Traffic Trace Info
DumpFile: 200701100145.dump
FileSize: 978.91MB
Id: 200701100145
StartTime: Wed Jan 10 01:45:00 2007
EndTime: Wed Jan 10 02:00:00 2007
TotalTime: 900.04 seconds
TotalCapSize: 767.41MB CapLen: 96 bytes
# of packets: 13849280 (9391.19MB)
AvgRate: 87.53Mbps stddev:5.47M
IP flow (unique src/dst pair) Information
# of flows: 474486 (avg. 29.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.6% 2.6% 2.2% 1.6% 1.6% 1.5% 1.3% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 259957
Top 10 bandwidth usage (bytes/total in %):
22.8% 15.9% 5.1% 4.9% 4.7% 4.6% 4.0% 3.5% 2.7% 2.6%
# of IPv6 addresses: 1303
Top 10 bandwidth usage (bytes/total in %):
37.9% 37.9% 29.9% 18.3% 11.6% 3.8% 3.4% 2.5% 2.3% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701100145.pktlen.png)
detailed numbers
[ 32- 63]: 2771158
[ 64- 127]: 4032465
[ 128- 255]: 365408
[ 256- 511]: 272548
[ 512- 1023]: 278183
[ 1024- 2047]: 6129518
Protocol Breakdown
![[protocol breakdown chart]](200701100145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13849280 (100.00%) 9847380479 (100.00%) 711.04
ip 13793687 ( 99.60%) 9826812617 ( 99.79%) 712.41
tcp 11612728 ( 83.85%) 9363687645 ( 95.09%) 806.33
http(s) 4386846 ( 31.68%) 6064448626 ( 61.58%) 1382.42
http(c) 2377999 ( 17.17%) 215499552 ( 2.19%) 90.62
squid 487288 ( 3.52%) 280860895 ( 2.85%) 576.38
smtp 326586 ( 2.36%) 94197763 ( 0.96%) 288.43
nntp 18163 ( 0.13%) 9017250 ( 0.09%) 496.46
ftp 41727 ( 0.30%) 3331155 ( 0.03%) 79.83
pop3 1620 ( 0.01%) 262057 ( 0.00%) 161.76
imap 1525 ( 0.01%) 470379 ( 0.00%) 308.45
telnet 356 ( 0.00%) 24761 ( 0.00%) 69.55
ssh 575300 ( 4.15%) 108032631 ( 1.10%) 187.78
dns 5258 ( 0.04%) 367415 ( 0.00%) 69.88
bgp 913 ( 0.01%) 105067 ( 0.00%) 115.08
napster 69 ( 0.00%) 4416 ( 0.00%) 64.00
realaud 15 ( 0.00%) 1075 ( 0.00%) 71.67
rtsp 126895 ( 0.92%) 10187674 ( 0.10%) 80.28
icecast 191 ( 0.00%) 14502 ( 0.00%) 75.93
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 3261958 ( 23.55%) 2576861281 ( 26.17%) 789.97
udp 1771356 ( 12.79%) 422660478 ( 4.29%) 238.61
dns 1264638 ( 9.13%) 142662516 ( 1.45%) 112.81
realaud 5 ( 0.00%) 766 ( 0.00%) 153.20
halflif 14 ( 0.00%) 1471 ( 0.00%) 105.07
starcra 12 ( 0.00%) 1370 ( 0.00%) 114.17
everque 34 ( 0.00%) 4594 ( 0.00%) 135.12
unreal 3 ( 0.00%) 278 ( 0.00%) 92.67
quake 11 ( 0.00%) 916 ( 0.00%) 83.27
cuseeme 8 ( 0.00%) 1088 ( 0.00%) 136.00
other 506502 ( 3.66%) 279966283 ( 2.84%) 552.74
icmp 401115 ( 2.90%) 32230479 ( 0.33%) 80.35
ip6 6562 ( 0.05%) 7968196 ( 0.08%) 1214.29
other 1926 ( 0.01%) 265819 ( 0.00%) 138.02
frag 743 ( 0.01%) 568573 ( 0.01%) 765.24
ip6 55590 ( 0.40%) 20567682 ( 0.21%) 369.99
tcp6 9275 ( 0.07%) 6556617 ( 0.07%) 706.91
http(s) 2701 ( 0.02%) 3810490 ( 0.04%) 1410.77
http(c) 1822 ( 0.01%) 163770 ( 0.00%) 89.88
smtp 165 ( 0.00%) 57614 ( 0.00%) 349.18
ftp 26 ( 0.00%) 2566 ( 0.00%) 98.69
dns 28 ( 0.00%) 3515 ( 0.00%) 125.54
bgp 120 ( 0.00%) 12420 ( 0.00%) 103.50
icecast 3299 ( 0.02%) 2389490 ( 0.02%) 724.31
other 1114 ( 0.01%) 116752 ( 0.00%) 104.80
udp6 31222 ( 0.23%) 4993246 ( 0.05%) 159.93
dns 29170 ( 0.21%) 4759520 ( 0.05%) 163.16
other 2052 ( 0.01%) 233726 ( 0.00%) 113.90
icmp6 7493 ( 0.05%) 1046553 ( 0.01%) 139.67
ip6 2176 ( 0.02%) 264296 ( 0.00%) 121.46
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5393 ( 0.04%) 7702754 ( 0.08%) 1428.29
tcpdump file: 200701100145.dump.gz (359.38 MB)