Traffic Trace Info
DumpFile: 200612291400.dump
FileSize: 674.53MB
Id: 200612291400
StartTime: Fri Dec 29 14:00:00 2006
EndTime: Fri Dec 29 14:15:00 2006
TotalTime: 899.98 seconds
TotalCapSize: 527.02MB CapLen: 96 bytes
# of packets: 9665040 (6004.97MB)
AvgRate: 55.96Mbps stddev:6.93M
IP flow (unique src/dst pair) Information
# of flows: 353330 (avg. 27.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 3.0% 2.5% 2.0% 1.8% 1.5% 1.4% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 187941
Top 10 bandwidth usage (bytes/total in %):
15.6% 10.2% 9.3% 7.5% 3.6% 3.0% 3.0% 2.6% 2.5% 2.2%
# of IPv6 addresses: 1283
Top 10 bandwidth usage (bytes/total in %):
43.5% 43.5% 12.6% 10.6% 10.6% 4.7% 4.5% 4.2% 3.4% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200612291400.pktlen.png)
detailed numbers
[ 32- 63]: 1881446
[ 64- 127]: 3205266
[ 128- 255]: 259633
[ 256- 511]: 239607
[ 512- 1023]: 293415
[ 1024- 2047]: 3785673
Protocol Breakdown
![[protocol breakdown chart]](200612291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9665040 (100.00%) 6296665850 (100.00%) 651.49
ip 9606875 ( 99.40%) 6277577174 ( 99.70%) 653.45
tcp 7647514 ( 79.13%) 5962332569 ( 94.69%) 779.64
http(s) 3182571 ( 32.93%) 4216563906 ( 66.97%) 1324.89
http(c) 2076003 ( 21.48%) 255636776 ( 4.06%) 123.14
squid 152017 ( 1.57%) 68919847 ( 1.09%) 453.37
smtp 245856 ( 2.54%) 59456729 ( 0.94%) 241.84
nntp 4649 ( 0.05%) 2107274 ( 0.03%) 453.27
ftp 16036 ( 0.17%) 1432915 ( 0.02%) 89.36
pop3 6583 ( 0.07%) 6542516 ( 0.10%) 993.85
imap 1445 ( 0.01%) 296393 ( 0.00%) 205.12
telnet 836 ( 0.01%) 68071 ( 0.00%) 81.42
ssh 182430 ( 1.89%) 78720931 ( 1.25%) 431.51
dns 2228 ( 0.02%) 1695652 ( 0.03%) 761.06
bgp 15467 ( 0.16%) 13872677 ( 0.22%) 896.92
napster 19 ( 0.00%) 1406 ( 0.00%) 74.00
rtsp 128009 ( 1.32%) 153113398 ( 2.43%) 1196.11
icecast 636 ( 0.01%) 219645 ( 0.00%) 345.35
hotline 6 ( 0.00%) 862 ( 0.00%) 143.67
other 1632698 ( 16.89%) 1103682024 ( 17.53%) 675.99
udp 1448387 ( 14.99%) 246840160 ( 3.92%) 170.42
dns 1282403 ( 13.27%) 168529657 ( 2.68%) 131.42
rip 13 ( 0.00%) 858 ( 0.00%) 66.00
realaud 9 ( 0.00%) 784 ( 0.00%) 87.11
halflif 26 ( 0.00%) 2337 ( 0.00%) 89.88
starcra 7 ( 0.00%) 612 ( 0.00%) 87.43
everque 22 ( 0.00%) 2303 ( 0.00%) 104.68
unreal 16 ( 0.00%) 1065 ( 0.00%) 66.56
quake 17 ( 0.00%) 1399 ( 0.00%) 82.29
cuseeme 4 ( 0.00%) 329 ( 0.00%) 82.25
other 165776 ( 1.72%) 78294792 ( 1.24%) 472.29
icmp 316933 ( 3.28%) 27258243 ( 0.43%) 86.01
ip6 6720 ( 0.07%) 7987015 ( 0.13%) 1188.54
other 187321 ( 1.94%) 33159187 ( 0.53%) 177.02
frag 410 ( 0.00%) 168570 ( 0.00%) 411.15
ip6 58162 ( 0.60%) 19088496 ( 0.30%) 328.20
tcp6 9992 ( 0.10%) 2923238 ( 0.05%) 292.56
http(c) 936 ( 0.01%) 170963 ( 0.00%) 182.65
smtp 329 ( 0.00%) 142808 ( 0.00%) 434.07
ftp 397 ( 0.00%) 36609 ( 0.00%) 92.21
ssh 3312 ( 0.03%) 2016282 ( 0.03%) 608.78
dns 18 ( 0.00%) 2756 ( 0.00%) 153.11
bgp 219 ( 0.00%) 23901 ( 0.00%) 109.14
other 4781 ( 0.05%) 529919 ( 0.01%) 110.84
udp6 32069 ( 0.33%) 6260544 ( 0.10%) 195.22
dns 30875 ( 0.32%) 6127954 ( 0.10%) 198.48
other 1194 ( 0.01%) 132590 ( 0.00%) 111.05
icmp6 8370 ( 0.09%) 1612949 ( 0.03%) 192.71
ip6 2000 ( 0.02%) 255630 ( 0.00%) 127.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5701 ( 0.06%) 8032055 ( 0.13%) 1408.89
tcpdump file: 200612291400.dump.gz (248.62 MB)