Traffic Trace Info
DumpFile: 200712051400.dump
FileSize: 1776.29MB
Id: 200712051400
StartTime: Wed Dec 5 14:00:01 2007
EndTime: Wed Dec 5 14:15:00 2007
TotalTime: 899.52 seconds
TotalCapSize: 1389.95MB CapLen: 96 bytes
# of packets: 25318665 (16757.66MB)
AvgRate: 156.27Mbps stddev:17.61M
IP flow (unique src/dst pair) Information
# of flows: 860968 (avg. 29.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.0% 1.6% 1.4% 1.3% 1.3% 1.1% 1.0% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 448591
Top 10 bandwidth usage (bytes/total in %):
14.7% 7.2% 4.7% 4.5% 4.0% 3.4% 3.0% 2.8% 2.2% 1.7%
# of IPv6 addresses: 1389
Top 10 bandwidth usage (bytes/total in %):
50.0% 50.0% 20.6% 18.1% 3.2% 2.6% 2.6% 2.6% 2.4% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712051400.pktlen.png)
detailed numbers
[ 32- 63]: 5205044
[ 64- 127]: 6910614
[ 128- 255]: 860977
[ 256- 511]: 834515
[ 512- 1023]: 703124
[ 1024- 2047]: 10804391
Protocol Breakdown
![[protocol breakdown chart]](200712051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25318665 (100.00%) 17571683600 (100.00%) 694.02
ip 25129119 ( 99.25%) 17550573812 ( 99.88%) 698.42
tcp 20693655 ( 81.73%) 16245215244 ( 92.45%) 785.03
http(s) 8712863 ( 34.41%) 11212557682 ( 63.81%) 1286.90
http(c) 5639901 ( 22.28%) 1218739803 ( 6.94%) 216.09
squid 901256 ( 3.56%) 798602308 ( 4.54%) 886.10
smtp 772519 ( 3.05%) 245035114 ( 1.39%) 317.19
nntp 17 ( 0.00%) 1246 ( 0.00%) 73.29
ftp 140251 ( 0.55%) 47810045 ( 0.27%) 340.89
pop3 18954 ( 0.07%) 10644882 ( 0.06%) 561.62
imap 8573 ( 0.03%) 3587328 ( 0.02%) 418.44
telnet 530 ( 0.00%) 39578 ( 0.00%) 74.68
ssh 202771 ( 0.80%) 150214336 ( 0.85%) 740.81
dns 1791 ( 0.01%) 138151 ( 0.00%) 77.14
bgp 348 ( 0.00%) 80922 ( 0.00%) 232.53
napster 485 ( 0.00%) 57217 ( 0.00%) 117.97
realaud 54 ( 0.00%) 4780 ( 0.00%) 88.52
rtsp 160455 ( 0.63%) 28179273 ( 0.16%) 175.62
icecast 27807 ( 0.11%) 22988320 ( 0.13%) 826.71
other 4105079 ( 16.21%) 2506534199 ( 14.26%) 610.59
udp 3959138 ( 15.64%) 1248465268 ( 7.10%) 315.34
dns 1862577 ( 7.36%) 243366328 ( 1.38%) 130.66
realaud 1261 ( 0.00%) 86275 ( 0.00%) 68.42
halflif 34 ( 0.00%) 5475 ( 0.00%) 161.03
starcra 49 ( 0.00%) 9520 ( 0.00%) 194.29
everque 251 ( 0.00%) 245124 ( 0.00%) 976.59
unreal 391 ( 0.00%) 44910 ( 0.00%) 114.86
quake 37 ( 0.00%) 4191 ( 0.00%) 113.27
cuseeme 11 ( 0.00%) 3426 ( 0.00%) 311.45
other 2094320 ( 8.27%) 1004517596 ( 5.72%) 479.64
icmp 394145 ( 1.56%) 38369619 ( 0.22%) 97.35
ipip 3142 ( 0.01%) 486576 ( 0.00%) 154.86
ipsec 394 ( 0.00%) 184804 ( 0.00%) 469.05
ip6 1194 ( 0.00%) 212046 ( 0.00%) 177.59
other 77451 ( 0.31%) 17640255 ( 0.10%) 227.76
frag 3992 ( 0.02%) 3754187 ( 0.02%) 940.43
ip6 189546 ( 0.75%) 21109788 ( 0.12%) 111.37
tcp6 157039 ( 0.62%) 16219273 ( 0.09%) 103.28
http(s) 679 ( 0.00%) 695115 ( 0.00%) 1023.73
http(c) 142979 ( 0.56%) 10591876 ( 0.06%) 74.08
smtp 600 ( 0.00%) 173154 ( 0.00%) 288.59
ftp 63 ( 0.00%) 5784 ( 0.00%) 91.81
pop3 35 ( 0.00%) 3226 ( 0.00%) 92.17
ssh 46 ( 0.00%) 8984 ( 0.00%) 195.30
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 94 ( 0.00%) 9122 ( 0.00%) 97.04
other 12536 ( 0.05%) 4731377 ( 0.03%) 377.42
udp6 24081 ( 0.10%) 3810671 ( 0.02%) 158.24
dns 23667 ( 0.09%) 3752873 ( 0.02%) 158.57
other 414 ( 0.00%) 57798 ( 0.00%) 139.61
icmp6 8392 ( 0.03%) 1072621 ( 0.01%) 127.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 3143 ( 0.00%) 785.75
tcpdump file: 200712051400.dump.gz (644.05 MB)