Traffic Trace Info
DumpFile: 200712091400.dump
FileSize: 1197.88MB
Id: 200712091400
StartTime: Sun Dec 9 14:00:00 2007
EndTime: Sun Dec 9 14:15:01 2007
TotalTime: 900.51 seconds
TotalCapSize: 939.65MB CapLen: 96 bytes
# of packets: 16922513 (11311.78MB)
AvgRate: 105.38Mbps stddev:9.85M
IP flow (unique src/dst pair) Information
# of flows: 577372 (avg. 29.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 3.1% 1.9% 1.9% 1.5% 1.2% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 339909
Top 10 bandwidth usage (bytes/total in %):
25.1% 13.4% 7.7% 7.5% 5.2% 5.1% 3.2% 2.2% 2.0% 1.9%
# of IPv6 addresses: 1015
Top 10 bandwidth usage (bytes/total in %):
48.2% 48.2% 4.9% 4.8% 4.6% 3.0% 3.0% 3.0% 3.0% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712091400.pktlen.png)
detailed numbers
[ 32- 63]: 3376116
[ 64- 127]: 4751745
[ 128- 255]: 651150
[ 256- 511]: 374947
[ 512- 1023]: 453508
[ 1024- 2047]: 7315047
Protocol Breakdown
![[protocol breakdown chart]](200712091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16922513 (100.00%) 11861264705 (100.00%) 700.92
ip 16892848 ( 99.82%) 11853277551 ( 99.93%) 701.67
tcp 13897747 ( 82.13%) 11279550812 ( 95.10%) 811.61
http(s) 4574579 ( 27.03%) 6271051873 ( 52.87%) 1370.85
http(c) 2125389 ( 12.56%) 355760021 ( 3.00%) 167.39
squid 802781 ( 4.74%) 461402576 ( 3.89%) 574.76
smtp 531042 ( 3.14%) 114532562 ( 0.97%) 215.68
ftp 429750 ( 2.54%) 340784929 ( 2.87%) 792.98
pop3 11342 ( 0.07%) 8656819 ( 0.07%) 763.25
imap 4793 ( 0.03%) 3613793 ( 0.03%) 753.97
telnet 181 ( 0.00%) 11940 ( 0.00%) 65.97
ssh 1052622 ( 6.22%) 202500661 ( 1.71%) 192.38
dns 1379 ( 0.01%) 106930 ( 0.00%) 77.54
bgp 243 ( 0.00%) 92310 ( 0.00%) 379.88
napster 88 ( 0.00%) 43893 ( 0.00%) 498.78
realaud 38 ( 0.00%) 4518 ( 0.00%) 118.89
rtsp 75882 ( 0.45%) 4924507 ( 0.04%) 64.90
icecast 22684 ( 0.13%) 16017117 ( 0.14%) 706.10
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 4264937 ( 25.20%) 3500045337 ( 29.51%) 820.66
udp 2337492 ( 13.81%) 517165490 ( 4.36%) 221.25
dns 1292012 ( 7.63%) 145471934 ( 1.23%) 112.59
realaud 118 ( 0.00%) 12936 ( 0.00%) 109.63
halflif 18 ( 0.00%) 1802 ( 0.00%) 100.11
starcra 32 ( 0.00%) 4906 ( 0.00%) 153.31
everque 61 ( 0.00%) 11817 ( 0.00%) 193.72
unreal 11 ( 0.00%) 1137 ( 0.00%) 103.36
quake 41 ( 0.00%) 5329 ( 0.00%) 129.98
cuseeme 2 ( 0.00%) 172 ( 0.00%) 86.00
other 1045172 ( 6.18%) 371626332 ( 3.13%) 355.56
icmp 648263 ( 3.83%) 53718980 ( 0.45%) 82.87
igmp 2 ( 0.00%) 2370 ( 0.00%) 1185.00
ospf 2 ( 0.00%) 1154 ( 0.00%) 577.00
ipip 359 ( 0.00%) 47979 ( 0.00%) 133.65
ipsec 172 ( 0.00%) 21270 ( 0.00%) 123.66
ip6 822 ( 0.00%) 99174 ( 0.00%) 120.65
pim 6 ( 0.00%) 3052 ( 0.00%) 508.67
sctp 1 ( 0.00%) 1160 ( 0.00%) 1160.00
other 7982 ( 0.05%) 2666110 ( 0.02%) 334.02
frag 2380 ( 0.01%) 1886033 ( 0.02%) 792.45
ip6 29665 ( 0.18%) 7987154 ( 0.07%) 269.25
tcp6 7570 ( 0.04%) 4568805 ( 0.04%) 603.54
http(s) 147 ( 0.00%) 118401 ( 0.00%) 805.45
http(c) 246 ( 0.00%) 29639 ( 0.00%) 120.48
smtp 780 ( 0.00%) 198653 ( 0.00%) 254.68
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 33 ( 0.00%) 8118 ( 0.00%) 246.00
dns 4 ( 0.00%) 454 ( 0.00%) 113.50
bgp 86 ( 0.00%) 10922 ( 0.00%) 127.00
other 6241 ( 0.04%) 4199576 ( 0.04%) 672.90
udp6 15786 ( 0.09%) 2556104 ( 0.02%) 161.92
dns 15593 ( 0.09%) 2531960 ( 0.02%) 162.38
other 193 ( 0.00%) 24144 ( 0.00%) 125.10
icmp6 6279 ( 0.04%) 858165 ( 0.01%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200712091400.dump.gz (444.84 MB)