Traffic Trace Info
DumpFile: 200701091400.dump
FileSize: 1179.54MB
Id: 200701091400
StartTime: Tue Jan 9 14:00:00 2007
EndTime: Tue Jan 9 14:15:00 2007
TotalTime: 899.78 seconds
TotalCapSize: 924.63MB CapLen: 96 bytes
# of packets: 16703680 (11158.33MB)
AvgRate: 104.03Mbps stddev:13.21M
IP flow (unique src/dst pair) Information
# of flows: 561742 (avg. 29.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.8% 2.6% 2.1% 1.9% 1.6% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 294267
Top 10 bandwidth usage (bytes/total in %):
10.5% 9.8% 7.6% 3.5% 3.3% 3.3% 3.0% 2.8% 2.7% 2.2%
# of IPv6 addresses: 1330
Top 10 bandwidth usage (bytes/total in %):
52.3% 52.3% 21.7% 21.7% 6.8% 3.1% 2.7% 2.2% 1.4% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701091400.pktlen.png)
detailed numbers
[ 32- 63]: 3925878
[ 64- 127]: 4298200
[ 128- 255]: 416759
[ 256- 511]: 482145
[ 512- 1023]: 442896
[ 1024- 2047]: 7137802
Protocol Breakdown
![[protocol breakdown chart]](200701091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16703680 (100.00%) 11700361700 (100.00%) 700.47
ip 16631169 ( 99.57%) 11664448505 ( 99.69%) 701.36
tcp 14496398 ( 86.79%) 11336679627 ( 96.89%) 782.03
http(s) 6486559 ( 38.83%) 8493240717 ( 72.59%) 1309.36
http(c) 4401435 ( 26.35%) 640412742 ( 5.47%) 145.50
squid 546104 ( 3.27%) 384086843 ( 3.28%) 703.32
smtp 313966 ( 1.88%) 97211359 ( 0.83%) 309.62
nntp 6741 ( 0.04%) 2949422 ( 0.03%) 437.53
ftp 56112 ( 0.34%) 30729990 ( 0.26%) 547.65
pop3 10145 ( 0.06%) 5065603 ( 0.04%) 499.32
imap 3805 ( 0.02%) 889967 ( 0.01%) 233.89
telnet 1056 ( 0.01%) 84604 ( 0.00%) 80.12
ssh 11584 ( 0.07%) 5558702 ( 0.05%) 479.86
dns 1845 ( 0.01%) 128170 ( 0.00%) 69.47
bgp 1158 ( 0.01%) 139338 ( 0.00%) 120.33
napster 97 ( 0.00%) 6337 ( 0.00%) 65.33
rtsp 159193 ( 0.95%) 164028640 ( 1.40%) 1030.38
icecast 39805 ( 0.24%) 45059288 ( 0.39%) 1132.00
other 2456782 ( 14.71%) 1467087245 ( 12.54%) 597.16
udp 1650970 ( 9.88%) 271713964 ( 2.32%) 164.58
dns 1390630 ( 8.33%) 182114110 ( 1.56%) 130.96
realaud 438 ( 0.00%) 27137 ( 0.00%) 61.96
halflif 19 ( 0.00%) 2119 ( 0.00%) 111.53
starcra 15 ( 0.00%) 2332 ( 0.00%) 155.47
everque 21 ( 0.00%) 2605 ( 0.00%) 124.05
unreal 12 ( 0.00%) 1645 ( 0.00%) 137.08
quake 13 ( 0.00%) 1548 ( 0.00%) 119.08
cuseeme 9 ( 0.00%) 2094 ( 0.00%) 232.67
other 258583 ( 1.55%) 87874355 ( 0.75%) 339.83
icmp 349187 ( 2.09%) 28387046 ( 0.24%) 81.29
ip6 6571 ( 0.04%) 7952829 ( 0.07%) 1210.29
other 128043 ( 0.77%) 19715039 ( 0.17%) 153.97
frag 6552 ( 0.04%) 8274467 ( 0.07%) 1262.89
ip6 72508 ( 0.43%) 35913015 ( 0.31%) 495.30
tcp6 20239 ( 0.12%) 19867165 ( 0.17%) 981.63
http(s) 112 ( 0.00%) 135485 ( 0.00%) 1209.69
http(c) 344 ( 0.00%) 115225 ( 0.00%) 334.96
squid 4 ( 0.00%) 336 ( 0.00%) 84.00
smtp 88 ( 0.00%) 19013 ( 0.00%) 216.06
ftp 222 ( 0.00%) 21344 ( 0.00%) 96.14
pop3 41 ( 0.00%) 3651 ( 0.00%) 89.05
ssh 629 ( 0.00%) 64844 ( 0.00%) 103.09
bgp 147 ( 0.00%) 15570 ( 0.00%) 105.92
icecast 2 ( 0.00%) 168 ( 0.00%) 84.00
other 18650 ( 0.11%) 19491529 ( 0.17%) 1045.12
udp6 36840 ( 0.22%) 6961480 ( 0.06%) 188.97
dns 34860 ( 0.21%) 6731719 ( 0.06%) 193.11
other 1980 ( 0.01%) 229761 ( 0.00%) 116.04
icmp6 7758 ( 0.05%) 1111268 ( 0.01%) 143.24
ip6 2243 ( 0.01%) 271888 ( 0.00%) 121.22
ipsec6 9 ( 0.00%) 1194 ( 0.00%) 132.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5389 ( 0.03%) 7695940 ( 0.07%) 1428.08
tcpdump file: 200701091400.dump.gz (433.50 MB)