Traffic Trace Info
DumpFile: 200701102200.dump
FileSize: 960.56MB
Id: 200701102200
StartTime: Wed Jan 10 22:00:01 2007
EndTime: Wed Jan 10 22:15:01 2007
TotalTime: 899.89 seconds
TotalCapSize: 754.06MB CapLen: 96 bytes
# of packets: 13531206 (7879.23MB)
AvgRate: 73.44Mbps stddev:7.12M
IP flow (unique src/dst pair) Information
# of flows: 518920 (avg. 26.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.1% 1.8% 1.6% 1.3% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 295076
Top 10 bandwidth usage (bytes/total in %):
24.3% 13.8% 5.3% 2.5% 2.2% 1.9% 1.9% 1.6% 1.6% 1.6%
# of IPv6 addresses: 1479
Top 10 bandwidth usage (bytes/total in %):
37.7% 36.5% 32.6% 32.6% 15.1% 15.1% 2.6% 1.8% 0.8% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701102200.pktlen.png)
detailed numbers
[ 32- 63]: 2994800
[ 64- 127]: 4464778
[ 128- 255]: 461909
[ 256- 511]: 285927
[ 512- 1023]: 423661
[ 1024- 2047]: 4900131
Protocol Breakdown
![[protocol breakdown chart]](200701102200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 13531206 (100.00%) 8261966634 (100.00%) 610.59
ip 13221639 ( 97.71%) 8207008435 ( 99.33%) 620.73
tcp 10721510 ( 79.24%) 7756891402 ( 93.89%) 723.49
http(s) 4137881 ( 30.58%) 5565800208 ( 67.37%) 1345.08
http(c) 2693242 ( 19.90%) 269381742 ( 3.26%) 100.02
squid 449706 ( 3.32%) 359619822 ( 4.35%) 799.68
smtp 451374 ( 3.34%) 111450973 ( 1.35%) 246.91
nntp 13171 ( 0.10%) 6033193 ( 0.07%) 458.07
ftp 59012 ( 0.44%) 5140655 ( 0.06%) 87.11
pop3 138608 ( 1.02%) 8994751 ( 0.11%) 64.89
imap 1087 ( 0.01%) 131356 ( 0.00%) 120.84
telnet 130 ( 0.00%) 9177 ( 0.00%) 70.59
ssh 569505 ( 4.21%) 106557210 ( 1.29%) 187.10
dns 6488 ( 0.05%) 2039890 ( 0.02%) 314.41
bgp 1077 ( 0.01%) 128104 ( 0.00%) 118.95
napster 14324 ( 0.11%) 16611271 ( 0.20%) 1159.68
realaud 4899 ( 0.04%) 1757696 ( 0.02%) 358.79
rtsp 240527 ( 1.78%) 55086445 ( 0.67%) 229.02
icecast 127 ( 0.00%) 9179 ( 0.00%) 72.28
other 1940330 ( 14.34%) 1248138300 ( 15.11%) 643.26
udp 2028974 ( 14.99%) 398292406 ( 4.82%) 196.30
dns 1569533 ( 11.60%) 182292084 ( 2.21%) 116.14
realaud 256 ( 0.00%) 62181 ( 0.00%) 242.89
halflif 16 ( 0.00%) 1233 ( 0.00%) 77.06
starcra 40 ( 0.00%) 3442 ( 0.00%) 86.05
everque 22 ( 0.00%) 2195 ( 0.00%) 99.77
unreal 4 ( 0.00%) 319 ( 0.00%) 79.75
quake 19 ( 0.00%) 1985 ( 0.00%) 104.47
cuseeme 8 ( 0.00%) 624 ( 0.00%) 78.00
other 459052 ( 3.39%) 215924588 ( 2.61%) 470.37
icmp 380979 ( 2.82%) 30702994 ( 0.37%) 80.59
ip6 6600 ( 0.05%) 7966744 ( 0.10%) 1207.08
other 83576 ( 0.62%) 13154889 ( 0.16%) 157.40
frag 342 ( 0.00%) 261337 ( 0.00%) 764.14
ip6 309564 ( 2.29%) 54958019 ( 0.67%) 177.53
tcp6 256489 ( 1.90%) 38723620 ( 0.47%) 150.98
http(s) 38 ( 0.00%) 16742 ( 0.00%) 440.58
http(c) 170 ( 0.00%) 15902 ( 0.00%) 93.54
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 331 ( 0.00%) 127844 ( 0.00%) 386.24
ftp 233435 ( 1.73%) 20084717 ( 0.24%) 86.04
dns 45 ( 0.00%) 6373 ( 0.00%) 141.62
bgp 124 ( 0.00%) 13124 ( 0.00%) 105.84
icecast 18851 ( 0.14%) 17938144 ( 0.22%) 951.58
other 3493 ( 0.03%) 520626 ( 0.01%) 149.05
udp6 36410 ( 0.27%) 6523883 ( 0.08%) 179.18
dns 34400 ( 0.25%) 6292455 ( 0.08%) 182.92
other 2010 ( 0.01%) 231428 ( 0.00%) 115.14
icmp6 8955 ( 0.07%) 1719591 ( 0.02%) 192.03
ip6 2280 ( 0.02%) 276189 ( 0.00%) 121.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5400 ( 0.04%) 7710656 ( 0.09%) 1427.90
tcpdump file: 200701102200.dump.gz (356.02 MB)