Traffic Trace Info
DumpFile: 200701281400.dump
FileSize: 904.05MB
Id: 200701281400
StartTime: Sun Jan 28 14:00:01 2007
EndTime: Sun Jan 28 14:15:01 2007
TotalTime: 899.71 seconds
TotalCapSize: 708.22MB CapLen: 96 bytes
# of packets: 12832951 (8145.96MB)
AvgRate: 75.94Mbps stddev:8.50M
IP flow (unique src/dst pair) Information
# of flows: 371235 (avg. 34.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.8% 1.8% 1.8% 1.4% 1.3% 1.1% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 198337
Top 10 bandwidth usage (bytes/total in %):
14.6% 8.7% 8.0% 4.1% 4.0% 3.9% 2.5% 2.0% 2.0% 1.9%
# of IPv6 addresses: 1214
Top 10 bandwidth usage (bytes/total in %):
48.9% 48.9% 15.1% 6.3% 5.7% 4.8% 3.0% 3.0% 2.3% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200701281400.pktlen.png)
detailed numbers
[ 32- 63]: 2878281
[ 64- 127]: 3539606
[ 128- 255]: 452431
[ 256- 511]: 291400
[ 512- 1023]: 546292
[ 1024- 2047]: 5124941
Protocol Breakdown
![[protocol breakdown chart]](200701281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12832951 (100.00%) 8541654878 (100.00%) 665.60
ip 12781981 ( 99.60%) 8525684944 ( 99.81%) 667.01
tcp 10863695 ( 84.65%) 8082650156 ( 94.63%) 744.01
http(s) 4031852 ( 31.42%) 5351550931 ( 62.65%) 1327.32
http(c) 2531182 ( 19.72%) 281184592 ( 3.29%) 111.09
squid 468324 ( 3.65%) 250742038 ( 2.94%) 535.40
smtp 338812 ( 2.64%) 60865427 ( 0.71%) 179.64
nntp 7669 ( 0.06%) 2493530 ( 0.03%) 325.14
ftp 132180 ( 1.03%) 68205396 ( 0.80%) 516.00
pop3 3525 ( 0.03%) 1364087 ( 0.02%) 386.98
imap 24615 ( 0.19%) 2294489 ( 0.03%) 93.22
telnet 131 ( 0.00%) 36037 ( 0.00%) 275.09
ssh 640287 ( 4.99%) 194998681 ( 2.28%) 304.55
dns 2156 ( 0.02%) 1722095 ( 0.02%) 798.75
bgp 925 ( 0.01%) 109476 ( 0.00%) 118.35
napster 270 ( 0.00%) 40401 ( 0.00%) 149.63
realaud 31 ( 0.00%) 3570 ( 0.00%) 115.16
rtsp 124222 ( 0.97%) 22817121 ( 0.27%) 183.68
icecast 75034 ( 0.58%) 70900590 ( 0.83%) 944.91
hotline 12 ( 0.00%) 1320 ( 0.00%) 110.00
other 2482467 ( 19.34%) 1773320315 ( 20.76%) 714.34
udp 1654278 ( 12.89%) 413176802 ( 4.84%) 249.76
dns 1083710 ( 8.44%) 133828141 ( 1.57%) 123.49
realaud 1853 ( 0.01%) 112664 ( 0.00%) 60.80
halflif 7 ( 0.00%) 566 ( 0.00%) 80.86
starcra 9 ( 0.00%) 1093 ( 0.00%) 121.44
everque 20 ( 0.00%) 3348 ( 0.00%) 167.40
unreal 7 ( 0.00%) 1084 ( 0.00%) 154.86
quake 9 ( 0.00%) 715 ( 0.00%) 79.44
cuseeme 6 ( 0.00%) 941 ( 0.00%) 156.83
other 568594 ( 4.43%) 279222050 ( 3.27%) 491.07
icmp 231291 ( 1.80%) 19464513 ( 0.23%) 84.16
ip6 6818 ( 0.05%) 7183469 ( 0.08%) 1053.60
other 25899 ( 0.20%) 3210004 ( 0.04%) 123.94
frag 1574 ( 0.01%) 1733252 ( 0.02%) 1101.18
ip6 50967 ( 0.40%) 15969754 ( 0.19%) 313.34
tcp6 5216 ( 0.04%) 758913 ( 0.01%) 145.50
http(s) 133 ( 0.00%) 121062 ( 0.00%) 910.24
http(c) 1274 ( 0.01%) 192531 ( 0.00%) 151.12
smtp 181 ( 0.00%) 45855 ( 0.00%) 253.34
ftp 417 ( 0.00%) 38967 ( 0.00%) 93.45
ssh 162 ( 0.00%) 34024 ( 0.00%) 210.02
dns 20 ( 0.00%) 2920 ( 0.00%) 146.00
bgp 122 ( 0.00%) 12704 ( 0.00%) 104.13
other 2907 ( 0.02%) 310850 ( 0.00%) 106.93
udp6 30850 ( 0.24%) 6272404 ( 0.07%) 203.32
dns 29624 ( 0.23%) 6138568 ( 0.07%) 207.22
other 1226 ( 0.01%) 133836 ( 0.00%) 109.16
icmp6 7341 ( 0.06%) 953484 ( 0.01%) 129.88
ip6 2124 ( 0.02%) 259256 ( 0.00%) 122.06
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5406 ( 0.04%) 7721617 ( 0.09%) 1428.34
tcpdump file: 200701281400.dump.gz (334.47 MB)