Traffic Trace Info
DumpFile: 200701101445.dump
FileSize: 1061.30MB
Id: 200701101445
StartTime: Wed Jan 10 14:45:00 2007
EndTime: Wed Jan 10 15:00:00 2007
TotalTime: 900.25 seconds
TotalCapSize: 831.99MB CapLen: 96 bytes
# of packets: 15026164 (9972.50MB)
AvgRate: 92.93Mbps stddev:14.48M
IP flow (unique src/dst pair) Information
# of flows: 458710 (avg. 32.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.2% 1.9% 1.3% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 237807
Top 10 bandwidth usage (bytes/total in %):
11.2% 8.9% 7.3% 2.7% 2.5% 2.2% 2.2% 2.1% 2.0% 1.9%
# of IPv6 addresses: 1348
Top 10 bandwidth usage (bytes/total in %):
52.8% 52.8% 23.2% 23.2% 4.8% 2.7% 2.1% 1.7% 1.6% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701101445.pktlen.png)
detailed numbers
[ 32- 63]: 3533936
[ 64- 127]: 3830940
[ 128- 255]: 407475
[ 256- 511]: 407632
[ 512- 1023]: 455127
[ 1024- 2047]: 6391054
Protocol Breakdown
![[protocol breakdown chart]](200701101445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15026164 (100.00%) 10456923959 (100.00%) 695.91
ip 14947212 ( 99.47%) 10421027441 ( 99.66%) 697.19
tcp 12608430 ( 83.91%) 9912822183 ( 94.80%) 786.21
http(s) 5387394 ( 35.85%) 7049480457 ( 67.41%) 1308.51
http(c) 3229641 ( 21.49%) 449387184 ( 4.30%) 139.14
squid 414113 ( 2.76%) 238861238 ( 2.28%) 576.80
smtp 302586 ( 2.01%) 96355862 ( 0.92%) 318.44
nntp 10721 ( 0.07%) 2898927 ( 0.03%) 270.40
ftp 140104 ( 0.93%) 10575964 ( 0.10%) 75.49
pop3 6104 ( 0.04%) 1987882 ( 0.02%) 325.67
imap 3722 ( 0.02%) 1041234 ( 0.01%) 279.75
telnet 910 ( 0.01%) 74991 ( 0.00%) 82.41
ssh 29083 ( 0.19%) 24896272 ( 0.24%) 856.04
dns 1738 ( 0.01%) 139195 ( 0.00%) 80.09
bgp 1135 ( 0.01%) 171213 ( 0.00%) 150.85
napster 19 ( 0.00%) 1286 ( 0.00%) 67.68
realaud 1519 ( 0.01%) 125589 ( 0.00%) 82.68
rtsp 115072 ( 0.77%) 38085862 ( 0.36%) 330.97
icecast 32120 ( 0.21%) 46355565 ( 0.44%) 1443.20
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 2932416 ( 19.52%) 1952381480 ( 18.67%) 665.79
udp 1949631 ( 12.97%) 461723615 ( 4.42%) 236.83
dns 1396417 ( 9.29%) 191167904 ( 1.83%) 136.90
rip 2 ( 0.00%) 343 ( 0.00%) 171.50
realaud 5495 ( 0.04%) 331731 ( 0.00%) 60.37
halflif 13 ( 0.00%) 1543 ( 0.00%) 118.69
starcra 11 ( 0.00%) 1366 ( 0.00%) 124.18
everque 34 ( 0.00%) 4729 ( 0.00%) 139.09
unreal 14 ( 0.00%) 1879 ( 0.00%) 134.21
quake 15 ( 0.00%) 1402 ( 0.00%) 93.47
cuseeme 3 ( 0.00%) 421 ( 0.00%) 140.33
other 547612 ( 3.64%) 270208392 ( 2.58%) 493.43
icmp 287682 ( 1.91%) 24166917 ( 0.23%) 84.01
ip6 6586 ( 0.04%) 7980488 ( 0.08%) 1211.74
other 94883 ( 0.63%) 14334238 ( 0.14%) 151.07
frag 640 ( 0.00%) 522741 ( 0.00%) 816.78
ip6 78949 ( 0.53%) 35896338 ( 0.34%) 454.68
tcp6 26022 ( 0.17%) 19771811 ( 0.19%) 759.81
http(s) 198 ( 0.00%) 89170 ( 0.00%) 450.35
http(c) 321 ( 0.00%) 36879 ( 0.00%) 114.89
smtp 329 ( 0.00%) 169446 ( 0.00%) 515.03
ftp 587 ( 0.00%) 55502 ( 0.00%) 94.55
dns 17 ( 0.00%) 2148 ( 0.00%) 126.35
bgp 126 ( 0.00%) 15438 ( 0.00%) 122.52
icecast 20021 ( 0.13%) 18953576 ( 0.18%) 946.68
other 4423 ( 0.03%) 449652 ( 0.00%) 101.66
udp6 37150 ( 0.25%) 6511585 ( 0.06%) 175.28
dns 35093 ( 0.23%) 6277537 ( 0.06%) 178.88
other 2057 ( 0.01%) 234048 ( 0.00%) 113.78
icmp6 8132 ( 0.05%) 1614755 ( 0.02%) 198.57
ip6 2204 ( 0.01%) 267625 ( 0.00%) 121.43
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5411 ( 0.04%) 7726482 ( 0.07%) 1427.92
tcpdump file: 200701101445.dump.gz (386.76 MB)