Traffic Trace Info
DumpFile: 200701131400.dump
FileSize: 883.56MB
Id: 200701131400
StartTime: Sat Jan 13 14:00:00 2007
EndTime: Sat Jan 13 14:15:01 2007
TotalTime: 900.16 seconds
TotalCapSize: 690.73MB CapLen: 96 bytes
# of packets: 12635699 (8105.07MB)
AvgRate: 75.53Mbps stddev:9.80M
IP flow (unique src/dst pair) Information
# of flows: 442365 (avg. 28.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.6% 2.7% 2.3% 2.3% 1.9% 1.9% 1.8% 1.6% 1.2%
IP address Information
# of IPv4 addresses: 255578
Top 10 bandwidth usage (bytes/total in %):
9.5% 6.6% 5.7% 5.4% 4.8% 4.4% 4.1% 3.8% 3.7% 3.2%
# of IPv6 addresses: 1308
Top 10 bandwidth usage (bytes/total in %):
47.2% 47.2% 13.5% 6.1% 5.3% 4.7% 3.7% 2.4% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701131400.pktlen.png)
detailed numbers
[ 32- 63]: 3033018
[ 64- 127]: 3338506
[ 128- 255]: 340230
[ 256- 511]: 320163
[ 512- 1023]: 462777
[ 1024- 2047]: 5141005
Protocol Breakdown
![[protocol breakdown chart]](200701131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12635699 (100.00%) 8498786858 (100.00%) 672.60
ip 12578848 ( 99.55%) 8482257052 ( 99.81%) 674.33
tcp 10281441 ( 81.37%) 8043293923 ( 94.64%) 782.31
http(s) 4413466 ( 34.93%) 5931711168 ( 69.79%) 1344.00
http(c) 2684783 ( 21.25%) 475716636 ( 5.60%) 177.19
squid 244474 ( 1.93%) 131584109 ( 1.55%) 538.23
smtp 248937 ( 1.97%) 50458270 ( 0.59%) 202.69
nntp 7379 ( 0.06%) 3414601 ( 0.04%) 462.75
ftp 59098 ( 0.47%) 4641902 ( 0.05%) 78.55
pop3 4719 ( 0.04%) 2114960 ( 0.02%) 448.18
imap 2477 ( 0.02%) 698798 ( 0.01%) 282.11
telnet 419 ( 0.00%) 32746 ( 0.00%) 78.15
ssh 56694 ( 0.45%) 19842783 ( 0.23%) 350.00
dns 2359 ( 0.02%) 1714276 ( 0.02%) 726.70
bgp 1064 ( 0.01%) 132074 ( 0.00%) 124.13
napster 222 ( 0.00%) 43494 ( 0.00%) 195.92
realaud 50 ( 0.00%) 6099 ( 0.00%) 121.98
rtsp 149642 ( 1.18%) 12937988 ( 0.15%) 86.46
icecast 13597 ( 0.11%) 19816037 ( 0.23%) 1457.38
other 2392046 ( 18.93%) 1388427082 ( 16.34%) 580.43
udp 1785484 ( 14.13%) 378613381 ( 4.45%) 212.05
dns 1314698 ( 10.40%) 164197553 ( 1.93%) 124.89
realaud 1842 ( 0.01%) 133647 ( 0.00%) 72.56
halflif 13 ( 0.00%) 1422 ( 0.00%) 109.38
starcra 9 ( 0.00%) 1112 ( 0.00%) 123.56
everque 25 ( 0.00%) 3026 ( 0.00%) 121.04
unreal 4 ( 0.00%) 341 ( 0.00%) 85.25
quake 56 ( 0.00%) 4748 ( 0.00%) 84.79
cuseeme 5 ( 0.00%) 405 ( 0.00%) 81.00
other 468826 ( 3.71%) 214269587 ( 2.52%) 457.03
icmp 319669 ( 2.53%) 24908821 ( 0.29%) 77.92
ip6 6578 ( 0.05%) 7960042 ( 0.09%) 1210.10
other 185676 ( 1.47%) 27480885 ( 0.32%) 148.00
frag 373 ( 0.00%) 335431 ( 0.00%) 899.28
ip6 56848 ( 0.45%) 16529626 ( 0.19%) 290.77
tcp6 4832 ( 0.04%) 629125 ( 0.01%) 130.20
http(s) 5 ( 0.00%) 619 ( 0.00%) 123.80
http(c) 971 ( 0.01%) 166261 ( 0.00%) 171.23
smtp 156 ( 0.00%) 51517 ( 0.00%) 330.24
ftp 60 ( 0.00%) 5634 ( 0.00%) 93.90
ssh 4 ( 0.00%) 344 ( 0.00%) 86.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 142 ( 0.00%) 15806 ( 0.00%) 111.31
other 3487 ( 0.03%) 388309 ( 0.00%) 111.36
udp6 32079 ( 0.25%) 6333937 ( 0.07%) 197.45
dns 29918 ( 0.24%) 6089387 ( 0.07%) 203.54
other 2161 ( 0.02%) 244550 ( 0.00%) 113.17
icmp6 12821 ( 0.10%) 1582336 ( 0.02%) 123.42
ip6 1665 ( 0.01%) 278370 ( 0.00%) 167.19
pim6 61 ( 0.00%) 7212 ( 0.00%) 118.23
other6 5390 ( 0.04%) 7698646 ( 0.09%) 1428.32
tcpdump file: 200701131400.dump.gz (317.48 MB)