Traffic Trace Info
DumpFile: 200612071400.dump
FileSize: 1225.40MB
Id: 200612071400
StartTime: Thu Dec 7 14:00:01 2006
EndTime: Thu Dec 7 14:15:00 2006
TotalTime: 899.22 seconds
TotalCapSize: 959.95MB CapLen: 96 bytes
# of packets: 17393331 (11715.50MB)
AvgRate: 109.30Mbps stddev:16.29M
IP flow (unique src/dst pair) Information
# of flows: 435649 (avg. 39.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 4.3% 3.4% 1.7% 1.3% 1.2% 1.1% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 209246
Top 10 bandwidth usage (bytes/total in %):
6.6% 5.4% 4.9% 4.6% 4.5% 4.4% 4.3% 3.4% 3.4% 2.8%
# of IPv6 addresses: 1625
Top 10 bandwidth usage (bytes/total in %):
37.6% 37.6% 16.3% 16.3% 8.0% 4.2% 2.9% 2.7% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200612071400.pktlen.png)
detailed numbers
[ 32- 63]: 3947535
[ 64- 127]: 4521892
[ 128- 255]: 441259
[ 256- 511]: 464621
[ 512- 1023]: 560822
[ 1024- 2047]: 7457202
Protocol Breakdown
![[protocol breakdown chart]](200612071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17393331 (100.00%) 12284588591 (100.00%) 706.28
ip 17298555 ( 99.46%) 12262893803 ( 99.82%) 708.90
tcp 14939489 ( 85.89%) 11896115821 ( 96.84%) 796.29
http(s) 7139857 ( 41.05%) 9528624353 ( 77.57%) 1334.57
http(c) 4190477 ( 24.09%) 556434647 ( 4.53%) 132.79
squid 87693 ( 0.50%) 20954046 ( 0.17%) 238.95
smtp 383092 ( 2.20%) 150580541 ( 1.23%) 393.07
nntp 7743 ( 0.04%) 4175223 ( 0.03%) 539.23
ftp 86418 ( 0.50%) 38480176 ( 0.31%) 445.28
pop3 12411 ( 0.07%) 4232069 ( 0.03%) 340.99
imap 5113 ( 0.03%) 2284984 ( 0.02%) 446.90
telnet 1584 ( 0.01%) 180545 ( 0.00%) 113.98
ssh 28227 ( 0.16%) 15500433 ( 0.13%) 549.13
dns 4747 ( 0.03%) 1885780 ( 0.02%) 397.26
bgp 1336 ( 0.01%) 162336 ( 0.00%) 121.51
napster 12 ( 0.00%) 1470 ( 0.00%) 122.50
realaud 819 ( 0.00%) 415509 ( 0.00%) 507.34
rtsp 80539 ( 0.46%) 65154537 ( 0.53%) 808.98
icecast 74524 ( 0.43%) 62492947 ( 0.51%) 838.56
other 2834878 ( 16.30%) 1444555085 ( 11.76%) 509.57
udp 1802248 ( 10.36%) 306157301 ( 2.49%) 169.88
dns 1372815 ( 7.89%) 168246403 ( 1.37%) 122.56
rip 3 ( 0.00%) 194 ( 0.00%) 64.67
realaud 6743 ( 0.04%) 3115781 ( 0.03%) 462.08
halflif 5 ( 0.00%) 479 ( 0.00%) 95.80
starcra 11 ( 0.00%) 1009 ( 0.00%) 91.73
everque 29 ( 0.00%) 3057 ( 0.00%) 105.41
unreal 29 ( 0.00%) 3743 ( 0.00%) 129.07
quake 10 ( 0.00%) 854 ( 0.00%) 85.40
cuseeme 7 ( 0.00%) 536 ( 0.00%) 76.57
other 422592 ( 2.43%) 134782318 ( 1.10%) 318.94
icmp 282595 ( 1.62%) 22151361 ( 0.18%) 78.39
ip6 546 ( 0.00%) 61148 ( 0.00%) 111.99
other 273677 ( 1.57%) 38408172 ( 0.31%) 140.34
frag 225 ( 0.00%) 198710 ( 0.00%) 883.16
ip6 94773 ( 0.54%) 21694608 ( 0.18%) 228.91
tcp6 32634 ( 0.19%) 6243816 ( 0.05%) 191.33
http(s) 521 ( 0.00%) 406729 ( 0.00%) 780.67
http(c) 15062 ( 0.09%) 1366742 ( 0.01%) 90.74
smtp 282 ( 0.00%) 138956 ( 0.00%) 492.75
ftp 476 ( 0.00%) 44341 ( 0.00%) 93.15
telnet 10456 ( 0.06%) 3528312 ( 0.03%) 337.44
ssh 148 ( 0.00%) 11839 ( 0.00%) 79.99
dns 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 196 ( 0.00%) 20113 ( 0.00%) 102.62
other 5492 ( 0.03%) 726710 ( 0.01%) 132.32
udp6 47032 ( 0.27%) 6148620 ( 0.05%) 130.73
dns 43438 ( 0.25%) 5880288 ( 0.05%) 135.37
other 3594 ( 0.02%) 268332 ( 0.00%) 74.66
icmp6 9355 ( 0.05%) 1527235 ( 0.01%) 163.25
ip6 302 ( 0.00%) 48185 ( 0.00%) 159.55
pim6 45 ( 0.00%) 5580 ( 0.00%) 124.00
other6 5405 ( 0.03%) 7721172 ( 0.06%) 1428.52
tcpdump file: 200612071400.dump.gz (440.22 MB)