Traffic Trace Info
DumpFile: 200611261400.dump
FileSize: 789.46MB
Id: 200611261400
StartTime: Sun Nov 26 14:00:00 2006
EndTime: Sun Nov 26 14:15:01 2006
TotalTime: 900.31 seconds
TotalCapSize: 616.92MB CapLen: 96 bytes
# of packets: 11305491 (8612.31MB)
AvgRate: 80.25Mbps stddev:6.28M
IP flow (unique src/dst pair) Information
# of flows: 341149 (avg. 33.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.4% 6.5% 5.7% 5.2% 2.7% 2.4% 2.3% 1.7% 1.7% 1.5%
IP address Information
# of IPv4 addresses: 185183
Top 10 bandwidth usage (bytes/total in %):
21.7% 12.6% 11.5% 8.2% 7.7% 6.5% 6.1% 5.8% 5.3% 5.3%
# of IPv6 addresses: 1740
Top 10 bandwidth usage (bytes/total in %):
58.9% 58.9% 11.7% 4.3% 3.9% 3.2% 1.7% 1.6% 1.5% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200611261400.pktlen.png)
detailed numbers
[ 32- 63]: 2020681
[ 64- 127]: 2894866
[ 128- 255]: 290192
[ 256- 511]: 252401
[ 512- 1023]: 212057
[ 1024- 2047]: 5635294
Protocol Breakdown
![[protocol breakdown chart]](200611261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11305491 (100.00%) 9030663986 (100.00%) 798.79
ip 11212595 ( 99.18%) 9004182396 ( 99.71%) 803.04
tcp 9614853 ( 85.05%) 8738503808 ( 96.76%) 908.85
http(s) 2711834 ( 23.99%) 3562607657 ( 39.45%) 1313.73
http(c) 1443014 ( 12.76%) 145588726 ( 1.61%) 100.89
squid 246688 ( 2.18%) 198961728 ( 2.20%) 806.53
smtp 289603 ( 2.56%) 110935609 ( 1.23%) 383.06
nntp 8514 ( 0.08%) 6266416 ( 0.07%) 736.01
ftp 133645 ( 1.18%) 74767282 ( 0.83%) 559.45
pop3 3919 ( 0.03%) 536889 ( 0.01%) 137.00
imap 1195 ( 0.01%) 207273 ( 0.00%) 173.45
telnet 79 ( 0.00%) 6796 ( 0.00%) 86.03
ssh 10166 ( 0.09%) 10524326 ( 0.12%) 1035.25
dns 2808 ( 0.02%) 1722178 ( 0.02%) 613.31
bgp 680 ( 0.01%) 73672 ( 0.00%) 108.34
napster 225 ( 0.00%) 14439 ( 0.00%) 64.17
realaud 5350 ( 0.05%) 2791094 ( 0.03%) 521.70
rtsp 115028 ( 1.02%) 49387750 ( 0.55%) 429.35
icecast 110710 ( 0.98%) 63046114 ( 0.70%) 569.47
other 4531390 ( 40.08%) 4511065559 ( 49.95%) 995.51
udp 1307901 ( 11.57%) 206277551 ( 2.28%) 157.72
dns 1094705 ( 9.68%) 128026262 ( 1.42%) 116.95
realaud 4529 ( 0.04%) 344895 ( 0.00%) 76.15
halflif 12 ( 0.00%) 991 ( 0.00%) 82.58
starcra 4 ( 0.00%) 546 ( 0.00%) 136.50
everque 28 ( 0.00%) 3363 ( 0.00%) 120.11
unreal 12 ( 0.00%) 1462 ( 0.00%) 121.83
quake 14 ( 0.00%) 1195 ( 0.00%) 85.36
cuseeme 6 ( 0.00%) 547 ( 0.00%) 91.17
other 208584 ( 1.84%) 77891840 ( 0.86%) 373.43
icmp 173894 ( 1.54%) 14755485 ( 0.16%) 84.85
ipsec 27 ( 0.00%) 4050 ( 0.00%) 150.00
ip6 6747 ( 0.06%) 7977381 ( 0.09%) 1182.36
other 109173 ( 0.97%) 36664121 ( 0.41%) 335.84
frag 1023 ( 0.01%) 1175599 ( 0.01%) 1149.17
ip6 92896 ( 0.82%) 26481590 ( 0.29%) 285.07
tcp6 32553 ( 0.29%) 4026284 ( 0.04%) 123.68
http(s) 121 ( 0.00%) 73276 ( 0.00%) 605.59
http(c) 25936 ( 0.23%) 3146503 ( 0.03%) 121.32
smtp 314 ( 0.00%) 223956 ( 0.00%) 713.24
ftp 157 ( 0.00%) 14890 ( 0.00%) 94.84
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 219 ( 0.00%) 21498 ( 0.00%) 98.16
other 5799 ( 0.05%) 545526 ( 0.01%) 94.07
udp6 38640 ( 0.34%) 5681784 ( 0.06%) 147.04
dns 34519 ( 0.31%) 5345241 ( 0.06%) 154.85
other 4121 ( 0.04%) 336543 ( 0.00%) 81.67
icmp6 10388 ( 0.09%) 1283580 ( 0.01%) 123.56
ip6 480 ( 0.00%) 78866 ( 0.00%) 164.30
pim6 45 ( 0.00%) 5580 ( 0.00%) 124.00
other6 10790 ( 0.10%) 15405496 ( 0.17%) 1427.76
tcpdump file: 200611261400.dump.gz (273.47 MB)