Traffic Trace Info
DumpFile: 200712181400.dump
FileSize: 1334.16MB
Id: 200712181400
StartTime: Tue Dec 18 14:00:00 2007
EndTime: Tue Dec 18 14:15:01 2007
TotalTime: 900.55 seconds
TotalCapSize: 1043.93MB CapLen: 96 bytes
# of packets: 19020099 (12761.27MB)
AvgRate: 118.88Mbps stddev:15.60M
IP flow (unique src/dst pair) Information
# of flows: 701750 (avg. 27.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.0% 1.8% 1.6% 1.5% 1.3% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 371021
Top 10 bandwidth usage (bytes/total in %):
23.8% 5.0% 4.8% 4.6% 4.5% 2.8% 2.7% 2.6% 2.4% 2.0%
# of IPv6 addresses: 1055
Top 10 bandwidth usage (bytes/total in %):
77.5% 77.5% 4.3% 4.3% 3.0% 2.5% 1.4% 1.3% 1.1% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712181400.pktlen.png)
detailed numbers
[ 32- 63]: 3908613
[ 64- 127]: 5277989
[ 128- 255]: 655615
[ 256- 511]: 486070
[ 512- 1023]: 350493
[ 1024- 2047]: 8341319
Protocol Breakdown
![[protocol breakdown chart]](200712181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19020099 (100.00%) 13381160440 (100.00%) 703.53
ip 18979867 ( 99.79%) 13356457870 ( 99.82%) 703.72
tcp 14239218 ( 74.86%) 12595641106 ( 94.13%) 884.57
http(s) 6974254 ( 36.67%) 9501516130 ( 71.01%) 1362.37
http(c) 3084238 ( 16.22%) 328370866 ( 2.45%) 106.47
squid 624859 ( 3.29%) 463590500 ( 3.46%) 741.91
smtp 399972 ( 2.10%) 90254980 ( 0.67%) 225.65
nntp 10 ( 0.00%) 620 ( 0.00%) 62.00
ftp 178029 ( 0.94%) 185614594 ( 1.39%) 1042.61
pop3 12152 ( 0.06%) 8165761 ( 0.06%) 671.97
imap 7000 ( 0.04%) 2325303 ( 0.02%) 332.19
telnet 862 ( 0.00%) 58403 ( 0.00%) 67.75
ssh 106912 ( 0.56%) 30879122 ( 0.23%) 288.83
dns 2343 ( 0.01%) 172101 ( 0.00%) 73.45
bgp 290 ( 0.00%) 133587 ( 0.00%) 460.64
napster 449 ( 0.00%) 44651 ( 0.00%) 99.45
realaud 123 ( 0.00%) 17427 ( 0.00%) 141.68
rtsp 46411 ( 0.24%) 17427340 ( 0.13%) 375.50
icecast 3354 ( 0.02%) 225385 ( 0.00%) 67.20
other 2797955 ( 14.71%) 1966844036 ( 14.70%) 702.96
udp 3529851 ( 18.56%) 616394268 ( 4.61%) 174.62
dns 1792580 ( 9.42%) 214914651 ( 1.61%) 119.89
realaud 1115 ( 0.01%) 86164 ( 0.00%) 77.28
halflif 16 ( 0.00%) 1339 ( 0.00%) 83.69
starcra 15 ( 0.00%) 1775 ( 0.00%) 118.33
everque 55 ( 0.00%) 10768 ( 0.00%) 195.78
unreal 8 ( 0.00%) 728 ( 0.00%) 91.00
quake 25 ( 0.00%) 2356 ( 0.00%) 94.24
cuseeme 4 ( 0.00%) 313 ( 0.00%) 78.25
other 1736020 ( 9.13%) 401372701 ( 3.00%) 231.20
icmp 1078587 ( 5.67%) 95662188 ( 0.71%) 88.69
ipip 395 ( 0.00%) 45914 ( 0.00%) 116.24
ipsec 12802 ( 0.07%) 15140860 ( 0.11%) 1182.69
ip6 1108 ( 0.01%) 145288 ( 0.00%) 131.13
other 117906 ( 0.62%) 33428246 ( 0.25%) 283.52
frag 2027 ( 0.01%) 1562211 ( 0.01%) 770.70
ip6 40232 ( 0.21%) 24702570 ( 0.18%) 614.00
tcp6 18976 ( 0.10%) 21700447 ( 0.16%) 1143.57
http(s) 2009 ( 0.01%) 1948153 ( 0.01%) 969.71
http(c) 603 ( 0.00%) 92878 ( 0.00%) 154.03
smtp 302 ( 0.00%) 191366 ( 0.00%) 633.66
ssh 29 ( 0.00%) 7702 ( 0.00%) 265.59
dns 29 ( 0.00%) 2896 ( 0.00%) 99.86
bgp 152 ( 0.00%) 22590 ( 0.00%) 148.62
other 15852 ( 0.08%) 19434862 ( 0.15%) 1226.02
udp6 16329 ( 0.09%) 2389967 ( 0.02%) 146.36
dns 16130 ( 0.08%) 2367920 ( 0.02%) 146.80
other 199 ( 0.00%) 22047 ( 0.00%) 110.79
icmp6 4895 ( 0.03%) 607677 ( 0.00%) 124.14
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1 ( 0.00%) 263 ( 0.00%) 263.00
tcpdump file: 200712181400.dump.gz (469.67 MB)