Traffic Trace Info
DumpFile: 200611061400.dump
FileSize: 1201.58MB
Id: 200611061400
StartTime: Mon Nov 6 14:00:00 2006
EndTime: Mon Nov 6 14:15:00 2006
TotalTime: 899.86 seconds
TotalCapSize: 944.72MB CapLen: 96 bytes
# of packets: 16831174 (10339.22MB)
AvgRate: 96.40Mbps stddev:15.57M
IP flow (unique src/dst pair) Information
# of flows: 517709 (avg. 32.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.9% 2.9% 1.1% 0.9% 0.8% 0.7% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 282628
Top 10 bandwidth usage (bytes/total in %):
21.4% 13.4% 8.3% 3.0% 2.9% 2.9% 2.5% 2.1% 1.8% 1.8%
# of IPv6 addresses: 1598
Top 10 bandwidth usage (bytes/total in %):
52.5% 52.5% 17.1% 3.0% 3.0% 2.7% 2.3% 2.1% 2.0% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200611061400.pktlen.png)
detailed numbers
[ 32- 63]: 3938257
[ 64- 127]: 4725737
[ 128- 255]: 599679
[ 256- 511]: 518406
[ 512- 1023]: 506368
[ 1024- 2047]: 6542727
Protocol Breakdown
![[protocol breakdown chart]](200611061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16831174 (100.00%) 10841457624 (100.00%) 644.13
ip 16710045 ( 99.28%) 10811696945 ( 99.73%) 647.02
tcp 14833226 ( 88.13%) 10486569985 ( 96.73%) 706.96
http(s) 4986431 ( 29.63%) 6158893752 ( 56.81%) 1235.13
http(c) 3994365 ( 23.73%) 597812961 ( 5.51%) 149.66
squid 153563 ( 0.91%) 114999363 ( 1.06%) 748.87
smtp 334064 ( 1.98%) 113828026 ( 1.05%) 340.74
nntp 7622 ( 0.05%) 3578859 ( 0.03%) 469.54
ftp 96835 ( 0.58%) 13280392 ( 0.12%) 137.14
pop3 10721 ( 0.06%) 2621048 ( 0.02%) 244.48
imap 6637 ( 0.04%) 2243373 ( 0.02%) 338.01
telnet 28419 ( 0.17%) 8993093 ( 0.08%) 316.45
ssh 12835 ( 0.08%) 5474297 ( 0.05%) 426.51
dns 2627 ( 0.02%) 1909326 ( 0.02%) 726.81
bgp 736 ( 0.00%) 82347 ( 0.00%) 111.88
napster 78 ( 0.00%) 7319 ( 0.00%) 93.83
realaud 2579 ( 0.02%) 1396648 ( 0.01%) 541.55
rtsp 59103 ( 0.35%) 64946970 ( 0.60%) 1098.88
icecast 32836 ( 0.20%) 35487040 ( 0.33%) 1080.74
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 5103763 ( 30.32%) 3361014451 ( 31.00%) 658.54
udp 1626155 ( 9.66%) 283973623 ( 2.62%) 174.63
dns 1292499 ( 7.68%) 162619576 ( 1.50%) 125.82
realaud 941 ( 0.01%) 81897 ( 0.00%) 87.03
halflif 13 ( 0.00%) 3307 ( 0.00%) 254.38
starcra 4 ( 0.00%) 666 ( 0.00%) 166.50
everque 29 ( 0.00%) 6187 ( 0.00%) 213.34
unreal 32 ( 0.00%) 4161 ( 0.00%) 130.03
quake 16 ( 0.00%) 2938 ( 0.00%) 183.62
cuseeme 2 ( 0.00%) 1406 ( 0.00%) 703.00
other 332614 ( 1.98%) 121247678 ( 1.12%) 364.53
icmp 148842 ( 0.88%) 14154935 ( 0.13%) 95.10
ip6 6674 ( 0.04%) 8010470 ( 0.07%) 1200.25
other 95148 ( 0.57%) 18987932 ( 0.18%) 199.56
frag 473 ( 0.00%) 398086 ( 0.00%) 841.62
ip6 121126 ( 0.72%) 29760499 ( 0.27%) 245.70
tcp6 53409 ( 0.32%) 6244802 ( 0.06%) 116.92
http(s) 230 ( 0.00%) 173385 ( 0.00%) 753.85
http(c) 48896 ( 0.29%) 5449816 ( 0.05%) 111.46
squid 24 ( 0.00%) 1872 ( 0.00%) 78.00
smtp 80 ( 0.00%) 11720 ( 0.00%) 146.50
nntp 974 ( 0.01%) 232646 ( 0.00%) 238.86
ftp 23 ( 0.00%) 2475 ( 0.00%) 107.61
ssh 97 ( 0.00%) 12218 ( 0.00%) 125.96
dns 3 ( 0.00%) 294 ( 0.00%) 98.00
bgp 192 ( 0.00%) 19214 ( 0.00%) 100.07
other 2890 ( 0.02%) 341162 ( 0.00%) 118.05
udp6 43592 ( 0.26%) 6564597 ( 0.06%) 150.59
dns 43284 ( 0.26%) 6533513 ( 0.06%) 150.95
other 308 ( 0.00%) 31084 ( 0.00%) 100.92
icmp6 12819 ( 0.08%) 1468287 ( 0.01%) 114.54
ip6 429 ( 0.00%) 72742 ( 0.00%) 169.56
pim6 98 ( 0.00%) 11104 ( 0.00%) 113.31
other6 10779 ( 0.06%) 15398967 ( 0.14%) 1428.61
tcpdump file: 200611061400.dump.gz (439.41 MB)