Traffic Trace Info
DumpFile: 200611171400.dump
FileSize: 5150.58MB
Id: 200611171400
StartTime: Fri Nov 17 14:00:01 2006
EndTime: Fri Nov 17 14:15:01 2006
TotalTime: 900.53 seconds
TotalCapSize: -105.47MB CapLen: 96 bytes
# of packets: 76021709 (16428.15MB)
AvgRate: 153.06Mbps stddev:13.44M
IP flow (unique src/dst pair) Information
# of flows: 395856 (avg. 192.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.0% 9.8% 3.4% 1.9% 1.0% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 183402
Top 10 bandwidth usage (bytes/total in %):
19.8% 10.0% 9.9% 7.6% 6.2% 4.4% 4.2% 3.6% 3.5% 2.1%
# of IPv6 addresses: 1754
Top 10 bandwidth usage (bytes/total in %):
47.7% 47.6% 18.4% 6.4% 5.8% 4.0% 3.0% 3.0% 2.9% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200611171400.pktlen.png)
detailed numbers
[ 32- 63]: 60958554
[ 64- 127]: 5197044
[ 128- 255]: 460363
[ 256- 511]: 472654
[ 512- 1023]: 470963
[ 1024- 2047]: 8462131
Protocol Breakdown
![[protocol breakdown chart]](200611171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 76021709 (100.00%) 17226159128 (100.00%) 226.60
ip 75879480 ( 99.81%) 17193568713 ( 99.81%) 226.59
tcp 16814954 ( 22.12%) 13385872594 ( 77.71%) 796.07
http(s) 7197010 ( 9.47%) 9490029486 ( 55.09%) 1318.61
http(c) 5340869 ( 7.03%) 661135064 ( 3.84%) 123.79
squid 123127 ( 0.16%) 72097455 ( 0.42%) 585.55
smtp 280608 ( 0.37%) 80957548 ( 0.47%) 288.51
nntp 13865 ( 0.02%) 6353433 ( 0.04%) 458.24
ftp 53751 ( 0.07%) 4435545 ( 0.03%) 82.52
pop3 8530 ( 0.01%) 2588554 ( 0.02%) 303.46
imap 5209 ( 0.01%) 2094479 ( 0.01%) 402.09
telnet 374 ( 0.00%) 35077 ( 0.00%) 93.79
ssh 9613 ( 0.01%) 2666809 ( 0.02%) 277.42
dns 2571 ( 0.00%) 1707505 ( 0.01%) 664.14
bgp 1028 ( 0.00%) 124637 ( 0.00%) 121.24
napster 21 ( 0.00%) 1304 ( 0.00%) 62.10
realaud 473 ( 0.00%) 88262 ( 0.00%) 186.60
rtsp 158719 ( 0.21%) 189411544 ( 1.10%) 1193.38
icecast 59454 ( 0.08%) 49748850 ( 0.29%) 836.76
hotline 16 ( 0.00%) 1163 ( 0.00%) 72.69
other 3559701 ( 4.68%) 2822394979 ( 16.38%) 792.87
udp 58467339 ( 76.91%) 3676964999 ( 21.35%) 62.89
dns 58226654 ( 76.59%) 3585268228 ( 20.81%) 61.57
realaud 927 ( 0.00%) 56278 ( 0.00%) 60.71
halflif 7 ( 0.00%) 567 ( 0.00%) 81.00
starcra 11 ( 0.00%) 1385 ( 0.00%) 125.91
everque 20 ( 0.00%) 3273 ( 0.00%) 163.65
unreal 8 ( 0.00%) 1417 ( 0.00%) 177.12
quake 17 ( 0.00%) 2165 ( 0.00%) 127.35
cuseeme 3 ( 0.00%) 260 ( 0.00%) 86.67
other 239504 ( 0.32%) 91600554 ( 0.53%) 382.46
icmp 124050 ( 0.16%) 10921975 ( 0.06%) 88.04
ip6 6760 ( 0.01%) 7883151 ( 0.05%) 1166.15
other 466377 ( 0.61%) 111925994 ( 0.65%) 239.99
frag 716 ( 0.00%) 515115 ( 0.00%) 719.43
ip6 142226 ( 0.19%) 32590235 ( 0.19%) 229.14
tcp6 72400 ( 0.10%) 9181343 ( 0.05%) 126.81
http(s) 957 ( 0.00%) 1042779 ( 0.01%) 1089.63
http(c) 59659 ( 0.08%) 6541998 ( 0.04%) 109.66
squid 25 ( 0.00%) 1950 ( 0.00%) 78.00
smtp 385 ( 0.00%) 174297 ( 0.00%) 452.72
nntp 395 ( 0.00%) 50012 ( 0.00%) 126.61
ftp 523 ( 0.00%) 371978 ( 0.00%) 711.24
imap 6190 ( 0.01%) 569195 ( 0.00%) 91.95
ssh 60 ( 0.00%) 5928 ( 0.00%) 98.80
dns 8 ( 0.00%) 762 ( 0.00%) 95.25
bgp 238 ( 0.00%) 23326 ( 0.00%) 98.01
other 3960 ( 0.01%) 399118 ( 0.00%) 100.79
udp6 44879 ( 0.06%) 6366292 ( 0.04%) 141.85
dns 40287 ( 0.05%) 6016860 ( 0.03%) 149.35
other 4592 ( 0.01%) 349432 ( 0.00%) 76.10
icmp6 13728 ( 0.02%) 1683500 ( 0.01%) 122.63
ip6 484 ( 0.00%) 81609 ( 0.00%) 168.61
pim6 45 ( 0.00%) 5616 ( 0.00%) 124.80
other6 10690 ( 0.01%) 15271875 ( 0.09%) 1428.61
tcpdump file: 200611171400.dump.gz (1019.55 MB)