Traffic Trace Info
DumpFile: 200611271400.dump
FileSize: 1370.31MB
Id: 200611271400
StartTime: Mon Nov 27 14:00:01 2006
EndTime: Mon Nov 27 14:15:01 2006
TotalTime: 899.82 seconds
TotalCapSize: 1078.85MB CapLen: 96 bytes
# of packets: 19098654 (13398.34MB)
AvgRate: 124.90Mbps stddev:16.46M
IP flow (unique src/dst pair) Information
# of flows: 430630 (avg. 44.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.3% 3.3% 2.3% 2.2% 1.9% 1.8% 1.7% 1.6% 1.6% 0.6%
IP address Information
# of IPv4 addresses: 216689
Top 10 bandwidth usage (bytes/total in %):
13.3% 8.5% 7.2% 5.9% 4.8% 4.2% 3.5% 3.3% 3.2% 2.9%
# of IPv6 addresses: 1911
Top 10 bandwidth usage (bytes/total in %):
55.8% 55.8% 9.2% 4.6% 4.1% 2.4% 2.2% 1.6% 1.5% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200611271400.pktlen.png)
detailed numbers
[ 32- 63]: 3489393
[ 64- 127]: 5164632
[ 128- 255]: 695670
[ 256- 511]: 550691
[ 512- 1023]: 546173
[ 1024- 2047]: 8652095
Protocol Breakdown
![[protocol breakdown chart]](200611271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19098654 (100.00%) 14049175685 (100.00%) 735.61
ip 19002855 ( 99.50%) 14025160927 ( 99.83%) 738.06
tcp 17068538 ( 89.37%) 13659839503 ( 97.23%) 800.29
http(s) 6767489 ( 35.43%) 8863279735 ( 63.09%) 1309.69
http(c) 4194648 ( 21.96%) 804534847 ( 5.73%) 191.80
squid 148960 ( 0.78%) 96229323 ( 0.68%) 646.01
smtp 328089 ( 1.72%) 112373549 ( 0.80%) 342.51
nntp 5970 ( 0.03%) 2959429 ( 0.02%) 495.72
ftp 351082 ( 1.84%) 279284685 ( 1.99%) 795.50
pop3 11295 ( 0.06%) 4105945 ( 0.03%) 363.52
imap 9126 ( 0.05%) 5934654 ( 0.04%) 650.30
telnet 1654 ( 0.01%) 202413 ( 0.00%) 122.38
ssh 13515 ( 0.07%) 2609661 ( 0.02%) 193.09
dns 3316 ( 0.02%) 1974568 ( 0.01%) 595.47
bgp 1010 ( 0.01%) 124716 ( 0.00%) 123.48
napster 1522 ( 0.01%) 602707 ( 0.00%) 396.00
realaud 42988 ( 0.23%) 53916464 ( 0.38%) 1254.22
rtsp 132191 ( 0.69%) 52564401 ( 0.37%) 397.64
icecast 78634 ( 0.41%) 62645310 ( 0.45%) 796.67
hotline 3 ( 0.00%) 184 ( 0.00%) 61.33
other 4976996 ( 26.06%) 3316493912 ( 23.61%) 666.36
udp 1677518 ( 8.78%) 324192569 ( 2.31%) 193.26
dns 1281027 ( 6.71%) 164676457 ( 1.17%) 128.55
rip 1 ( 0.00%) 122 ( 0.00%) 122.00
realaud 21151 ( 0.11%) 13949022 ( 0.10%) 659.50
halflif 19 ( 0.00%) 2370 ( 0.00%) 124.74
starcra 13 ( 0.00%) 1740 ( 0.00%) 133.85
everque 22 ( 0.00%) 3758 ( 0.00%) 170.82
unreal 15 ( 0.00%) 2190 ( 0.00%) 146.00
quake 64 ( 0.00%) 4524 ( 0.00%) 70.69
cuseeme 5 ( 0.00%) 929 ( 0.00%) 185.80
other 375193 ( 1.96%) 145541848 ( 1.04%) 387.91
icmp 194064 ( 1.02%) 16285579 ( 0.12%) 83.92
ip6 5804 ( 0.03%) 6781548 ( 0.05%) 1168.43
other 56931 ( 0.30%) 18061728 ( 0.13%) 317.26
frag 1305 ( 0.01%) 1457391 ( 0.01%) 1116.77
ip6 95796 ( 0.50%) 24014578 ( 0.17%) 250.68
tcp6 31860 ( 0.17%) 3485348 ( 0.02%) 109.40
http(s) 214 ( 0.00%) 177415 ( 0.00%) 829.04
http(c) 22258 ( 0.12%) 2315481 ( 0.02%) 104.03
squid 183 ( 0.00%) 14642 ( 0.00%) 80.01
smtp 218 ( 0.00%) 110383 ( 0.00%) 506.34
ftp 921 ( 0.00%) 86141 ( 0.00%) 93.53
pop3 11 ( 0.00%) 1018 ( 0.00%) 92.55
imap 30 ( 0.00%) 3457 ( 0.00%) 115.23
ssh 72 ( 0.00%) 6564 ( 0.00%) 91.17
dns 228 ( 0.00%) 23229 ( 0.00%) 101.88
bgp 217 ( 0.00%) 27534 ( 0.00%) 126.88
icecast 10 ( 0.00%) 940 ( 0.00%) 94.00
other 7498 ( 0.04%) 718544 ( 0.01%) 95.83
udp6 42602 ( 0.22%) 5858719 ( 0.04%) 137.52
dns 38240 ( 0.20%) 5501727 ( 0.04%) 143.87
other 4362 ( 0.02%) 356992 ( 0.00%) 81.84
icmp6 11535 ( 0.06%) 1315358 ( 0.01%) 114.03
ip6 418 ( 0.00%) 68364 ( 0.00%) 163.55
pim6 43 ( 0.00%) 5380 ( 0.00%) 125.12
other6 9338 ( 0.05%) 13281409 ( 0.09%) 1422.30
tcpdump file: 200611271400.dump.gz (490.15 MB)