Traffic Trace Info
DumpFile: 200701102130.dump
FileSize: 769.69MB
Id: 200701102130
StartTime: Wed Jan 10 21:30:00 2007
EndTime: Wed Jan 10 21:45:01 2007
TotalTime: 900.48 seconds
TotalCapSize: 601.85MB CapLen: 96 bytes
# of packets: 10960916 (6271.77MB)
AvgRate: 58.42Mbps stddev:5.23M
IP flow (unique src/dst pair) Information
# of flows: 459341 (avg. 23.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.9% 2.9% 2.7% 2.0% 1.5% 1.5% 1.3% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 248405
Top 10 bandwidth usage (bytes/total in %):
13.4% 11.2% 3.5% 3.0% 2.9% 2.8% 2.8% 2.8% 2.5% 2.4%
# of IPv6 addresses: 1851
Top 10 bandwidth usage (bytes/total in %):
36.0% 34.6% 34.2% 34.2% 13.8% 13.8% 2.9% 2.2% 1.1% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701102130.pktlen.png)
detailed numbers
[ 32- 63]: 2336670
[ 64- 127]: 3702995
[ 128- 255]: 434036
[ 256- 511]: 287214
[ 512- 1023]: 373365
[ 1024- 2047]: 3826636
Protocol Breakdown
![[protocol breakdown chart]](200701102130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10960916 (100.00%) 6576425043 (100.00%) 599.99
ip 10646057 ( 97.13%) 6519655987 ( 99.14%) 612.40
tcp 8030273 ( 73.26%) 5982904093 ( 90.98%) 745.04
http(s) 2926719 ( 26.70%) 3851250773 ( 58.56%) 1315.89
http(c) 2089962 ( 19.07%) 233483297 ( 3.55%) 111.72
squid 318974 ( 2.91%) 210620178 ( 3.20%) 660.31
smtp 357770 ( 3.26%) 93241495 ( 1.42%) 260.62
nntp 9740 ( 0.09%) 4777932 ( 0.07%) 490.55
ftp 60759 ( 0.55%) 5390094 ( 0.08%) 88.71
pop3 3229 ( 0.03%) 1104891 ( 0.02%) 342.18
imap 1341 ( 0.01%) 382042 ( 0.01%) 284.89
telnet 143 ( 0.00%) 10563 ( 0.00%) 73.87
ssh 88265 ( 0.81%) 40711228 ( 0.62%) 461.24
dns 6646 ( 0.06%) 1474355 ( 0.02%) 221.84
bgp 887 ( 0.01%) 98277 ( 0.00%) 110.80
napster 19228 ( 0.18%) 22452724 ( 0.34%) 1167.71
realaud 65 ( 0.00%) 7450 ( 0.00%) 114.62
rtsp 213128 ( 1.94%) 103905211 ( 1.58%) 487.52
icecast 143 ( 0.00%) 10795 ( 0.00%) 75.49
other 1933257 ( 17.64%) 1413981768 ( 21.50%) 731.40
udp 2174162 ( 19.84%) 487050443 ( 7.41%) 224.02
dns 1606583 ( 14.66%) 186331917 ( 2.83%) 115.98
realaud 799 ( 0.01%) 66092 ( 0.00%) 82.72
halflif 18 ( 0.00%) 1751 ( 0.00%) 97.28
starcra 11 ( 0.00%) 1032 ( 0.00%) 93.82
everque 20 ( 0.00%) 2059 ( 0.00%) 102.95
unreal 7 ( 0.00%) 618 ( 0.00%) 88.29
quake 70 ( 0.00%) 5992 ( 0.00%) 85.60
cuseeme 4 ( 0.00%) 332 ( 0.00%) 83.00
other 566582 ( 5.17%) 300631232 ( 4.57%) 530.60
icmp 359520 ( 3.28%) 29422854 ( 0.45%) 81.84
ip6 6589 ( 0.06%) 7976843 ( 0.12%) 1210.63
other 75513 ( 0.69%) 12301754 ( 0.19%) 162.91
frag 51684 ( 0.47%) 54651617 ( 0.83%) 1057.42
ip6 314859 ( 2.87%) 56769056 ( 0.86%) 180.30
tcp6 254054 ( 2.32%) 39700750 ( 0.60%) 156.27
http(s) 116 ( 0.00%) 88869 ( 0.00%) 766.11
http(c) 2260 ( 0.02%) 196876 ( 0.00%) 87.11
smtp 257 ( 0.00%) 88487 ( 0.00%) 344.31
ftp 227965 ( 2.08%) 19614808 ( 0.30%) 86.04
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 126 ( 0.00%) 13581 ( 0.00%) 107.79
icecast 20483 ( 0.19%) 19413752 ( 0.30%) 947.80
other 2840 ( 0.03%) 283742 ( 0.00%) 99.91
udp6 42732 ( 0.39%) 7611502 ( 0.12%) 178.12
dns 40696 ( 0.37%) 7377764 ( 0.11%) 181.29
other 2036 ( 0.02%) 233738 ( 0.00%) 114.80
icmp6 10537 ( 0.10%) 1482426 ( 0.02%) 140.69
ip6 2103 ( 0.02%) 255966 ( 0.00%) 121.71
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5403 ( 0.05%) 7714332 ( 0.12%) 1427.79
tcpdump file: 200701102130.dump.gz (283.84 MB)