Traffic Trace Info
DumpFile: 200712151400.dump
FileSize: 1296.73MB
Id: 200712151400
StartTime: Sat Dec 15 14:00:00 2007
EndTime: Sat Dec 15 14:15:00 2007
TotalTime: 899.97 seconds
TotalCapSize: 1014.89MB CapLen: 96 bytes
# of packets: 18469883 (11985.43MB)
AvgRate: 111.71Mbps stddev:14.91M
IP flow (unique src/dst pair) Information
# of flows: 555944 (avg. 33.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.3% 2.1% 1.7% 1.6% 1.6% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 278923
Top 10 bandwidth usage (bytes/total in %):
18.4% 7.3% 5.8% 4.7% 4.2% 4.0% 3.1% 2.8% 2.7% 2.4%
# of IPv6 addresses: 1179
Top 10 bandwidth usage (bytes/total in %):
70.2% 70.2% 2.6% 2.5% 2.4% 2.1% 1.6% 1.6% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712151400.pktlen.png)
detailed numbers
[ 32- 63]: 4276101
[ 64- 127]: 4888376
[ 128- 255]: 652189
[ 256- 511]: 402034
[ 512- 1023]: 463934
[ 1024- 2047]: 7787249
Protocol Breakdown
![[protocol breakdown chart]](200712151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18469883 (100.00%) 12567630947 (100.00%) 680.44
ip 18436246 ( 99.82%) 12553655839 ( 99.89%) 680.92
tcp 14405133 ( 77.99%) 11863107048 ( 94.39%) 823.53
http(s) 6424005 ( 34.78%) 8664063700 ( 68.94%) 1348.70
http(c) 3706047 ( 20.07%) 376903784 ( 3.00%) 101.70
squid 587696 ( 3.18%) 463185904 ( 3.69%) 788.14
smtp 603918 ( 3.27%) 98408657 ( 0.78%) 162.95
ftp 31783 ( 0.17%) 4158099 ( 0.03%) 130.83
pop3 10404 ( 0.06%) 7688829 ( 0.06%) 739.03
imap 5412 ( 0.03%) 1986272 ( 0.02%) 367.01
telnet 144 ( 0.00%) 32924 ( 0.00%) 228.64
ssh 7508 ( 0.04%) 2361182 ( 0.02%) 314.49
dns 1551 ( 0.01%) 125005 ( 0.00%) 80.60
bgp 321 ( 0.00%) 146432 ( 0.00%) 456.17
realaud 87 ( 0.00%) 45279 ( 0.00%) 520.45
rtsp 264238 ( 1.43%) 178721121 ( 1.42%) 676.36
icecast 28214 ( 0.15%) 23532633 ( 0.19%) 834.08
hotline 21 ( 0.00%) 5150 ( 0.00%) 245.24
other 2733781 ( 14.80%) 2041741897 ( 16.25%) 746.86
udp 2975848 ( 16.11%) 588728199 ( 4.68%) 197.84
dns 1651317 ( 8.94%) 203401472 ( 1.62%) 123.18
realaud 26620 ( 0.14%) 14273724 ( 0.11%) 536.20
halflif 19 ( 0.00%) 2094 ( 0.00%) 110.21
starcra 27 ( 0.00%) 3657 ( 0.00%) 135.44
everque 59 ( 0.00%) 12572 ( 0.00%) 213.08
unreal 28 ( 0.00%) 3942 ( 0.00%) 140.79
quake 21 ( 0.00%) 3098 ( 0.00%) 147.52
cuseeme 5 ( 0.00%) 417 ( 0.00%) 83.40
other 1297694 ( 7.03%) 371009979 ( 2.95%) 285.90
icmp 978251 ( 5.30%) 86930783 ( 0.69%) 88.86
ipip 340 ( 0.00%) 38868 ( 0.00%) 114.32
ipsec 180 ( 0.00%) 19800 ( 0.00%) 110.00
ip6 1110 ( 0.01%) 146109 ( 0.00%) 131.63
other 75384 ( 0.41%) 14685032 ( 0.12%) 194.80
frag 1479 ( 0.01%) 1207478 ( 0.01%) 816.42
ip6 33637 ( 0.18%) 13975108 ( 0.11%) 415.47
tcp6 11379 ( 0.06%) 10529345 ( 0.08%) 925.33
http(s) 179 ( 0.00%) 145176 ( 0.00%) 811.04
http(c) 322 ( 0.00%) 33791 ( 0.00%) 104.94
smtp 446 ( 0.00%) 137744 ( 0.00%) 308.84
nntp 9 ( 0.00%) 2199 ( 0.00%) 244.33
ssh 29 ( 0.00%) 7702 ( 0.00%) 265.59
dns 23 ( 0.00%) 2526 ( 0.00%) 109.83
bgp 109 ( 0.00%) 13714 ( 0.00%) 125.82
other 10262 ( 0.06%) 10186493 ( 0.08%) 992.64
udp6 17015 ( 0.09%) 2766625 ( 0.02%) 162.60
dns 16733 ( 0.09%) 2731401 ( 0.02%) 163.23
other 282 ( 0.00%) 35224 ( 0.00%) 124.91
icmp6 5213 ( 0.03%) 675058 ( 0.01%) 129.50
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200712151400.dump.gz (448.49 MB)