Traffic Trace Info
DumpFile: 200612281400.dump
FileSize: 803.75MB
Id: 200612281400
StartTime: Thu Dec 28 14:00:00 2006
EndTime: Thu Dec 28 14:15:01 2006
TotalTime: 900.16 seconds
TotalCapSize: 629.21MB CapLen: 96 bytes
# of packets: 11435041 (7392.05MB)
AvgRate: 68.89Mbps stddev:12.63M
IP flow (unique src/dst pair) Information
# of flows: 429983 (avg. 26.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 3.2% 2.3% 2.0% 2.0% 1.4% 1.2% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 225694
Top 10 bandwidth usage (bytes/total in %):
13.9% 11.8% 5.5% 5.4% 5.1% 3.2% 3.1% 2.9% 2.7% 2.6%
# of IPv6 addresses: 1268
Top 10 bandwidth usage (bytes/total in %):
28.9% 28.9% 22.4% 18.0% 10.9% 9.5% 9.5% 5.3% 5.3% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200612281400.pktlen.png)
detailed numbers
[ 32- 63]: 2381295
[ 64- 127]: 3367324
[ 128- 255]: 370115
[ 256- 511]: 299783
[ 512- 1023]: 339141
[ 1024- 2047]: 4677383
Protocol Breakdown
![[protocol breakdown chart]](200612281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11435041 (100.00%) 7751125747 (100.00%) 677.84
ip 11365972 ( 99.40%) 7722527093 ( 99.63%) 679.44
tcp 9430576 ( 82.47%) 7423125608 ( 95.77%) 787.13
http(s) 3917640 ( 34.26%) 5163503492 ( 66.62%) 1318.01
http(c) 2575357 ( 22.52%) 350524888 ( 4.52%) 136.11
squid 203232 ( 1.78%) 108660199 ( 1.40%) 534.66
smtp 291637 ( 2.55%) 101826197 ( 1.31%) 349.15
nntp 7638 ( 0.07%) 5054124 ( 0.07%) 661.71
ftp 78560 ( 0.69%) 57440173 ( 0.74%) 731.16
pop3 6373 ( 0.06%) 1986536 ( 0.03%) 311.71
imap 3351 ( 0.03%) 1230945 ( 0.02%) 367.34
telnet 1296 ( 0.01%) 119377 ( 0.00%) 92.11
ssh 266107 ( 2.33%) 40672868 ( 0.52%) 152.84
dns 2317 ( 0.02%) 1701036 ( 0.02%) 734.15
bgp 3023 ( 0.03%) 1201993 ( 0.02%) 397.62
napster 2 ( 0.00%) 124 ( 0.00%) 62.00
realaud 5352 ( 0.05%) 691788 ( 0.01%) 129.26
rtsp 113903 ( 1.00%) 86844379 ( 1.12%) 762.44
icecast 7237 ( 0.06%) 10115335 ( 0.13%) 1397.72
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 1947502 ( 17.03%) 1491549212 ( 19.24%) 765.88
udp 1497226 ( 13.09%) 231941999 ( 2.99%) 154.91
dns 1295984 ( 11.33%) 167806436 ( 2.16%) 129.48
realaud 71 ( 0.00%) 24295 ( 0.00%) 342.18
halflif 8 ( 0.00%) 735 ( 0.00%) 91.88
starcra 5 ( 0.00%) 629 ( 0.00%) 125.80
everque 33 ( 0.00%) 4848 ( 0.00%) 146.91
unreal 5 ( 0.00%) 505 ( 0.00%) 101.00
quake 11 ( 0.00%) 935 ( 0.00%) 85.00
cuseeme 4 ( 0.00%) 337 ( 0.00%) 84.25
other 201093 ( 1.76%) 64094449 ( 0.83%) 318.73
icmp 290302 ( 2.54%) 25007011 ( 0.32%) 86.14
ip6 6965 ( 0.06%) 8004550 ( 0.10%) 1149.25
other 140903 ( 1.23%) 34447925 ( 0.44%) 244.48
frag 367 ( 0.00%) 271793 ( 0.00%) 740.58
ip6 69066 ( 0.60%) 28598474 ( 0.37%) 414.07
tcp6 18275 ( 0.16%) 11331629 ( 0.15%) 620.06
http(s) 6154 ( 0.05%) 7630744 ( 0.10%) 1239.96
http(c) 4417 ( 0.04%) 464864 ( 0.01%) 105.24
smtp 169 ( 0.00%) 44887 ( 0.00%) 265.60
ftp 1278 ( 0.01%) 136946 ( 0.00%) 107.16
ssh 41 ( 0.00%) 7182 ( 0.00%) 175.17
bgp 207 ( 0.00%) 21653 ( 0.00%) 104.60
other 6009 ( 0.05%) 3025353 ( 0.04%) 503.47
udp6 35316 ( 0.31%) 7321039 ( 0.09%) 207.30
dns 34161 ( 0.30%) 7190154 ( 0.09%) 210.48
other 1155 ( 0.01%) 130885 ( 0.00%) 113.32
icmp6 7572 ( 0.07%) 1637659 ( 0.02%) 216.28
ip6 2175 ( 0.02%) 277446 ( 0.00%) 127.56
ipsec6 2 ( 0.00%) 252 ( 0.00%) 126.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5695 ( 0.05%) 8026233 ( 0.10%) 1409.35
tcpdump file: 200612281400.dump.gz (297.18 MB)