Traffic Trace Info
DumpFile: 200611161400.dump
FileSize: 5149.93MB
Id: 200611161400
StartTime: Thu Nov 16 14:00:02 2006
EndTime: Thu Nov 16 14:15:01 2006
TotalTime: 899.06 seconds
TotalCapSize: -104.49MB CapLen: 96 bytes
# of packets: 75914756 (15174.85MB)
AvgRate: 141.60Mbps stddev:11.50M
IP flow (unique src/dst pair) Information
# of flows: 478192 (avg. 158.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.8% 10.7% 4.2% 2.3% 1.9% 1.1% 1.0% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 246313
Top 10 bandwidth usage (bytes/total in %):
21.5% 10.8% 10.7% 6.0% 5.6% 5.5% 5.3% 4.4% 3.6% 3.1%
# of IPv6 addresses: 1727
Top 10 bandwidth usage (bytes/total in %):
53.2% 53.2% 7.7% 7.6% 6.4% 5.2% 3.4% 3.2% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200611161400.pktlen.png)
detailed numbers
[ 32- 63]: 61341475
[ 64- 127]: 5261198
[ 128- 255]: 661512
[ 256- 511]: 484638
[ 512- 1023]: 600333
[ 1024- 2047]: 7565600
Protocol Breakdown
![[protocol breakdown chart]](200611161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 75914756 (100.00%) 15911980799 (100.00%) 209.60
ip 75791578 ( 99.84%) 15882896686 ( 99.82%) 209.56
tcp 16780549 ( 22.10%) 12136139642 ( 76.27%) 723.23
http(s) 5850194 ( 7.71%) 7529401365 ( 47.32%) 1287.03
http(c) 4770447 ( 6.28%) 609848176 ( 3.83%) 127.84
squid 178382 ( 0.23%) 85600031 ( 0.54%) 479.87
smtp 315241 ( 0.42%) 94320978 ( 0.59%) 299.20
nntp 6225 ( 0.01%) 2973993 ( 0.02%) 477.75
ftp 847800 ( 1.12%) 719475565 ( 4.52%) 848.64
pop3 8517 ( 0.01%) 1665335 ( 0.01%) 195.53
imap 5311 ( 0.01%) 2677063 ( 0.02%) 504.06
telnet 16745 ( 0.02%) 4295092 ( 0.03%) 256.50
ssh 539494 ( 0.71%) 74826788 ( 0.47%) 138.70
dns 5480 ( 0.01%) 1896495 ( 0.01%) 346.08
bgp 1112 ( 0.00%) 129936 ( 0.00%) 116.85
realaud 38979 ( 0.05%) 33386639 ( 0.21%) 856.53
rtsp 89621 ( 0.12%) 59432809 ( 0.37%) 663.16
icecast 39273 ( 0.05%) 38394685 ( 0.24%) 977.64
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 4067705 ( 5.36%) 2877813196 ( 18.09%) 707.48
udp 58657522 ( 77.27%) 3700270607 ( 23.25%) 63.08
dns 58348148 ( 76.86%) 3592652771 ( 22.58%) 61.57
realaud 1194 ( 0.00%) 442543 ( 0.00%) 370.64
halflif 23 ( 0.00%) 4971 ( 0.00%) 216.13
starcra 13 ( 0.00%) 2473 ( 0.00%) 190.23
everque 26 ( 0.00%) 4814 ( 0.00%) 185.15
unreal 17 ( 0.00%) 3294 ( 0.00%) 193.76
quake 21 ( 0.00%) 4150 ( 0.00%) 197.62
cuseeme 3 ( 0.00%) 463 ( 0.00%) 154.33
other 306461 ( 0.40%) 106935790 ( 0.67%) 348.94
icmp 186449 ( 0.25%) 16151594 ( 0.10%) 86.63
ip6 6689 ( 0.01%) 7823522 ( 0.05%) 1169.61
other 160369 ( 0.21%) 22511321 ( 0.14%) 140.37
frag 3870 ( 0.01%) 3177705 ( 0.02%) 821.11
ip6 123175 ( 0.16%) 29083933 ( 0.18%) 236.12
tcp6 50085 ( 0.07%) 5456564 ( 0.03%) 108.95
http(s) 143 ( 0.00%) 86776 ( 0.00%) 606.83
http(c) 18615 ( 0.02%) 2222132 ( 0.01%) 119.37
squid 1539 ( 0.00%) 135942 ( 0.00%) 88.33
smtp 180 ( 0.00%) 107911 ( 0.00%) 599.51
nntp 1375 ( 0.00%) 288213 ( 0.00%) 209.61
ftp 226 ( 0.00%) 23419 ( 0.00%) 103.62
ssh 114 ( 0.00%) 20412 ( 0.00%) 179.05
bgp 240 ( 0.00%) 24967 ( 0.00%) 104.03
other 27653 ( 0.04%) 2546792 ( 0.02%) 92.10
udp6 47243 ( 0.06%) 6510963 ( 0.04%) 137.82
dns 42995 ( 0.06%) 6184811 ( 0.04%) 143.85
other 4248 ( 0.01%) 326152 ( 0.00%) 76.78
icmp6 14672 ( 0.02%) 1790738 ( 0.01%) 122.05
ip6 460 ( 0.00%) 76948 ( 0.00%) 167.28
pim6 45 ( 0.00%) 5580 ( 0.00%) 124.00
other6 10670 ( 0.01%) 15243140 ( 0.10%) 1428.60
tcpdump file: 200611161400.dump.gz (1040.35 MB)