Traffic Trace Info
DumpFile: 200712161400.dump
FileSize: 1222.86MB
Id: 200712161400
StartTime: Sun Dec 16 14:00:01 2007
EndTime: Sun Dec 16 14:15:01 2007
TotalTime: 900.01 seconds
TotalCapSize: 951.85MB CapLen: 96 bytes
# of packets: 17760312 (11841.17MB)
AvgRate: 110.38Mbps stddev:19.45M
IP flow (unique src/dst pair) Information
# of flows: 618093 (avg. 28.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.9% 5.1% 4.5% 4.1% 2.0% 1.7% 1.5% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 348352
Top 10 bandwidth usage (bytes/total in %):
22.2% 8.8% 8.5% 8.3% 8.1% 5.1% 4.5% 4.5% 4.3% 4.1%
# of IPv6 addresses: 972
Top 10 bandwidth usage (bytes/total in %):
52.3% 52.3% 4.7% 4.3% 3.9% 3.2% 3.1% 3.1% 3.0% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712161400.pktlen.png)
detailed numbers
[ 32- 63]: 3970639
[ 64- 127]: 4476465
[ 128- 255]: 732632
[ 256- 511]: 490053
[ 512- 1023]: 423960
[ 1024- 2047]: 7666563
Protocol Breakdown
![[protocol breakdown chart]](200712161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17760312 (100.00%) 12416366420 (100.00%) 699.11
ip 17733759 ( 99.85%) 12408772050 ( 99.94%) 699.73
tcp 13429071 ( 75.61%) 11525592595 ( 92.83%) 858.26
http(s) 4354377 ( 24.52%) 5864316110 ( 47.23%) 1346.76
http(c) 1952133 ( 10.99%) 247212291 ( 1.99%) 126.64
squid 803159 ( 4.52%) 506257128 ( 4.08%) 630.33
smtp 603180 ( 3.40%) 125293029 ( 1.01%) 207.72
ftp 54807 ( 0.31%) 36865068 ( 0.30%) 672.63
pop3 8385 ( 0.05%) 5687947 ( 0.05%) 678.35
imap 5214 ( 0.03%) 1267047 ( 0.01%) 243.01
telnet 25 ( 0.00%) 1686 ( 0.00%) 67.44
ssh 9302 ( 0.05%) 1627080 ( 0.01%) 174.92
dns 2175 ( 0.01%) 171550 ( 0.00%) 78.87
bgp 220 ( 0.00%) 81580 ( 0.00%) 370.82
napster 283 ( 0.00%) 124411 ( 0.00%) 439.61
realaud 125 ( 0.00%) 11643 ( 0.00%) 93.14
rtsp 20531 ( 0.12%) 2010981 ( 0.02%) 97.95
icecast 39055 ( 0.22%) 44509163 ( 0.36%) 1139.65
other 5576095 ( 31.40%) 4690155581 ( 37.77%) 841.12
udp 3448733 ( 19.42%) 788396501 ( 6.35%) 228.60
dns 1577071 ( 8.88%) 186173236 ( 1.50%) 118.05
realaud 1953 ( 0.01%) 130868 ( 0.00%) 67.01
halflif 24 ( 0.00%) 3733 ( 0.00%) 155.54
starcra 17 ( 0.00%) 2691 ( 0.00%) 158.29
everque 63 ( 0.00%) 11653 ( 0.00%) 184.97
unreal 30 ( 0.00%) 3984 ( 0.00%) 132.80
quake 18 ( 0.00%) 1720 ( 0.00%) 95.56
cuseeme 13 ( 0.00%) 1281 ( 0.00%) 98.54
other 1869539 ( 10.53%) 602061219 ( 4.85%) 322.04
icmp 746195 ( 4.20%) 71412672 ( 0.58%) 95.70
ipip 335 ( 0.00%) 40438 ( 0.00%) 120.71
ipsec 7413 ( 0.04%) 7504342 ( 0.06%) 1012.32
ip6 2679 ( 0.02%) 279536 ( 0.00%) 104.34
other 99333 ( 0.56%) 15545966 ( 0.13%) 156.50
frag 1316 ( 0.01%) 1131659 ( 0.01%) 859.92
ip6 26553 ( 0.15%) 7594370 ( 0.06%) 286.01
tcp6 7201 ( 0.04%) 4591137 ( 0.04%) 637.57
http(s) 148 ( 0.00%) 118160 ( 0.00%) 798.38
http(c) 222 ( 0.00%) 24626 ( 0.00%) 110.93
squid 5 ( 0.00%) 468 ( 0.00%) 93.60
smtp 448 ( 0.00%) 108189 ( 0.00%) 241.49
ssh 30 ( 0.00%) 7788 ( 0.00%) 259.60
dns 9 ( 0.00%) 1092 ( 0.00%) 121.33
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 6277 ( 0.04%) 4324378 ( 0.03%) 688.92
udp6 14204 ( 0.08%) 2331121 ( 0.02%) 164.12
dns 14083 ( 0.08%) 2317242 ( 0.02%) 164.54
other 121 ( 0.00%) 13879 ( 0.00%) 114.70
icmp6 5118 ( 0.03%) 668032 ( 0.01%) 130.53
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200712161400.dump.gz (427.15 MB)