Traffic Trace Info
DumpFile: 200610201400.dump
FileSize: 1202.61MB
Id: 200610201400
StartTime: Fri Oct 20 14:00:01 2006
EndTime: Fri Oct 20 14:15:00 2006
TotalTime: 899.74 seconds
TotalCapSize: 941.15MB CapLen: 96 bytes
# of packets: 17129781 (10621.82MB)
AvgRate: 99.02Mbps stddev:9.96M
IP flow (unique src/dst pair) Information
# of flows: 430343 (avg. 39.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 4.8% 1.8% 1.5% 1.4% 1.3% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 241187
Top 10 bandwidth usage (bytes/total in %):
14.3% 8.2% 7.7% 7.2% 7.2% 6.5% 4.9% 2.6% 2.2% 1.8%
# of IPv6 addresses: 1098
Top 10 bandwidth usage (bytes/total in %):
32.7% 31.2% 18.1% 11.8% 7.8% 6.6% 6.3% 4.8% 3.3% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200610201400.pktlen.png)
detailed numbers
[ 32- 63]: 3975898
[ 64- 127]: 5105726
[ 128- 255]: 427170
[ 256- 511]: 428612
[ 512- 1023]: 398403
[ 1024- 2047]: 6793972
Protocol Breakdown
![[protocol breakdown chart]](200610201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17129781 (100.00%) 11137784455 (100.00%) 650.20
ip 17065684 ( 99.63%) 11126180399 ( 99.90%) 651.96
tcp 14566476 ( 85.04%) 10085130001 ( 90.55%) 692.35
http(s) 5621276 ( 32.82%) 7239079355 ( 65.00%) 1287.80
http(c) 5065590 ( 29.57%) 584093828 ( 5.24%) 115.31
squid 181079 ( 1.06%) 129374622 ( 1.16%) 714.47
smtp 280709 ( 1.64%) 82405383 ( 0.74%) 293.56
nntp 10602 ( 0.06%) 5117527 ( 0.05%) 482.69
ftp 9477 ( 0.06%) 761609 ( 0.01%) 80.36
pop3 10573 ( 0.06%) 2306736 ( 0.02%) 218.17
imap 5274 ( 0.03%) 2366752 ( 0.02%) 448.76
telnet 26391 ( 0.15%) 15483666 ( 0.14%) 586.70
ssh 8376 ( 0.05%) 1754873 ( 0.02%) 209.51
dns 1201 ( 0.01%) 86739 ( 0.00%) 72.22
bgp 1200 ( 0.01%) 150513 ( 0.00%) 125.43
napster 813 ( 0.00%) 63897 ( 0.00%) 78.59
realaud 360 ( 0.00%) 35434 ( 0.00%) 98.43
rtsp 25565 ( 0.15%) 14200043 ( 0.13%) 555.45
icecast 5905 ( 0.03%) 1206366 ( 0.01%) 204.30
hotline 4 ( 0.00%) 248 ( 0.00%) 62.00
other 3312069 ( 19.34%) 2006641624 ( 18.02%) 605.86
udp 1324200 ( 7.73%) 203931481 ( 1.83%) 154.00
dns 1164126 ( 6.80%) 154151966 ( 1.38%) 132.42
realaud 4785 ( 0.03%) 2612705 ( 0.02%) 546.02
halflif 11 ( 0.00%) 2140 ( 0.00%) 194.55
starcra 11261 ( 0.07%) 751957 ( 0.01%) 66.78
everque 19 ( 0.00%) 2290 ( 0.00%) 120.53
unreal 15 ( 0.00%) 1817 ( 0.00%) 121.13
quake 12 ( 0.00%) 2234 ( 0.00%) 186.17
cuseeme 4 ( 0.00%) 1697 ( 0.00%) 424.25
other 143966 ( 0.84%) 46403362 ( 0.42%) 322.32
icmp 136960 ( 0.80%) 11775830 ( 0.11%) 85.98
ip6 720 ( 0.00%) 85535 ( 0.00%) 118.80
other 1037328 ( 6.06%) 825257552 ( 7.41%) 795.56
frag 425 ( 0.00%) 344675 ( 0.00%) 811.00
ip6 64094 ( 0.37%) 11603876 ( 0.10%) 181.04
tcp6 23898 ( 0.14%) 2806063 ( 0.03%) 117.42
http(s) 279 ( 0.00%) 185329 ( 0.00%) 664.26
http(c) 19884 ( 0.12%) 2224040 ( 0.02%) 111.85
smtp 155 ( 0.00%) 40639 ( 0.00%) 262.19
ssh 810 ( 0.00%) 88684 ( 0.00%) 109.49
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 189 ( 0.00%) 18915 ( 0.00%) 100.08
other 2574 ( 0.02%) 247821 ( 0.00%) 96.28
udp6 32237 ( 0.19%) 4404268 ( 0.04%) 136.62
dns 32209 ( 0.19%) 4400980 ( 0.04%) 136.64
other 28 ( 0.00%) 3288 ( 0.00%) 117.43
icmp6 5235 ( 0.03%) 751986 ( 0.01%) 143.65
ip6 82 ( 0.00%) 16015 ( 0.00%) 195.30
pim6 53 ( 0.00%) 6328 ( 0.00%) 119.40
other6 2589 ( 0.02%) 3619216 ( 0.03%) 1397.92
tcpdump file: 200610201400.dump.gz (435.81 MB)