Traffic Trace Info
DumpFile: 200701100130.dump
FileSize: 931.93MB
Id: 200701100130
StartTime: Wed Jan 10 01:30:01 2007
EndTime: Wed Jan 10 01:45:00 2007
TotalTime: 899.90 seconds
TotalCapSize: 730.15MB CapLen: 96 bytes
# of packets: 13222224 (8468.52MB)
AvgRate: 78.95Mbps stddev:9.94M
IP flow (unique src/dst pair) Information
# of flows: 487937 (avg. 27.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.5% 3.0% 2.9% 2.4% 1.6% 1.6% 1.6% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 274452
Top 10 bandwidth usage (bytes/total in %):
16.5% 9.5% 5.9% 5.5% 4.9% 4.4% 3.9% 3.6% 3.6% 3.3%
# of IPv6 addresses: 1374
Top 10 bandwidth usage (bytes/total in %):
50.1% 50.1% 24.9% 24.9% 2.6% 2.4% 2.4% 1.9% 1.9% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701100130.pktlen.png)
detailed numbers
[ 32- 63]: 2638350
[ 64- 127]: 4176967
[ 128- 255]: 375421
[ 256- 511]: 279632
[ 512- 1023]: 283789
[ 1024- 2047]: 5468065
Protocol Breakdown
![[protocol breakdown chart]](200701100130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13222224 (100.00%) 8879883844 (100.00%) 671.59
ip 13149203 ( 99.45%) 8848542369 ( 99.65%) 672.93
tcp 10691268 ( 80.86%) 8345226369 ( 93.98%) 780.56
http(s) 3630387 ( 27.46%) 5010094220 ( 56.42%) 1380.04
http(c) 2157715 ( 16.32%) 201556054 ( 2.27%) 93.41
squid 611293 ( 4.62%) 424112503 ( 4.78%) 693.80
smtp 413767 ( 3.13%) 142403715 ( 1.60%) 344.16
nntp 10835 ( 0.08%) 5266409 ( 0.06%) 486.06
ftp 38867 ( 0.29%) 2946488 ( 0.03%) 75.81
pop3 1924 ( 0.01%) 544882 ( 0.01%) 283.20
imap 1302 ( 0.01%) 184431 ( 0.00%) 141.65
telnet 200 ( 0.00%) 15783 ( 0.00%) 78.92
ssh 646710 ( 4.89%) 120462753 ( 1.36%) 186.27
dns 4136 ( 0.03%) 1307661 ( 0.01%) 316.17
bgp 965 ( 0.01%) 114353 ( 0.00%) 118.50
napster 75 ( 0.00%) 14922 ( 0.00%) 198.96
realaud 7 ( 0.00%) 1054 ( 0.00%) 150.57
rtsp 78304 ( 0.59%) 7284980 ( 0.08%) 93.03
icecast 188 ( 0.00%) 14413 ( 0.00%) 76.66
other 3094587 ( 23.40%) 2428901388 ( 27.35%) 784.89
udp 1856703 ( 14.04%) 448926344 ( 5.06%) 241.79
dns 1308847 ( 9.90%) 146339110 ( 1.65%) 111.81
realaud 1834 ( 0.01%) 112315 ( 0.00%) 61.24
halflif 28 ( 0.00%) 2394 ( 0.00%) 85.50
starcra 1236 ( 0.01%) 176916 ( 0.00%) 143.14
everque 29 ( 0.00%) 3014 ( 0.00%) 103.93
unreal 12 ( 0.00%) 1244 ( 0.00%) 103.67
quake 11 ( 0.00%) 903 ( 0.00%) 82.09
cuseeme 11 ( 0.00%) 926 ( 0.00%) 84.18
other 544672 ( 4.12%) 302284805 ( 3.40%) 554.99
icmp 592205 ( 4.48%) 46075500 ( 0.52%) 77.80
ip6 6565 ( 0.05%) 7956833 ( 0.09%) 1212.01
other 2462 ( 0.02%) 357323 ( 0.00%) 145.14
frag 371 ( 0.00%) 304185 ( 0.00%) 819.91
ip6 73021 ( 0.55%) 31341475 ( 0.35%) 429.21
tcp6 26342 ( 0.20%) 17271085 ( 0.19%) 655.65
http(s) 469 ( 0.00%) 375194 ( 0.00%) 799.99
http(c) 76 ( 0.00%) 8642 ( 0.00%) 113.71
smtp 578 ( 0.00%) 207246 ( 0.00%) 358.56
ftp 3287 ( 0.02%) 389141 ( 0.00%) 118.39
ssh 32 ( 0.00%) 4601 ( 0.00%) 143.78
bgp 120 ( 0.00%) 12420 ( 0.00%) 103.50
icecast 17990 ( 0.14%) 15696451 ( 0.18%) 872.51
other 3790 ( 0.03%) 577390 ( 0.01%) 152.35
udp6 31074 ( 0.24%) 4935055 ( 0.06%) 158.82
dns 28891 ( 0.22%) 4691231 ( 0.05%) 162.38
other 2183 ( 0.02%) 243824 ( 0.00%) 111.69
icmp6 7969 ( 0.06%) 1157450 ( 0.01%) 145.24
ip6 2208 ( 0.02%) 268040 ( 0.00%) 121.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5398 ( 0.04%) 7705765 ( 0.09%) 1427.52
tcpdump file: 200701100130.dump.gz (339.88 MB)