Traffic Trace Info
DumpFile: 200701110200.dump
FileSize: 1026.51MB
Id: 200701110200
StartTime: Thu Jan 11 02:00:01 2007
EndTime: Thu Jan 11 02:15:00 2007
TotalTime: 899.52 seconds
TotalCapSize: 788.91MB CapLen: 96 bytes
# of packets: 15569766 (7062.47MB)
AvgRate: 65.86Mbps stddev:10.58M
IP flow (unique src/dst pair) Information
# of flows: 582173 (avg. 26.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.3% 3.1% 2.8% 2.2% 2.2% 1.6% 1.5% 1.3% 1.2% 0.9%
IP address Information
# of IPv4 addresses: 311012
Top 10 bandwidth usage (bytes/total in %):
17.7% 9.8% 9.8% 9.1% 9.0% 3.3% 3.2% 3.1% 3.1% 2.8%
# of IPv6 addresses: 1445
Top 10 bandwidth usage (bytes/total in %):
38.5% 37.3% 32.1% 32.1% 15.1% 15.1% 2.4% 1.7% 1.2% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701110200.pktlen.png)
detailed numbers
[ 32- 63]: 6030385
[ 64- 127]: 4417620
[ 128- 255]: 321163
[ 256- 511]: 253154
[ 512- 1023]: 186847
[ 1024- 2047]: 4360597
Protocol Breakdown
![[protocol breakdown chart]](200701110200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 15569766 (100.00%) 7405533110 (100.00%) 475.64
ip 15260150 ( 98.01%) 7351525429 ( 99.27%) 481.75
tcp 8199376 ( 52.66%) 6086029159 ( 82.18%) 742.26
http(s) 3108033 ( 19.96%) 4183182423 ( 56.49%) 1345.93
http(c) 1811340 ( 11.63%) 187802670 ( 2.54%) 103.68
squid 550552 ( 3.54%) 376278830 ( 5.08%) 683.46
smtp 396777 ( 2.55%) 98455259 ( 1.33%) 248.14
nntp 19788 ( 0.13%) 10796425 ( 0.15%) 545.60
ftp 74534 ( 0.48%) 5803929 ( 0.08%) 77.87
pop3 1967 ( 0.01%) 671496 ( 0.01%) 341.38
imap 755 ( 0.00%) 91753 ( 0.00%) 121.53
telnet 211 ( 0.00%) 16700 ( 0.00%) 79.15
ssh 77856 ( 0.50%) 28784472 ( 0.39%) 369.71
dns 4106 ( 0.03%) 1833804 ( 0.02%) 446.62
bgp 914 ( 0.01%) 102451 ( 0.00%) 112.09
napster 11081 ( 0.07%) 13409914 ( 0.18%) 1210.17
realaud 1776 ( 0.01%) 598140 ( 0.01%) 336.79
rtsp 273 ( 0.00%) 49216 ( 0.00%) 180.28
icecast 16505 ( 0.11%) 15681626 ( 0.21%) 950.11
hotline 3 ( 0.00%) 199 ( 0.00%) 66.33
other 2122886 ( 13.63%) 1162468712 ( 15.70%) 547.59
udp 5685107 ( 36.51%) 491542517 ( 6.64%) 86.46
dns 1666082 ( 10.70%) 190454004 ( 2.57%) 114.31
rip 63 ( 0.00%) 3780 ( 0.00%) 60.00
realaud 232 ( 0.00%) 29554 ( 0.00%) 127.39
halflif 217 ( 0.00%) 15552 ( 0.00%) 71.67
starcra 75 ( 0.00%) 5015 ( 0.00%) 66.87
everque 199 ( 0.00%) 13026 ( 0.00%) 65.46
unreal 61 ( 0.00%) 3796 ( 0.00%) 62.23
quake 221 ( 0.00%) 13940 ( 0.00%) 63.08
cuseeme 58 ( 0.00%) 3621 ( 0.00%) 62.43
other 4017879 ( 25.81%) 300994862 ( 4.06%) 74.91
icmp 540990 ( 3.47%) 42526262 ( 0.57%) 78.61
ip6 6572 ( 0.04%) 7958806 ( 0.11%) 1211.02
other 828105 ( 5.32%) 723468685 ( 9.77%) 873.64
frag 348 ( 0.00%) 278136 ( 0.00%) 799.24
ip6 309613 ( 1.99%) 54007501 ( 0.73%) 174.44
tcp6 256148 ( 1.65%) 38057896 ( 0.51%) 148.58
http(s) 12 ( 0.00%) 4218 ( 0.00%) 351.50
http(c) 91 ( 0.00%) 9121 ( 0.00%) 100.23
smtp 556 ( 0.00%) 219004 ( 0.00%) 393.89
ftp 234072 ( 1.50%) 20139189 ( 0.27%) 86.04
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 175 ( 0.00%) 21182 ( 0.00%) 121.04
icecast 18354 ( 0.12%) 17348607 ( 0.23%) 945.22
other 2881 ( 0.02%) 315940 ( 0.00%) 109.66
udp6 37563 ( 0.24%) 6420333 ( 0.09%) 170.92
dns 35496 ( 0.23%) 6185107 ( 0.08%) 174.25
other 2067 ( 0.01%) 235226 ( 0.00%) 113.80
icmp6 8782 ( 0.06%) 1565362 ( 0.02%) 178.25
ip6 1685 ( 0.01%) 282406 ( 0.00%) 167.60
pim6 62 ( 0.00%) 7314 ( 0.00%) 117.97
other6 5373 ( 0.03%) 7674190 ( 0.10%) 1428.29
tcpdump file: 200701110200.dump.gz (360.58 MB)