Traffic Trace Info
DumpFile: 200701221400.dump
FileSize: 1472.13MB
Id: 200701221400
StartTime: Mon Jan 22 14:00:00 2007
EndTime: Mon Jan 22 14:15:01 2007
TotalTime: 900.27 seconds
TotalCapSize: 1155.77MB CapLen: 96 bytes
# of packets: 20732068 (12723.03MB)
AvgRate: 118.56Mbps stddev:16.57M
IP flow (unique src/dst pair) Information
# of flows: 534224 (avg. 38.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 4.0% 1.7% 1.6% 1.6% 1.1% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 267939
Top 10 bandwidth usage (bytes/total in %):
14.0% 6.9% 5.9% 5.6% 5.5% 4.1% 3.1% 2.2% 2.1% 1.9%
# of IPv6 addresses: 1441
Top 10 bandwidth usage (bytes/total in %):
42.7% 42.7% 16.7% 6.8% 6.7% 5.1% 3.7% 3.1% 2.9% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701221400.pktlen.png)
detailed numbers
[ 32- 63]: 4752934
[ 64- 127]: 5992349
[ 128- 255]: 732476
[ 256- 511]: 539829
[ 512- 1023]: 758009
[ 1024- 2047]: 7956471
Protocol Breakdown
![[protocol breakdown chart]](200701221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20732068 (100.00%) 13341064723 (100.00%) 643.50
ip 20664757 ( 99.68%) 13322810458 ( 99.86%) 644.71
tcp 18332827 ( 88.43%) 12940202255 ( 97.00%) 705.85
http(s) 5921303 ( 28.56%) 7647781383 ( 57.33%) 1291.57
http(c) 4753236 ( 22.93%) 847747310 ( 6.35%) 178.35
squid 350899 ( 1.69%) 177045843 ( 1.33%) 504.55
smtp 480182 ( 2.32%) 137838895 ( 1.03%) 287.06
nntp 14847 ( 0.07%) 11902323 ( 0.09%) 801.67
ftp 82295 ( 0.40%) 32529689 ( 0.24%) 395.28
pop3 12380 ( 0.06%) 4847980 ( 0.04%) 391.60
imap 8214 ( 0.04%) 4676420 ( 0.04%) 569.32
telnet 1688 ( 0.01%) 201426 ( 0.00%) 119.33
ssh 1665212 ( 8.03%) 318765229 ( 2.39%) 191.43
dns 2278 ( 0.01%) 1718495 ( 0.01%) 754.39
bgp 1101 ( 0.01%) 173508 ( 0.00%) 157.59
napster 362 ( 0.00%) 178868 ( 0.00%) 494.11
realaud 9 ( 0.00%) 992 ( 0.00%) 110.22
rtsp 295447 ( 1.43%) 103256780 ( 0.77%) 349.49
icecast 14252 ( 0.07%) 8570869 ( 0.06%) 601.38
hotline 5 ( 0.00%) 1036 ( 0.00%) 207.20
other 4729103 ( 22.81%) 3642964369 ( 27.31%) 770.33
udp 1934763 ( 9.33%) 335935617 ( 2.52%) 173.63
dns 1423536 ( 6.87%) 185449518 ( 1.39%) 130.27
realaud 7039 ( 0.03%) 2622876 ( 0.02%) 372.62
halflif 12 ( 0.00%) 1218 ( 0.00%) 101.50
starcra 19 ( 0.00%) 2915 ( 0.00%) 153.42
everque 30 ( 0.00%) 4814 ( 0.00%) 160.47
unreal 14 ( 0.00%) 2725 ( 0.00%) 194.64
quake 24 ( 0.00%) 2297 ( 0.00%) 95.71
cuseeme 83 ( 0.00%) 5393 ( 0.00%) 64.98
other 503986 ( 2.43%) 147841285 ( 1.11%) 293.34
icmp 271067 ( 1.31%) 22725758 ( 0.17%) 83.84
ip6 6705 ( 0.03%) 7156206 ( 0.05%) 1067.29
other 119395 ( 0.58%) 16790622 ( 0.13%) 140.63
frag 636 ( 0.00%) 511291 ( 0.00%) 803.92
ip6 67311 ( 0.32%) 18254265 ( 0.14%) 271.19
tcp6 8077 ( 0.04%) 1178140 ( 0.01%) 145.86
http(s) 249 ( 0.00%) 192560 ( 0.00%) 773.33
http(c) 1172 ( 0.01%) 194349 ( 0.00%) 165.83
smtp 175 ( 0.00%) 97006 ( 0.00%) 554.32
ftp 552 ( 0.00%) 52088 ( 0.00%) 94.36
ssh 17 ( 0.00%) 2374 ( 0.00%) 139.65
dns 10 ( 0.00%) 3282 ( 0.00%) 328.20
bgp 122 ( 0.00%) 12979 ( 0.00%) 106.39
other 5780 ( 0.03%) 623502 ( 0.00%) 107.87
udp6 44141 ( 0.21%) 8012246 ( 0.06%) 181.51
dns 42944 ( 0.21%) 7879282 ( 0.06%) 183.48
other 1197 ( 0.01%) 132964 ( 0.00%) 111.08
icmp6 8167 ( 0.04%) 1084573 ( 0.01%) 132.80
ip6 1469 ( 0.01%) 265397 ( 0.00%) 180.67
pim6 60 ( 0.00%) 7112 ( 0.00%) 118.53
other6 5397 ( 0.03%) 7706797 ( 0.06%) 1427.98
tcpdump file: 200701221400.dump.gz (544.04 MB)