Traffic Trace Info
DumpFile: 200701171400.dump
FileSize: 1398.62MB
Id: 200701171400
StartTime: Wed Jan 17 14:00:01 2007
EndTime: Wed Jan 17 14:15:00 2007
TotalTime: 899.26 seconds
TotalCapSize: 1093.88MB CapLen: 96 bytes
# of packets: 19968791 (13628.82MB)
AvgRate: 127.13Mbps stddev:15.76M
IP flow (unique src/dst pair) Information
# of flows: 541223 (avg. 36.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 3.8% 3.7% 3.3% 1.0% 0.8% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 314372
Top 10 bandwidth usage (bytes/total in %):
11.8% 10.6% 6.3% 6.3% 5.2% 4.5% 3.8% 3.8% 3.5% 3.4%
# of IPv6 addresses: 1445
Top 10 bandwidth usage (bytes/total in %):
43.5% 43.5% 14.1% 6.5% 5.1% 5.1% 4.1% 3.9% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701171400.pktlen.png)
detailed numbers
[ 32- 63]: 4736645
[ 64- 127]: 4890729
[ 128- 255]: 494670
[ 256- 511]: 489299
[ 512- 1023]: 638396
[ 1024- 2047]: 8719052
Protocol Breakdown
![[protocol breakdown chart]](200701171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19968791 (100.00%) 14290856895 (100.00%) 715.66
ip 19903230 ( 99.67%) 14272919518 ( 99.87%) 717.12
tcp 17139622 ( 85.83%) 13729359119 ( 96.07%) 801.03
http(s) 7412595 ( 37.12%) 10071408250 ( 70.47%) 1358.69
http(c) 4441936 ( 22.24%) 528891524 ( 3.70%) 119.07
squid 287207 ( 1.44%) 149833928 ( 1.05%) 521.69
smtp 330708 ( 1.66%) 148358666 ( 1.04%) 448.61
nntp 8607 ( 0.04%) 4406917 ( 0.03%) 512.02
ftp 107408 ( 0.54%) 62813682 ( 0.44%) 584.81
pop3 8058 ( 0.04%) 2705127 ( 0.02%) 335.71
imap 5555 ( 0.03%) 2202291 ( 0.02%) 396.45
telnet 301 ( 0.00%) 59423 ( 0.00%) 197.42
ssh 483737 ( 2.42%) 78904977 ( 0.55%) 163.12
dns 3181 ( 0.02%) 1767432 ( 0.01%) 555.62
bgp 839 ( 0.00%) 92922 ( 0.00%) 110.75
napster 1102 ( 0.01%) 336350 ( 0.00%) 305.22
realaud 5 ( 0.00%) 753 ( 0.00%) 150.60
rtsp 163122 ( 0.82%) 84717708 ( 0.59%) 519.35
icecast 25537 ( 0.13%) 33583695 ( 0.24%) 1315.10
hotline 7 ( 0.00%) 713 ( 0.00%) 101.86
other 3859707 ( 19.33%) 2559274161 ( 17.91%) 663.07
udp 2218600 ( 11.11%) 491776848 ( 3.44%) 221.66
dns 1252467 ( 6.27%) 171306192 ( 1.20%) 136.78
realaud 15292 ( 0.08%) 9820881 ( 0.07%) 642.22
halflif 14 ( 0.00%) 1608 ( 0.00%) 114.86
starcra 7 ( 0.00%) 880 ( 0.00%) 125.71
everque 22 ( 0.00%) 2504 ( 0.00%) 113.82
unreal 5 ( 0.00%) 602 ( 0.00%) 120.40
quake 13 ( 0.00%) 1570 ( 0.00%) 120.77
cuseeme 6 ( 0.00%) 791 ( 0.00%) 131.83
other 950735 ( 4.76%) 310637391 ( 2.17%) 326.73
icmp 534976 ( 2.68%) 43136155 ( 0.30%) 80.63
ip6 6538 ( 0.03%) 7955895 ( 0.06%) 1216.87
other 3494 ( 0.02%) 691501 ( 0.00%) 197.91
frag 11811 ( 0.06%) 13389398 ( 0.09%) 1133.64
ip6 65558 ( 0.33%) 17937197 ( 0.13%) 273.61
tcp6 11733 ( 0.06%) 1893995 ( 0.01%) 161.42
http(s) 483 ( 0.00%) 530729 ( 0.00%) 1098.82
http(c) 2242 ( 0.01%) 281168 ( 0.00%) 125.41
squid 4 ( 0.00%) 336 ( 0.00%) 84.00
smtp 307 ( 0.00%) 115377 ( 0.00%) 375.82
ftp 171 ( 0.00%) 16150 ( 0.00%) 94.44
pop3 23 ( 0.00%) 2078 ( 0.00%) 90.35
ssh 1354 ( 0.01%) 148004 ( 0.00%) 109.31
bgp 135 ( 0.00%) 15192 ( 0.00%) 112.53
icecast 2 ( 0.00%) 168 ( 0.00%) 84.00
other 7012 ( 0.04%) 784793 ( 0.01%) 111.92
udp6 36698 ( 0.18%) 6795008 ( 0.05%) 185.16
dns 35513 ( 0.18%) 6662898 ( 0.05%) 187.62
other 1185 ( 0.01%) 132110 ( 0.00%) 111.49
icmp6 9914 ( 0.05%) 1251203 ( 0.01%) 126.21
ip6 1762 ( 0.01%) 292387 ( 0.00%) 165.94
pim6 62 ( 0.00%) 7348 ( 0.00%) 118.52
other6 5389 ( 0.03%) 7697256 ( 0.05%) 1428.33
tcpdump file: 200701171400.dump.gz (498.91 MB)