Traffic Trace Info
DumpFile: 200711121400.dump
FileSize: 2104.54MB
Id: 200711121400
StartTime: Mon Nov 12 14:00:01 2007
EndTime: Mon Nov 12 14:15:01 2007
TotalTime: 900.19 seconds
TotalCapSize: 1648.48MB CapLen: 96 bytes
# of packets: 29884325 (19203.35MB)
AvgRate: 179.02Mbps stddev:27.20M
IP flow (unique src/dst pair) Information
# of flows: 712595 (avg. 41.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.6% 1.5% 1.3% 1.1% 1.1% 1.0% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 377365
Top 10 bandwidth usage (bytes/total in %):
9.3% 6.2% 4.6% 2.7% 2.7% 2.6% 2.2% 2.2% 2.2% 2.1%
# of IPv6 addresses: 1785
Top 10 bandwidth usage (bytes/total in %):
70.3% 70.3% 4.6% 3.1% 2.5% 2.3% 1.6% 1.6% 1.6% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200711121400.pktlen.png)
detailed numbers
[ 32- 63]: 7506438
[ 64- 127]: 7726344
[ 128- 255]: 765644
[ 256- 511]: 683282
[ 512- 1023]: 898794
[ 1024- 2047]: 12303823
Protocol Breakdown
![[protocol breakdown chart]](200711121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29884325 (100.00%) 20136171915 (100.00%) 673.80
ip 29838134 ( 99.85%) 20114515440 ( 99.89%) 674.12
tcp 25744078 ( 86.15%) 19238446378 ( 95.54%) 747.30
http(s) 10661957 ( 35.68%) 13730609806 ( 68.19%) 1287.81
http(c) 8966847 ( 30.01%) 2155500608 ( 10.70%) 240.39
squid 902863 ( 3.02%) 730412660 ( 3.63%) 809.00
smtp 737229 ( 2.47%) 230852245 ( 1.15%) 313.14
nntp 69 ( 0.00%) 5165 ( 0.00%) 74.86
ftp 548264 ( 1.83%) 44522416 ( 0.22%) 81.21
pop3 30522 ( 0.10%) 24618852 ( 0.12%) 806.59
imap 7607 ( 0.03%) 3304463 ( 0.02%) 434.40
telnet 833 ( 0.00%) 236789 ( 0.00%) 284.26
ssh 740044 ( 2.48%) 432618481 ( 2.15%) 584.58
dns 2672 ( 0.01%) 208417 ( 0.00%) 78.00
bgp 259 ( 0.00%) 59328 ( 0.00%) 229.07
napster 15 ( 0.00%) 1930 ( 0.00%) 128.67
realaud 75 ( 0.00%) 11792 ( 0.00%) 157.23
rtsp 276437 ( 0.93%) 180550030 ( 0.90%) 653.13
icecast 11050 ( 0.04%) 955969 ( 0.00%) 86.51
hotline 21 ( 0.00%) 1260 ( 0.00%) 60.00
other 2857312 ( 9.56%) 1703976047 ( 8.46%) 596.36
udp 2895035 ( 9.69%) 754382405 ( 3.75%) 260.58
dns 1622160 ( 5.43%) 227223093 ( 1.13%) 140.07
realaud 6319 ( 0.02%) 2635285 ( 0.01%) 417.04
halflif 13 ( 0.00%) 1742 ( 0.00%) 134.00
starcra 39 ( 0.00%) 5603 ( 0.00%) 143.67
everque 75 ( 0.00%) 13148 ( 0.00%) 175.31
unreal 15 ( 0.00%) 2048 ( 0.00%) 136.53
quake 23 ( 0.00%) 1894 ( 0.00%) 82.35
cuseeme 4 ( 0.00%) 592 ( 0.00%) 148.00
other 1266363 ( 4.24%) 524491075 ( 2.60%) 414.17
icmp 984033 ( 3.29%) 79052965 ( 0.39%) 80.34
ipip 326 ( 0.00%) 39536 ( 0.00%) 121.28
ipsec 266 ( 0.00%) 111332 ( 0.00%) 418.54
ip6 7200 ( 0.02%) 3973829 ( 0.02%) 551.92
other 207196 ( 0.69%) 38508995 ( 0.19%) 185.86
frag 12750 ( 0.04%) 11467046 ( 0.06%) 899.38
ip6 46191 ( 0.15%) 21656475 ( 0.11%) 468.85
tcp6 18092 ( 0.06%) 17630247 ( 0.09%) 974.48
http(s) 992 ( 0.00%) 1125606 ( 0.01%) 1134.68
http(c) 722 ( 0.00%) 74329 ( 0.00%) 102.95
smtp 1942 ( 0.01%) 726295 ( 0.00%) 373.99
pop3 44 ( 0.00%) 4016 ( 0.00%) 91.27
telnet 51 ( 0.00%) 3889 ( 0.00%) 76.25
ssh 229 ( 0.00%) 77232 ( 0.00%) 337.26
bgp 112 ( 0.00%) 14763 ( 0.00%) 131.81
other 14000 ( 0.05%) 15604117 ( 0.08%) 1114.58
udp6 21616 ( 0.07%) 3242151 ( 0.02%) 149.99
dns 20732 ( 0.07%) 3102911 ( 0.02%) 149.67
other 884 ( 0.00%) 139240 ( 0.00%) 157.51
icmp6 6453 ( 0.02%) 779997 ( 0.00%) 120.87
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200711121400.dump.gz (757.86 MB)