Traffic Trace Info
DumpFile: 200612301400.dump
FileSize: 476.14MB
Id: 200612301400
StartTime: Sat Dec 30 14:00:00 2006
EndTime: Sat Dec 30 14:15:01 2006
TotalTime: 900.59 seconds
TotalCapSize: 371.79MB CapLen: 96 bytes
# of packets: 6836861 (4000.13MB)
AvgRate: 37.30Mbps stddev:8.03M
IP flow (unique src/dst pair) Information
# of flows: 339941 (avg. 20.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.7% 6.0% 5.7% 4.2% 3.3% 2.4% 1.9% 1.5% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 193647
Top 10 bandwidth usage (bytes/total in %):
18.8% 12.1% 12.1% 9.1% 6.1% 5.8% 5.3% 4.2% 3.3% 2.7%
# of IPv6 addresses: 1221
Top 10 bandwidth usage (bytes/total in %):
43.5% 43.5% 19.6% 19.6% 18.1% 18.1% 5.7% 2.1% 2.0% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200612301400.pktlen.png)
detailed numbers
[ 32- 63]: 1459508
[ 64- 127]: 2328041
[ 128- 255]: 204572
[ 256- 511]: 200698
[ 512- 1023]: 132618
[ 1024- 2047]: 2511424
Protocol Breakdown
![[protocol breakdown chart]](200612301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 6836861 (100.00%) 4194442149 (100.00%) 613.50
ip 6750111 ( 98.73%) 4151290610 ( 98.97%) 615.00
tcp 5182218 ( 75.80%) 3924882465 ( 93.57%) 757.38
http(s) 1808879 ( 26.46%) 2397428614 ( 57.16%) 1325.37
http(c) 1366519 ( 19.99%) 147680259 ( 3.52%) 108.07
squid 141533 ( 2.07%) 45439556 ( 1.08%) 321.05
smtp 312288 ( 4.57%) 79164443 ( 1.89%) 253.50
nntp 8751 ( 0.13%) 4440109 ( 0.11%) 507.38
ftp 26584 ( 0.39%) 2739071 ( 0.07%) 103.03
pop3 2866 ( 0.04%) 1303359 ( 0.03%) 454.77
imap 883 ( 0.01%) 132891 ( 0.00%) 150.50
telnet 233 ( 0.00%) 78224 ( 0.00%) 335.73
ssh 55238 ( 0.81%) 49478071 ( 1.18%) 895.73
dns 966 ( 0.01%) 72239 ( 0.00%) 74.78
bgp 961 ( 0.01%) 108546 ( 0.00%) 112.95
napster 11 ( 0.00%) 4994 ( 0.00%) 454.00
realaud 25 ( 0.00%) 1650 ( 0.00%) 66.00
rtsp 64954 ( 0.95%) 41120511 ( 0.98%) 633.07
icecast 17285 ( 0.25%) 15424859 ( 0.37%) 892.38
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 1374229 ( 20.10%) 1140264285 ( 27.19%) 829.75
udp 1250307 ( 18.29%) 175717761 ( 4.19%) 140.54
dns 1129305 ( 16.52%) 130911491 ( 3.12%) 115.92
realaud 9 ( 0.00%) 1069 ( 0.00%) 118.78
halflif 10 ( 0.00%) 838 ( 0.00%) 83.80
starcra 8 ( 0.00%) 682 ( 0.00%) 85.25
everque 51 ( 0.00%) 5072 ( 0.00%) 99.45
unreal 10 ( 0.00%) 1249 ( 0.00%) 124.90
quake 8 ( 0.00%) 690 ( 0.00%) 86.25
cuseeme 5 ( 0.00%) 425 ( 0.00%) 85.00
other 120898 ( 1.77%) 44796035 ( 1.07%) 370.53
icmp 234504 ( 3.43%) 20076137 ( 0.48%) 85.61
ip6 6748 ( 0.10%) 7979274 ( 0.19%) 1182.47
other 76334 ( 1.12%) 22634973 ( 0.54%) 296.53
frag 287 ( 0.00%) 231932 ( 0.01%) 808.13
ip6 86747 ( 1.27%) 43151359 ( 1.03%) 497.44
tcp6 45297 ( 0.66%) 28223273 ( 0.67%) 623.07
http(s) 8 ( 0.00%) 3660 ( 0.00%) 457.50
http(c) 889 ( 0.01%) 167779 ( 0.00%) 188.73
smtp 320 ( 0.00%) 117743 ( 0.00%) 367.95
ftp 21745 ( 0.32%) 18806559 ( 0.45%) 864.87
ssh 14989 ( 0.22%) 8444654 ( 0.20%) 563.39
dns 22 ( 0.00%) 2476 ( 0.00%) 112.55
bgp 135 ( 0.00%) 14725 ( 0.00%) 109.07
other 7189 ( 0.11%) 665677 ( 0.02%) 92.60
udp6 26078 ( 0.38%) 5614333 ( 0.13%) 215.29
dns 24914 ( 0.36%) 5483759 ( 0.13%) 220.11
other 1164 ( 0.02%) 130574 ( 0.00%) 112.18
icmp6 7770 ( 0.11%) 1076586 ( 0.03%) 138.56
ip6 1895 ( 0.03%) 230513 ( 0.01%) 121.64
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5677 ( 0.08%) 8002574 ( 0.19%) 1409.65
tcpdump file: 200612301400.dump.gz (170.68 MB)