Traffic Trace Info
DumpFile: 200712011400.dump
FileSize: 1481.90MB
Id: 200712011400
StartTime: Sat Dec 1 14:00:01 2007
EndTime: Sat Dec 1 14:15:00 2007
TotalTime: 899.53 seconds
TotalCapSize: 1155.86MB CapLen: 96 bytes
# of packets: 21366822 (14899.19MB)
AvgRate: 138.93Mbps stddev:24.01M
IP flow (unique src/dst pair) Information
# of flows: 678868 (avg. 31.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.9% 2.8% 2.8% 2.7% 2.6% 1.3% 1.2% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 391443
Top 10 bandwidth usage (bytes/total in %):
18.8% 8.1% 6.3% 6.0% 5.7% 4.2% 4.2% 3.9% 3.2% 2.8%
# of IPv6 addresses: 1867
Top 10 bandwidth usage (bytes/total in %):
57.5% 16.4% 16.4% 8.7% 8.7% 6.8% 6.8% 5.3% 4.5% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712011400.pktlen.png)
detailed numbers
[ 32- 63]: 4485497
[ 64- 127]: 5358633
[ 128- 255]: 581254
[ 256- 511]: 727418
[ 512- 1023]: 470393
[ 1024- 2047]: 9743627
Protocol Breakdown
![[protocol breakdown chart]](200712011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21366822 (100.00%) 15622930092 (100.00%) 731.18
ip 20948013 ( 98.04%) 15565236120 ( 99.63%) 743.04
tcp 16874459 ( 78.98%) 14415372723 ( 92.27%) 854.27
http(s) 7249089 ( 33.93%) 10024227322 ( 64.16%) 1382.83
http(c) 4392204 ( 20.56%) 418405035 ( 2.68%) 95.26
squid 757237 ( 3.54%) 478965599 ( 3.07%) 632.52
smtp 650828 ( 3.05%) 150207289 ( 0.96%) 230.79
ftp 469218 ( 2.20%) 612799909 ( 3.92%) 1306.00
pop3 15619 ( 0.07%) 12220386 ( 0.08%) 782.41
imap 16372 ( 0.08%) 18885288 ( 0.12%) 1153.51
telnet 16 ( 0.00%) 1327 ( 0.00%) 82.94
ssh 69446 ( 0.33%) 55169403 ( 0.35%) 794.42
dns 4629 ( 0.02%) 418274 ( 0.00%) 90.36
bgp 222 ( 0.00%) 76684 ( 0.00%) 345.42
napster 92 ( 0.00%) 37263 ( 0.00%) 405.03
realaud 117 ( 0.00%) 13218 ( 0.00%) 112.97
rtsp 64068 ( 0.30%) 32746544 ( 0.21%) 511.12
icecast 42079 ( 0.20%) 60724068 ( 0.39%) 1443.10
hotline 31 ( 0.00%) 3084 ( 0.00%) 99.48
other 3143186 ( 14.71%) 2550471670 ( 16.33%) 811.43
udp 3386705 ( 15.85%) 1075075920 ( 6.88%) 317.44
dns 1374573 ( 6.43%) 185414280 ( 1.19%) 134.89
realaud 586 ( 0.00%) 52664 ( 0.00%) 89.87
halflif 8 ( 0.00%) 703 ( 0.00%) 87.88
starcra 23 ( 0.00%) 3775 ( 0.00%) 164.13
everque 104 ( 0.00%) 19746 ( 0.00%) 189.87
unreal 6 ( 0.00%) 799 ( 0.00%) 133.17
quake 13 ( 0.00%) 2412 ( 0.00%) 185.54
cuseeme 8 ( 0.00%) 781 ( 0.00%) 97.62
other 2011340 ( 9.41%) 889550440 ( 5.69%) 442.27
icmp 588521 ( 2.75%) 52586568 ( 0.34%) 89.35
ipip 302 ( 0.00%) 35468 ( 0.00%) 117.44
ipsec 3371 ( 0.02%) 3423690 ( 0.02%) 1015.63
ip6 750 ( 0.00%) 90744 ( 0.00%) 120.99
other 93905 ( 0.44%) 18651007 ( 0.12%) 198.62
frag 11125 ( 0.05%) 9775016 ( 0.06%) 878.65
ip6 418809 ( 1.96%) 57693972 ( 0.37%) 137.76
tcp6 395278 ( 1.85%) 54054153 ( 0.35%) 136.75
http(s) 1310 ( 0.01%) 1262267 ( 0.01%) 963.56
http(c) 270836 ( 1.27%) 33337879 ( 0.21%) 123.09
squid 24 ( 0.00%) 2215 ( 0.00%) 92.29
smtp 1508 ( 0.01%) 633924 ( 0.00%) 420.37
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 4921 ( 0.02%) 5007124 ( 0.03%) 1017.50
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
icecast 3 ( 0.00%) 234 ( 0.00%) 78.00
other 116575 ( 0.55%) 13800510 ( 0.09%) 118.38
udp6 16823 ( 0.08%) 2805549 ( 0.02%) 166.77
dns 15722 ( 0.07%) 2598607 ( 0.02%) 165.28
other 1101 ( 0.01%) 206942 ( 0.00%) 187.96
icmp6 6654 ( 0.03%) 814532 ( 0.01%) 122.41
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 24 ( 0.00%) 15658 ( 0.00%) 652.42
tcpdump file: 200712011400.dump.gz (517.44 MB)