Traffic Trace Info
DumpFile: 200701101815.dump
FileSize: 920.71MB
Id: 200701101815
StartTime: Wed Jan 10 18:15:00 2007
EndTime: Wed Jan 10 18:30:00 2007
TotalTime: 900.01 seconds
TotalCapSize: 718.23MB CapLen: 96 bytes
# of packets: 13108050 (7589.24MB)
AvgRate: 70.73Mbps stddev:6.95M
IP flow (unique src/dst pair) Information
# of flows: 659936 (avg. 19.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 2.0% 1.5% 1.5% 1.4% 0.9% 0.9% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 347391
Top 10 bandwidth usage (bytes/total in %):
8.0% 7.7% 3.6% 3.4% 3.2% 2.9% 2.7% 2.4% 2.2% 2.1%
# of IPv6 addresses: 1772
Top 10 bandwidth usage (bytes/total in %):
49.1% 49.1% 20.9% 20.9% 5.9% 2.8% 2.5% 2.1% 2.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701101815.pktlen.png)
detailed numbers
[ 32- 63]: 3068112
[ 64- 127]: 4130751
[ 128- 255]: 482397
[ 256- 511]: 342079
[ 512- 1023]: 375375
[ 1024- 2047]: 4709336
Protocol Breakdown
![[protocol breakdown chart]](200701101815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13108050 (100.00%) 7957893557 (100.00%) 607.10
ip 13015839 ( 99.30%) 7918219305 ( 99.50%) 608.35
tcp 10204376 ( 77.85%) 7478666929 ( 93.98%) 732.89
http(s) 3794885 ( 28.95%) 4930777878 ( 61.96%) 1299.32
http(c) 2512455 ( 19.17%) 339063368 ( 4.26%) 134.95
squid 521172 ( 3.98%) 429369564 ( 5.40%) 823.85
smtp 442705 ( 3.38%) 121258170 ( 1.52%) 273.90
nntp 9560 ( 0.07%) 4508296 ( 0.06%) 471.58
ftp 44282 ( 0.34%) 3734021 ( 0.05%) 84.32
pop3 25791 ( 0.20%) 31305065 ( 0.39%) 1213.80
imap 5368 ( 0.04%) 2721077 ( 0.03%) 506.91
telnet 1118 ( 0.01%) 116180 ( 0.00%) 103.92
ssh 11545 ( 0.09%) 4805674 ( 0.06%) 416.26
dns 11843 ( 0.09%) 8201143 ( 0.10%) 692.49
bgp 834 ( 0.01%) 107871 ( 0.00%) 129.34
napster 389 ( 0.00%) 138979 ( 0.00%) 357.27
realaud 103 ( 0.00%) 12905 ( 0.00%) 125.29
rtsp 138006 ( 1.05%) 76218171 ( 0.96%) 552.28
icecast 211 ( 0.00%) 17624 ( 0.00%) 83.53
other 2684100 ( 20.48%) 1526310403 ( 19.18%) 568.65
udp 2093998 ( 15.97%) 369159772 ( 4.64%) 176.29
dns 1747984 ( 13.34%) 218779119 ( 2.75%) 125.16
realaud 1785 ( 0.01%) 109323 ( 0.00%) 61.25
halflif 17 ( 0.00%) 1767 ( 0.00%) 103.94
starcra 11 ( 0.00%) 1492 ( 0.00%) 135.64
everque 35 ( 0.00%) 4426 ( 0.00%) 126.46
unreal 22 ( 0.00%) 2761 ( 0.00%) 125.50
quake 18 ( 0.00%) 1516 ( 0.00%) 84.22
cuseeme 5 ( 0.00%) 413 ( 0.00%) 82.60
other 344013 ( 2.62%) 150179537 ( 1.89%) 436.55
icmp 609643 ( 4.65%) 47200370 ( 0.59%) 77.42
ip6 6598 ( 0.05%) 7993523 ( 0.10%) 1211.51
other 101224 ( 0.77%) 15198711 ( 0.19%) 150.15
frag 5479 ( 0.04%) 4331960 ( 0.05%) 790.65
ip6 92208 ( 0.70%) 39674072 ( 0.50%) 430.27
tcp6 25944 ( 0.20%) 21285231 ( 0.27%) 820.43
http(s) 1022 ( 0.01%) 1213470 ( 0.02%) 1187.35
http(c) 103 ( 0.00%) 14493 ( 0.00%) 140.71
smtp 209 ( 0.00%) 77050 ( 0.00%) 368.66
ftp 55 ( 0.00%) 5485 ( 0.00%) 99.73
ssh 179 ( 0.00%) 42854 ( 0.00%) 239.41
dns 40 ( 0.00%) 5563 ( 0.00%) 139.07
bgp 128 ( 0.00%) 13560 ( 0.00%) 105.94
icecast 20577 ( 0.16%) 19499586 ( 0.25%) 947.64
other 3631 ( 0.03%) 413170 ( 0.01%) 113.79
udp6 47997 ( 0.37%) 8469390 ( 0.11%) 176.46
dns 45859 ( 0.35%) 8225365 ( 0.10%) 179.36
other 2138 ( 0.02%) 244025 ( 0.00%) 114.14
icmp6 10279 ( 0.08%) 1880443 ( 0.02%) 182.94
ip6 2222 ( 0.02%) 269842 ( 0.00%) 121.44
ipsec6 324 ( 0.00%) 41320 ( 0.00%) 127.53
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5412 ( 0.04%) 7723766 ( 0.10%) 1427.16
tcpdump file: 200701101815.dump.gz (346.29 MB)