Traffic Trace Info
DumpFile: 200712071400.dump
FileSize: 1681.35MB
Id: 200712071400
StartTime: Fri Dec 7 14:00:01 2007
EndTime: Fri Dec 7 14:15:01 2007
TotalTime: 899.52 seconds
TotalCapSize: 1320.23MB CapLen: 96 bytes
# of packets: 23665254 (16164.06MB)
AvgRate: 150.74Mbps stddev:24.33M
IP flow (unique src/dst pair) Information
# of flows: 746605 (avg. 31.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.3% 2.0% 1.9% 1.1% 0.8% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 385758
Top 10 bandwidth usage (bytes/total in %):
19.4% 9.5% 4.6% 4.1% 3.4% 3.2% 3.1% 2.5% 2.0% 1.9%
# of IPv6 addresses: 1530
Top 10 bandwidth usage (bytes/total in %):
59.0% 59.0% 27.4% 27.4% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712071400.pktlen.png)
detailed numbers
[ 32- 63]: 5299726
[ 64- 127]: 5858021
[ 128- 255]: 667143
[ 256- 511]: 614604
[ 512- 1023]: 824745
[ 1024- 2047]: 10401015
Protocol Breakdown
![[protocol breakdown chart]](200712071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23665254 (100.00%) 16949243141 (100.00%) 716.21
ip 23474612 ( 99.19%) 16910326409 ( 99.77%) 720.37
tcp 20592560 ( 87.02%) 16345083344 ( 96.44%) 793.74
http(s) 8855949 ( 37.42%) 11624872983 ( 68.59%) 1312.66
http(c) 5513060 ( 23.30%) 762837524 ( 4.50%) 138.37
squid 834214 ( 3.53%) 558993917 ( 3.30%) 670.08
smtp 639053 ( 2.70%) 153740056 ( 0.91%) 240.57
ftp 148011 ( 0.63%) 44876877 ( 0.26%) 303.20
pop3 22227 ( 0.09%) 18367029 ( 0.11%) 826.34
imap 8939 ( 0.04%) 2571078 ( 0.02%) 287.62
telnet 456 ( 0.00%) 29639 ( 0.00%) 65.00
ssh 89306 ( 0.38%) 62427453 ( 0.37%) 699.03
dns 1624 ( 0.01%) 124218 ( 0.00%) 76.49
bgp 225 ( 0.00%) 86103 ( 0.00%) 382.68
napster 9 ( 0.00%) 871 ( 0.00%) 96.78
realaud 16 ( 0.00%) 2988 ( 0.00%) 186.75
rtsp 287588 ( 1.22%) 166254873 ( 0.98%) 578.10
icecast 30063 ( 0.13%) 23629615 ( 0.14%) 786.00
hotline 5 ( 0.00%) 304 ( 0.00%) 60.80
other 4161809 ( 17.59%) 2926267456 ( 17.26%) 703.12
udp 2420240 ( 10.23%) 516397491 ( 3.05%) 213.37
dns 1468149 ( 6.20%) 164414222 ( 0.97%) 111.99
realaud 10518 ( 0.04%) 5728466 ( 0.03%) 544.63
halflif 17 ( 0.00%) 1682 ( 0.00%) 98.94
starcra 23 ( 0.00%) 3428 ( 0.00%) 149.04
everque 47 ( 0.00%) 9468 ( 0.00%) 201.45
unreal 17 ( 0.00%) 2681 ( 0.00%) 157.71
quake 26 ( 0.00%) 2646 ( 0.00%) 101.77
cuseeme 10 ( 0.00%) 1216 ( 0.00%) 121.60
other 941416 ( 3.98%) 346222783 ( 2.04%) 367.77
icmp 425966 ( 1.80%) 39278721 ( 0.23%) 92.21
ipip 347 ( 0.00%) 40630 ( 0.00%) 117.09
ipsec 2554 ( 0.01%) 2862332 ( 0.02%) 1120.73
ip6 1033 ( 0.00%) 129904 ( 0.00%) 125.75
other 31912 ( 0.13%) 6533987 ( 0.04%) 204.75
frag 2200 ( 0.01%) 1708727 ( 0.01%) 776.69
ip6 190642 ( 0.81%) 38916732 ( 0.23%) 204.14
tcp6 165544 ( 0.70%) 35198081 ( 0.21%) 212.62
http(s) 642 ( 0.00%) 716408 ( 0.00%) 1115.90
http(c) 144753 ( 0.61%) 10752224 ( 0.06%) 74.28
squid 34 ( 0.00%) 2952 ( 0.00%) 86.82
smtp 1070 ( 0.00%) 377380 ( 0.00%) 352.69
ftp 33 ( 0.00%) 3301 ( 0.00%) 100.03
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 29 ( 0.00%) 7702 ( 0.00%) 265.59
bgp 123 ( 0.00%) 16962 ( 0.00%) 137.90
other 18827 ( 0.08%) 23318110 ( 0.14%) 1238.55
udp6 18777 ( 0.08%) 2937536 ( 0.02%) 156.44
dns 17902 ( 0.08%) 2747063 ( 0.02%) 153.45
starcra 2 ( 0.00%) 274 ( 0.00%) 137.00
other 873 ( 0.00%) 190199 ( 0.00%) 217.87
icmp6 6263 ( 0.03%) 751389 ( 0.00%) 119.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 28 ( 0.00%) 25646 ( 0.00%) 915.93
tcpdump file: 200712071400.dump.gz (597.15 MB)