Traffic Trace Info
DumpFile: 200610141400.dump
FileSize: 722.59MB
Id: 200610141400
StartTime: Sat Oct 14 14:00:00 2006
EndTime: Sat Oct 14 14:15:00 2006
TotalTime: 899.97 seconds
TotalCapSize: 567.11MB CapLen: 96 bytes
# of packets: 10187544 (6107.28MB)
AvgRate: 56.93Mbps stddev:13.71M
IP flow (unique src/dst pair) Information
# of flows: 339058 (avg. 30.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 4.2% 1.8% 1.6% 1.4% 1.0% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 190391
Top 10 bandwidth usage (bytes/total in %):
10.7% 9.5% 6.4% 6.4% 4.4% 4.3% 3.6% 3.5% 3.1% 2.3%
# of IPv6 addresses: 1300
Top 10 bandwidth usage (bytes/total in %):
32.5% 29.6% 16.1% 9.6% 7.9% 4.7% 3.5% 3.4% 3.0% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200610141400.pktlen.png)
detailed numbers
[ 32- 63]: 2140157
[ 64- 127]: 3295172
[ 128- 255]: 334479
[ 256- 511]: 332244
[ 512- 1023]: 293831
[ 1024- 2047]: 3791661
Protocol Breakdown
![[protocol breakdown chart]](200610141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 10187544 (100.00%) 6403943167 (100.00%) 628.61
ip 10122268 ( 99.36%) 6391665753 ( 99.81%) 631.45
tcp 8603538 ( 84.45%) 6107587811 ( 95.37%) 709.89
http(s) 3040892 ( 29.85%) 4002293391 ( 62.50%) 1316.16
http(c) 2377542 ( 23.34%) 266250943 ( 4.16%) 111.99
squid 232879 ( 2.29%) 183493575 ( 2.87%) 787.94
smtp 219409 ( 2.15%) 53034855 ( 0.83%) 241.72
nntp 9756 ( 0.10%) 4462212 ( 0.07%) 457.38
ftp 161927 ( 1.59%) 16484228 ( 0.26%) 101.80
pop3 6203 ( 0.06%) 2597440 ( 0.04%) 418.74
imap 4217 ( 0.04%) 1781316 ( 0.03%) 422.41
telnet 45100 ( 0.44%) 26352527 ( 0.41%) 584.31
ssh 632684 ( 6.21%) 457825979 ( 7.15%) 723.63
dns 1492 ( 0.01%) 770124 ( 0.01%) 516.17
bgp 1232 ( 0.01%) 153251 ( 0.00%) 124.39
napster 130 ( 0.00%) 12941 ( 0.00%) 99.55
realaud 3061 ( 0.03%) 2904384 ( 0.05%) 948.84
rtsp 53982 ( 0.53%) 3425880 ( 0.05%) 63.46
icecast 5143 ( 0.05%) 343226 ( 0.01%) 66.74
other 1807875 ( 17.75%) 1085400567 ( 16.95%) 600.37
udp 1234747 ( 12.12%) 221143987 ( 3.45%) 179.10
dns 944613 ( 9.27%) 109976096 ( 1.72%) 116.42
realaud 1002 ( 0.01%) 100515 ( 0.00%) 100.31
halflif 16 ( 0.00%) 2099 ( 0.00%) 131.19
starcra 8 ( 0.00%) 937 ( 0.00%) 117.12
everque 12 ( 0.00%) 1556 ( 0.00%) 129.67
unreal 12 ( 0.00%) 1277 ( 0.00%) 106.42
quake 8 ( 0.00%) 650 ( 0.00%) 81.25
cuseeme 4 ( 0.00%) 363 ( 0.00%) 90.75
other 289069 ( 2.84%) 111057406 ( 1.73%) 384.19
icmp 79946 ( 0.78%) 7660076 ( 0.12%) 95.82
ipsec 27 ( 0.00%) 4050 ( 0.00%) 150.00
ip6 347 ( 0.00%) 38666 ( 0.00%) 111.43
other 203663 ( 2.00%) 55231163 ( 0.86%) 271.19
frag 340 ( 0.00%) 303409 ( 0.00%) 892.38
ip6 65276 ( 0.64%) 12277414 ( 0.19%) 188.08
tcp6 20196 ( 0.20%) 2452118 ( 0.04%) 121.42
http(s) 22 ( 0.00%) 10910 ( 0.00%) 495.91
http(c) 16199 ( 0.16%) 1995307 ( 0.03%) 123.17
squid 205 ( 0.00%) 15982 ( 0.00%) 77.96
smtp 83 ( 0.00%) 40673 ( 0.00%) 490.04
ssh 5 ( 0.00%) 478 ( 0.00%) 95.60
bgp 119 ( 0.00%) 12307 ( 0.00%) 103.42
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 3562 ( 0.03%) 376387 ( 0.01%) 105.67
udp6 29711 ( 0.29%) 4294448 ( 0.07%) 144.54
dns 29658 ( 0.29%) 4288660 ( 0.07%) 144.60
other 53 ( 0.00%) 5788 ( 0.00%) 109.21
icmp6 12412 ( 0.12%) 1835857 ( 0.03%) 147.91
ip6 282 ( 0.00%) 47091 ( 0.00%) 166.99
pim6 59 ( 0.00%) 6864 ( 0.00%) 116.34
other6 2616 ( 0.03%) 3641036 ( 0.06%) 1391.83
tcpdump file: 200610141400.dump.gz (265.53 MB)