Traffic Trace Info
DumpFile: 200701110900.dump
FileSize: 929.84MB
Id: 200701110900
StartTime: Thu Jan 11 09:00:01 2007
EndTime: Thu Jan 11 09:15:00 2007
TotalTime: 899.19 seconds
TotalCapSize: 732.54MB CapLen: 96 bytes
# of packets: 12928236 (8575.39MB)
AvgRate: 80.00Mbps stddev:17.36M
IP flow (unique src/dst pair) Information
# of flows: 526547 (avg. 24.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.4% 2.0% 1.4% 1.3% 1.3% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 319944
Top 10 bandwidth usage (bytes/total in %):
18.4% 11.4% 6.0% 3.3% 2.6% 2.6% 2.4% 2.4% 2.1% 1.9%
# of IPv6 addresses: 1418
Top 10 bandwidth usage (bytes/total in %):
37.6% 36.5% 34.6% 34.6% 15.0% 15.0% 2.6% 1.5% 1.5% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701110900.pktlen.png)
detailed numbers
[ 32- 63]: 2603788
[ 64- 127]: 3859889
[ 128- 255]: 331653
[ 256- 511]: 302041
[ 512- 1023]: 332876
[ 1024- 2047]: 5497989
Protocol Breakdown
![[protocol breakdown chart]](200701110900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12928236 (100.00%) 8991953295 (100.00%) 695.53
ip 12621569 ( 97.63%) 8936891503 ( 99.39%) 708.07
tcp 10593452 ( 81.94%) 8569375944 ( 95.30%) 808.93
http(s) 4691720 ( 36.29%) 6430419710 ( 71.51%) 1370.59
http(c) 2545347 ( 19.69%) 279123647 ( 3.10%) 109.66
squid 189836 ( 1.47%) 102400666 ( 1.14%) 539.42
smtp 396021 ( 3.06%) 138531943 ( 1.54%) 349.81
nntp 10147 ( 0.08%) 5099907 ( 0.06%) 502.60
ftp 39286 ( 0.30%) 4205289 ( 0.05%) 107.04
pop3 139920 ( 1.08%) 13539953 ( 0.15%) 96.77
imap 9146 ( 0.07%) 7994890 ( 0.09%) 874.14
telnet 153 ( 0.00%) 10758 ( 0.00%) 70.31
ssh 64871 ( 0.50%) 10286572 ( 0.11%) 158.57
dns 2605 ( 0.02%) 1725491 ( 0.02%) 662.38
bgp 1032 ( 0.01%) 127998 ( 0.00%) 124.03
napster 28 ( 0.00%) 2073 ( 0.00%) 74.04
realaud 530 ( 0.00%) 377088 ( 0.00%) 711.49
rtsp 13910 ( 0.11%) 958762 ( 0.01%) 68.93
icecast 10172 ( 0.08%) 15161879 ( 0.17%) 1490.55
other 2478715 ( 19.17%) 1559408538 ( 17.34%) 629.12
udp 1666507 ( 12.89%) 322495956 ( 3.59%) 193.52
dns 1307971 ( 10.12%) 171135729 ( 1.90%) 130.84
realaud 11803 ( 0.09%) 5290447 ( 0.06%) 448.23
halflif 14 ( 0.00%) 1302 ( 0.00%) 93.00
starcra 18 ( 0.00%) 3598 ( 0.00%) 199.89
everque 99 ( 0.00%) 9847 ( 0.00%) 99.46
unreal 22 ( 0.00%) 2778 ( 0.00%) 126.27
quake 12 ( 0.00%) 1163 ( 0.00%) 96.92
cuseeme 5 ( 0.00%) 484 ( 0.00%) 96.80
other 346552 ( 2.68%) 146048942 ( 1.62%) 421.43
icmp 346281 ( 2.68%) 28227120 ( 0.31%) 81.52
ip6 6561 ( 0.05%) 7953679 ( 0.09%) 1212.27
other 8768 ( 0.07%) 8838804 ( 0.10%) 1008.08
frag 267 ( 0.00%) 208624 ( 0.00%) 781.36
ip6 306664 ( 2.37%) 55061612 ( 0.61%) 179.55
tcp6 257367 ( 1.99%) 39621557 ( 0.44%) 153.95
http(s) 4 ( 0.00%) 883 ( 0.00%) 220.75
http(c) 170 ( 0.00%) 20995 ( 0.00%) 123.50
smtp 119 ( 0.00%) 42226 ( 0.00%) 354.84
ftp 233386 ( 1.81%) 20080237 ( 0.22%) 86.04
dns 12 ( 0.00%) 1283 ( 0.00%) 106.92
bgp 163 ( 0.00%) 20068 ( 0.00%) 123.12
icecast 19906 ( 0.15%) 19047476 ( 0.21%) 956.87
other 3607 ( 0.03%) 408389 ( 0.00%) 113.22
udp6 33691 ( 0.26%) 5831203 ( 0.06%) 173.08
dns 31635 ( 0.24%) 5596773 ( 0.06%) 176.92
other 2056 ( 0.02%) 234430 ( 0.00%) 114.02
icmp6 8662 ( 0.07%) 1643084 ( 0.02%) 189.69
ip6 1497 ( 0.01%) 265408 ( 0.00%) 177.29
pim6 61 ( 0.00%) 7212 ( 0.00%) 118.23
other6 5386 ( 0.04%) 7693148 ( 0.09%) 1428.36
tcpdump file: 200701110900.dump.gz (327.52 MB)