Traffic Trace Info
DumpFile: 200712101400.dump
FileSize: 1949.60MB
Id: 200712101400
StartTime: Mon Dec 10 14:00:01 2007
EndTime: Mon Dec 10 14:15:00 2007
TotalTime: 899.62 seconds
TotalCapSize: 1527.54MB CapLen: 96 bytes
# of packets: 27659679 (18300.28MB)
AvgRate: 170.68Mbps stddev:20.34M
IP flow (unique src/dst pair) Information
# of flows: 759455 (avg. 36.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 1.7% 1.6% 1.2% 1.2% 1.2% 1.0% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 429546
Top 10 bandwidth usage (bytes/total in %):
13.8% 9.3% 3.4% 3.1% 3.1% 3.0% 2.8% 2.7% 1.9% 1.7%
# of IPv6 addresses: 1114
Top 10 bandwidth usage (bytes/total in %):
38.4% 36.4% 36.4% 33.9% 4.4% 3.4% 2.1% 1.8% 1.6% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712101400.pktlen.png)
detailed numbers
[ 32- 63]: 5856137
[ 64- 127]: 7804174
[ 128- 255]: 721632
[ 256- 511]: 809344
[ 512- 1023]: 692459
[ 1024- 2047]: 11775933
Protocol Breakdown
![[protocol breakdown chart]](200712101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27659679 (100.00%) 19189238340 (100.00%) 693.76
ip 27504568 ( 99.44%) 19167872045 ( 99.89%) 696.90
tcp 23054918 ( 83.35%) 18073502535 ( 94.19%) 783.93
http(s) 9181803 ( 33.20%) 12128265326 ( 63.20%) 1320.90
http(c) 6201558 ( 22.42%) 908457963 ( 4.73%) 146.49
squid 958304 ( 3.46%) 688803614 ( 3.59%) 718.77
smtp 724348 ( 2.62%) 186002907 ( 0.97%) 256.79
ftp 80247 ( 0.29%) 24672668 ( 0.13%) 307.46
pop3 14089 ( 0.05%) 8252975 ( 0.04%) 585.77
imap 10564 ( 0.04%) 6144295 ( 0.03%) 581.63
telnet 136 ( 0.00%) 28617 ( 0.00%) 210.42
ssh 179037 ( 0.65%) 25088622 ( 0.13%) 140.13
dns 2465 ( 0.01%) 189258 ( 0.00%) 76.78
bgp 901 ( 0.00%) 625455 ( 0.00%) 694.18
napster 6 ( 0.00%) 1074 ( 0.00%) 179.00
realaud 7 ( 0.00%) 420 ( 0.00%) 60.00
rtsp 454339 ( 1.64%) 393238399 ( 2.05%) 865.52
icecast 10924 ( 0.04%) 1150319 ( 0.01%) 105.30
hotline 13 ( 0.00%) 2025 ( 0.00%) 155.77
other 5236169 ( 18.93%) 3702578118 ( 19.30%) 707.12
udp 3462929 ( 12.52%) 995316871 ( 5.19%) 287.42
dns 1587079 ( 5.74%) 177491506 ( 0.92%) 111.84
realaud 217 ( 0.00%) 19482 ( 0.00%) 89.78
halflif 38 ( 0.00%) 5364 ( 0.00%) 141.16
starcra 15 ( 0.00%) 1472 ( 0.00%) 98.13
everque 54 ( 0.00%) 10579 ( 0.00%) 195.91
unreal 19 ( 0.00%) 5268 ( 0.00%) 277.26
quake 21 ( 0.00%) 2343 ( 0.00%) 111.57
cuseeme 10 ( 0.00%) 2908 ( 0.00%) 290.80
other 1875442 ( 6.78%) 817767719 ( 4.26%) 436.04
icmp 802898 ( 2.90%) 67676464 ( 0.35%) 84.29
ipip 343 ( 0.00%) 42014 ( 0.00%) 122.49
ipsec 715 ( 0.00%) 643826 ( 0.00%) 900.46
ip6 822 ( 0.00%) 100257 ( 0.00%) 121.97
other 181943 ( 0.66%) 30590078 ( 0.16%) 168.13
frag 11367 ( 0.04%) 8905566 ( 0.05%) 783.46
ip6 155111 ( 0.56%) 21366295 ( 0.11%) 137.75
tcp6 126887 ( 0.46%) 17135279 ( 0.09%) 135.04
http(s) 389 ( 0.00%) 442660 ( 0.00%) 1137.94
http(c) 116074 ( 0.42%) 8731355 ( 0.05%) 75.22
smtp 814 ( 0.00%) 237387 ( 0.00%) 291.63
pop3 33 ( 0.00%) 3042 ( 0.00%) 92.18
ssh 59 ( 0.00%) 9934 ( 0.00%) 168.37
dns 5 ( 0.00%) 539 ( 0.00%) 107.80
bgp 120 ( 0.00%) 16490 ( 0.00%) 137.42
other 9393 ( 0.03%) 7693872 ( 0.04%) 819.11
udp6 18295 ( 0.07%) 3001792 ( 0.02%) 164.08
dns 18129 ( 0.07%) 2981084 ( 0.02%) 164.44
other 166 ( 0.00%) 20708 ( 0.00%) 124.75
icmp6 9872 ( 0.04%) 1202341 ( 0.01%) 121.79
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 27 ( 0.00%) 22803 ( 0.00%) 844.56
tcpdump file: 200712101400.dump.gz (699.71 MB)