Traffic Trace Info
DumpFile: 200611201400.dump
FileSize: 5178.78MB
Id: 200611201400
StartTime: Mon Nov 20 14:00:01 2006
EndTime: Mon Nov 20 14:15:01 2006
TotalTime: 900.00 seconds
TotalCapSize: -85.58MB CapLen: 96 bytes
# of packets: 76565705 (16648.75MB)
AvgRate: 155.19Mbps stddev:12.57M
IP flow (unique src/dst pair) Information
# of flows: 473088 (avg. 161.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.9% 9.7% 3.9% 2.9% 1.1% 1.0% 0.8% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 249521
Top 10 bandwidth usage (bytes/total in %):
19.6% 9.9% 9.7% 6.6% 5.5% 4.9% 4.1% 4.1% 4.0% 3.8%
# of IPv6 addresses: 1389
Top 10 bandwidth usage (bytes/total in %):
65.2% 65.2% 5.4% 4.2% 3.6% 2.2% 2.2% 2.1% 1.8% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200611201400.pktlen.png)
detailed numbers
[ 32- 63]: 61130702
[ 64- 127]: 5242640
[ 128- 255]: 461032
[ 256- 511]: 527845
[ 512- 1023]: 694487
[ 1024- 2047]: 8508999
Protocol Breakdown
![[protocol breakdown chart]](200611201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 76565705 (100.00%) 17457479484 (100.00%) 228.01
ip 76490918 ( 99.90%) 17433469435 ( 99.86%) 227.92
tcp 16797918 ( 21.94%) 12974904609 ( 74.32%) 772.41
http(s) 6511963 ( 8.51%) 8475153055 ( 48.55%) 1301.47
http(c) 4518235 ( 5.90%) 612665478 ( 3.51%) 135.60
squid 143300 ( 0.19%) 33685743 ( 0.19%) 235.07
smtp 307454 ( 0.40%) 101116047 ( 0.58%) 328.88
nntp 8095 ( 0.01%) 2317153 ( 0.01%) 286.24
ftp 27759 ( 0.04%) 2549350 ( 0.01%) 91.84
pop3 9726 ( 0.01%) 2534189 ( 0.01%) 260.56
imap 6164 ( 0.01%) 2165650 ( 0.01%) 351.34
telnet 587 ( 0.00%) 59734 ( 0.00%) 101.76
ssh 4679 ( 0.01%) 2423772 ( 0.01%) 518.01
dns 2698 ( 0.00%) 1801128 ( 0.01%) 667.58
bgp 1028 ( 0.00%) 134693 ( 0.00%) 131.02
napster 180 ( 0.00%) 67677 ( 0.00%) 375.98
realaud 4920 ( 0.01%) 3704510 ( 0.02%) 752.95
rtsp 386813 ( 0.51%) 163103967 ( 0.93%) 421.66
icecast 39721 ( 0.05%) 31436824 ( 0.18%) 791.44
hotline 5 ( 0.00%) 308 ( 0.00%) 61.60
other 4824571 ( 6.30%) 3539984131 ( 20.28%) 733.74
udp 58470390 ( 76.37%) 3651998852 ( 20.92%) 62.46
dns 58309701 ( 76.16%) 3584909816 ( 20.54%) 61.48
rip 2 ( 0.00%) 488 ( 0.00%) 244.00
realaud 8772 ( 0.01%) 8383988 ( 0.05%) 955.77
halflif 13 ( 0.00%) 1557 ( 0.00%) 119.77
starcra 13 ( 0.00%) 1999 ( 0.00%) 153.77
everque 21 ( 0.00%) 2605 ( 0.00%) 124.05
unreal 11 ( 0.00%) 1908 ( 0.00%) 173.45
quake 16 ( 0.00%) 1351 ( 0.00%) 84.44
cuseeme 2 ( 0.00%) 161 ( 0.00%) 80.50
other 151837 ( 0.20%) 58694464 ( 0.34%) 386.56
icmp 190983 ( 0.25%) 15932903 ( 0.09%) 83.43
ip6 6650 ( 0.01%) 7738586 ( 0.04%) 1163.70
other 1024977 ( 1.34%) 782894485 ( 4.48%) 763.82
frag 441 ( 0.00%) 347161 ( 0.00%) 787.21
ip6 74784 ( 0.10%) 24009869 ( 0.14%) 321.06
tcp6 12490 ( 0.02%) 1731554 ( 0.01%) 138.64
http(s) 504 ( 0.00%) 520048 ( 0.00%) 1031.84
http(c) 1098 ( 0.00%) 189661 ( 0.00%) 172.73
squid 64 ( 0.00%) 4992 ( 0.00%) 78.00
smtp 314 ( 0.00%) 126971 ( 0.00%) 404.37
nntp 498 ( 0.00%) 62996 ( 0.00%) 126.50
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 281 ( 0.00%) 29933 ( 0.00%) 106.52
icecast 7209 ( 0.01%) 533466 ( 0.00%) 74.00
other 2515 ( 0.00%) 262852 ( 0.00%) 104.51
udp6 36888 ( 0.05%) 5151422 ( 0.03%) 139.65
dns 36217 ( 0.05%) 5092936 ( 0.03%) 140.62
other 671 ( 0.00%) 58486 ( 0.00%) 87.16
icmp6 14137 ( 0.02%) 1677875 ( 0.01%) 118.69
ip6 467 ( 0.00%) 78300 ( 0.00%) 167.67
pim6 46 ( 0.00%) 5716 ( 0.00%) 124.26
other6 10756 ( 0.01%) 15365002 ( 0.09%) 1428.51
tcpdump file: 200611201400.dump.gz (1051.71 MB)