Traffic Trace Info
DumpFile: 200712031400.dump
FileSize: 1818.73MB
Id: 200712031400
StartTime: Mon Dec 3 14:00:00 2007
EndTime: Mon Dec 3 14:15:01 2007
TotalTime: 900.62 seconds
TotalCapSize: 1419.89MB CapLen: 96 bytes
# of packets: 26137819 (16949.46MB)
AvgRate: 157.89Mbps stddev:19.93M
IP flow (unique src/dst pair) Information
# of flows: 854166 (avg. 30.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.1% 1.1% 0.9% 0.9% 0.8% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 495583
Top 10 bandwidth usage (bytes/total in %):
15.5% 4.8% 4.7% 4.3% 3.2% 3.1% 2.1% 1.7% 1.7% 1.7%
# of IPv6 addresses: 1951
Top 10 bandwidth usage (bytes/total in %):
56.1% 37.4% 18.7% 12.4% 12.4% 2.5% 2.2% 2.2% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712031400.pktlen.png)
detailed numbers
[ 32- 63]: 6359162
[ 64- 127]: 6641434
[ 128- 255]: 694634
[ 256- 511]: 762068
[ 512- 1023]: 831298
[ 1024- 2047]: 10849223
Protocol Breakdown
![[protocol breakdown chart]](200712031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26137819 (100.00%) 17772795865 (100.00%) 679.96
ip 25908231 ( 99.12%) 17742013392 ( 99.83%) 684.80
tcp 21758129 ( 83.24%) 16620280465 ( 93.52%) 763.87
http(s) 9127785 ( 34.92%) 11962383968 ( 67.31%) 1310.55
http(c) 6628905 ( 25.36%) 962791691 ( 5.42%) 145.24
squid 1030708 ( 3.94%) 705489011 ( 3.97%) 684.47
smtp 857538 ( 3.28%) 257530952 ( 1.45%) 300.31
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 27254 ( 0.10%) 2802242 ( 0.02%) 102.82
pop3 31951 ( 0.12%) 33057475 ( 0.19%) 1034.63
imap 10044 ( 0.04%) 4530693 ( 0.03%) 451.08
telnet 825 ( 0.00%) 184083 ( 0.00%) 223.13
ssh 72011 ( 0.28%) 59262366 ( 0.33%) 822.96
dns 4509 ( 0.02%) 2423106 ( 0.01%) 537.39
bgp 226 ( 0.00%) 78992 ( 0.00%) 349.52
napster 592 ( 0.00%) 338666 ( 0.00%) 572.07
realaud 230 ( 0.00%) 19660 ( 0.00%) 85.48
rtsp 126961 ( 0.49%) 56268072 ( 0.32%) 443.19
icecast 24327 ( 0.09%) 17096915 ( 0.10%) 702.80
hotline 6 ( 0.00%) 405 ( 0.00%) 67.50
other 3814253 ( 14.59%) 2556021856 ( 14.38%) 670.12
udp 3518387 ( 13.46%) 1046459526 ( 5.89%) 297.43
dns 1729267 ( 6.62%) 232154798 ( 1.31%) 134.25
realaud 18741 ( 0.07%) 11265347 ( 0.06%) 601.11
halflif 14 ( 0.00%) 1647 ( 0.00%) 117.64
starcra 40 ( 0.00%) 6582 ( 0.00%) 164.55
everque 155 ( 0.00%) 26412 ( 0.00%) 170.40
unreal 29 ( 0.00%) 4280 ( 0.00%) 147.59
quake 42 ( 0.00%) 4198 ( 0.00%) 99.95
cuseeme 7 ( 0.00%) 659 ( 0.00%) 94.14
other 1770009 ( 6.77%) 802967320 ( 4.52%) 453.65
icmp 555170 ( 2.12%) 49439612 ( 0.28%) 89.05
ipip 356 ( 0.00%) 43560 ( 0.00%) 122.36
ipsec 173 ( 0.00%) 19030 ( 0.00%) 110.00
ip6 884 ( 0.00%) 172470 ( 0.00%) 195.10
other 75132 ( 0.29%) 25598729 ( 0.14%) 340.72
frag 12538 ( 0.05%) 10873213 ( 0.06%) 867.22
ip6 229588 ( 0.88%) 30782473 ( 0.17%) 134.08
tcp6 188415 ( 0.72%) 24866721 ( 0.14%) 131.98
http(s) 2036 ( 0.01%) 1722758 ( 0.01%) 846.15
http(c) 178690 ( 0.68%) 17991949 ( 0.10%) 100.69
smtp 731 ( 0.00%) 339812 ( 0.00%) 464.86
telnet 866 ( 0.00%) 639623 ( 0.00%) 738.59
ssh 41 ( 0.00%) 4018 ( 0.00%) 98.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 61 ( 0.00%) 6323 ( 0.00%) 103.66
other 5983 ( 0.02%) 4161603 ( 0.02%) 695.57
udp6 34028 ( 0.13%) 4940476 ( 0.03%) 145.19
dns 32626 ( 0.12%) 4559632 ( 0.03%) 139.75
other 1402 ( 0.01%) 380844 ( 0.00%) 271.64
icmp6 7073 ( 0.03%) 932576 ( 0.01%) 131.85
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 42 ( 0.00%) 38620 ( 0.00%) 919.52
tcpdump file: 200712031400.dump.gz (667.28 MB)