Traffic Trace Info
DumpFile: 200611291400.dump
FileSize: 1337.73MB
Id: 200611291400
StartTime: Wed Nov 29 14:00:00 2006
EndTime: Wed Nov 29 14:15:00 2006
TotalTime: 899.98 seconds
TotalCapSize: 1048.54MB CapLen: 96 bytes
# of packets: 18950337 (12501.80MB)
AvgRate: 116.51Mbps stddev:16.08M
IP flow (unique src/dst pair) Information
# of flows: 456209 (avg. 41.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.6% 1.4% 1.0% 0.9% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 227905
Top 10 bandwidth usage (bytes/total in %):
7.4% 7.0% 6.3% 4.0% 3.9% 3.6% 3.3% 2.9% 2.6% 2.3%
# of IPv6 addresses: 1934
Top 10 bandwidth usage (bytes/total in %):
44.4% 44.0% 25.0% 6.7% 5.8% 4.0% 3.7% 3.6% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200611291400.pktlen.png)
detailed numbers
[ 32- 63]: 4098868
[ 64- 127]: 5147352
[ 128- 255]: 488581
[ 256- 511]: 598480
[ 512- 1023]: 634771
[ 1024- 2047]: 7982285
Protocol Breakdown
![[protocol breakdown chart]](200611291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18950337 (100.00%) 13109087534 (100.00%) 691.76
ip 18791927 ( 99.16%) 13076558594 ( 99.75%) 695.86
tcp 16478832 ( 86.96%) 12450581660 ( 94.98%) 755.55
http(s) 6976963 ( 36.82%) 9104772542 ( 69.45%) 1304.98
http(c) 4958744 ( 26.17%) 678117360 ( 5.17%) 136.75
squid 222332 ( 1.17%) 150636354 ( 1.15%) 677.53
smtp 269761 ( 1.42%) 75210546 ( 0.57%) 278.80
nntp 14016 ( 0.07%) 9804353 ( 0.07%) 699.51
ftp 31492 ( 0.17%) 3104671 ( 0.02%) 98.59
pop3 10624 ( 0.06%) 2829536 ( 0.02%) 266.33
imap 3927 ( 0.02%) 1301825 ( 0.01%) 331.51
telnet 1400 ( 0.01%) 124876 ( 0.00%) 89.20
ssh 28293 ( 0.15%) 20645873 ( 0.16%) 729.72
dns 2271 ( 0.01%) 1696399 ( 0.01%) 746.98
bgp 1348 ( 0.01%) 161337 ( 0.00%) 119.69
napster 7673 ( 0.04%) 4839796 ( 0.04%) 630.76
realaud 31468 ( 0.17%) 22868548 ( 0.17%) 726.72
rtsp 92271 ( 0.49%) 73232477 ( 0.56%) 793.67
icecast 145965 ( 0.77%) 142607354 ( 1.09%) 977.00
hotline 36 ( 0.00%) 5004 ( 0.00%) 139.00
other 3680231 ( 19.42%) 2158621789 ( 16.47%) 586.55
udp 2056147 ( 10.85%) 589107214 ( 4.49%) 286.51
dns 1370294 ( 7.23%) 174246806 ( 1.33%) 127.16
rip 1 ( 0.00%) 340 ( 0.00%) 340.00
realaud 2545 ( 0.01%) 1447232 ( 0.01%) 568.66
halflif 12 ( 0.00%) 1772 ( 0.00%) 147.67
starcra 19 ( 0.00%) 1886 ( 0.00%) 99.26
everque 14 ( 0.00%) 1414 ( 0.00%) 101.00
unreal 28 ( 0.00%) 3499 ( 0.00%) 124.96
quake 9 ( 0.00%) 819 ( 0.00%) 91.00
cuseeme 7 ( 0.00%) 938 ( 0.00%) 134.00
other 682965 ( 3.60%) 413357299 ( 3.15%) 605.24
icmp 176192 ( 0.93%) 15077580 ( 0.12%) 85.57
ip6 6139 ( 0.03%) 7208074 ( 0.05%) 1174.14
other 74617 ( 0.39%) 14584066 ( 0.11%) 195.45
frag 2904 ( 0.02%) 2543624 ( 0.02%) 875.90
ip6 158407 ( 0.84%) 32528760 ( 0.25%) 205.35
tcp6 92202 ( 0.49%) 10338232 ( 0.08%) 112.13
http(s) 993 ( 0.01%) 1199972 ( 0.01%) 1208.43
http(c) 84160 ( 0.44%) 8277219 ( 0.06%) 98.35
squid 56 ( 0.00%) 5387 ( 0.00%) 96.20
smtp 874 ( 0.00%) 265690 ( 0.00%) 303.99
ssh 21 ( 0.00%) 2850 ( 0.00%) 135.71
dns 79 ( 0.00%) 7919 ( 0.00%) 100.24
bgp 280 ( 0.00%) 38831 ( 0.00%) 138.68
rtsp 2002 ( 0.01%) 161868 ( 0.00%) 80.85
icecast 4 ( 0.00%) 360 ( 0.00%) 90.00
other 3733 ( 0.02%) 378136 ( 0.00%) 101.30
udp6 46842 ( 0.25%) 6659826 ( 0.05%) 142.18
dns 42808 ( 0.23%) 6353094 ( 0.05%) 148.41
other 4034 ( 0.02%) 306732 ( 0.00%) 76.04
icmp6 8955 ( 0.05%) 1291241 ( 0.01%) 144.19
ip6 445 ( 0.00%) 72325 ( 0.00%) 162.53
pim6 44 ( 0.00%) 5480 ( 0.00%) 124.55
other6 9919 ( 0.05%) 14161656 ( 0.11%) 1427.73
tcpdump file: 200611291400.dump.gz (492.66 MB)