.00%) 204.78
bgp 120 ( 0.00%) 12420 ( 0.00%) 103.50
other 3142 ( 0.02%) 395288 ( 0.01%) 125.81
udp6 44430 ( 0.35%) 7193031 ( 0.09%) 161.90
dns 42415 ( 0.33%) 6961923 ( 0.09%) 164.14
other 2015 ( 0.02%) 231108 ( 0.00%) 114.69
icmp6 8832 ( 0.07%) 1243514 ( 0.02%) 140.80
ip6 2176 ( 0.02%) 264417 ( 0.00%) 121.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5394 ( 0.04%) 7705050 ( 0.10%) 1428.45
tcpdump file: 200701092300.dump.gz (341.95 MB)