Traffic Trace Info
DumpFile: 200712201400.dump
FileSize: 1498.36MB
Id: 200712201400
StartTime: Thu Dec 20 14:00:00 2007
EndTime: Thu Dec 20 14:15:00 2007
TotalTime: 899.75 seconds
TotalCapSize: 1172.81MB CapLen: 96 bytes
# of packets: 21334875 (14293.47MB)
AvgRate: 133.26Mbps stddev:20.24M
IP flow (unique src/dst pair) Information
# of flows: 716446 (avg. 29.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.6% 1.3% 1.1% 1.1% 1.1% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 377181
Top 10 bandwidth usage (bytes/total in %):
5.1% 4.3% 3.3% 3.2% 2.8% 2.6% 2.1% 1.9% 1.9% 1.9%
# of IPv6 addresses: 1066
Top 10 bandwidth usage (bytes/total in %):
49.3% 45.5% 12.0% 12.0% 3.9% 3.3% 2.8% 2.7% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712201400.pktlen.png)
detailed numbers
[ 32- 63]: 4904885
[ 64- 127]: 5415214
[ 128- 255]: 856728
[ 256- 511]: 500081
[ 512- 1023]: 497283
[ 1024- 2047]: 9160684
Protocol Breakdown
![[protocol breakdown chart]](200712201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21334875 (100.00%) 14987792808 (100.00%) 702.50
ip 21309152 ( 99.88%) 14978490743 ( 99.94%) 702.91
tcp 16932059 ( 79.36%) 14296468727 ( 95.39%) 844.34
http(s) 7825557 ( 36.68%) 10472836163 ( 69.88%) 1338.29
http(c) 4263919 ( 19.99%) 570579074 ( 3.81%) 133.82
squid 461462 ( 2.16%) 353466044 ( 2.36%) 765.97
smtp 783033 ( 3.67%) 233994934 ( 1.56%) 298.83
nntp 111 ( 0.00%) 11600 ( 0.00%) 104.50
ftp 97666 ( 0.46%) 42930581 ( 0.29%) 439.57
pop3 19652 ( 0.09%) 17249765 ( 0.12%) 877.76
imap 34437 ( 0.16%) 7141541 ( 0.05%) 207.38
telnet 647 ( 0.00%) 205051 ( 0.00%) 316.93
ssh 23451 ( 0.11%) 12355625 ( 0.08%) 526.87
dns 2615 ( 0.01%) 199864 ( 0.00%) 76.43
bgp 253 ( 0.00%) 85467 ( 0.00%) 337.81
napster 3 ( 0.00%) 180 ( 0.00%) 60.00
realaud 7 ( 0.00%) 420 ( 0.00%) 60.00
rtsp 121274 ( 0.57%) 89485366 ( 0.60%) 737.88
icecast 11357 ( 0.05%) 14412722 ( 0.10%) 1269.06
hotline 13 ( 0.00%) 827 ( 0.00%) 63.62
other 3286509 ( 15.40%) 2481507923 ( 16.56%) 755.06
udp 3576051 ( 16.76%) 591213499 ( 3.94%) 165.33
dns 1895434 ( 8.88%) 234899196 ( 1.57%) 123.93
realaud 2895 ( 0.01%) 1436560 ( 0.01%) 496.22
halflif 26 ( 0.00%) 2875 ( 0.00%) 110.58
starcra 10 ( 0.00%) 1673 ( 0.00%) 167.30
everque 59 ( 0.00%) 10854 ( 0.00%) 183.97
unreal 11 ( 0.00%) 1188 ( 0.00%) 108.00
quake 23 ( 0.00%) 2016 ( 0.00%) 87.65
cuseeme 7 ( 0.00%) 579 ( 0.00%) 82.71
other 1677574 ( 7.86%) 354844830 ( 2.37%) 211.52
icmp 750790 ( 3.52%) 78760870 ( 0.53%) 104.90
ipip 356 ( 0.00%) 43636 ( 0.00%) 122.57
ipsec 2002 ( 0.01%) 1172812 ( 0.01%) 585.82
ip6 864 ( 0.00%) 105046 ( 0.00%) 121.58
other 47030 ( 0.22%) 10726153 ( 0.07%) 228.07
frag 1617 ( 0.01%) 1376285 ( 0.01%) 851.13
ip6 25723 ( 0.12%) 9302065 ( 0.06%) 361.62
tcp6 7541 ( 0.04%) 6374381 ( 0.04%) 845.30
http(s) 1879 ( 0.01%) 1778805 ( 0.01%) 946.68
http(c) 60 ( 0.00%) 6955 ( 0.00%) 115.92
smtp 510 ( 0.00%) 145738 ( 0.00%) 285.76
ssh 30 ( 0.00%) 7788 ( 0.00%) 259.60
dns 29 ( 0.00%) 3096 ( 0.00%) 106.76
bgp 69 ( 0.00%) 7526 ( 0.00%) 109.07
other 4964 ( 0.02%) 4424473 ( 0.03%) 891.31
udp6 13910 ( 0.07%) 2369940 ( 0.02%) 170.38
dns 13662 ( 0.06%) 2339916 ( 0.02%) 171.27
other 248 ( 0.00%) 30024 ( 0.00%) 121.06
icmp6 4240 ( 0.02%) 552492 ( 0.00%) 130.30
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1172 ( 0.00%) 586.00
tcpdump file: 200712201400.dump.gz (539.44 MB)