Traffic Trace Info
DumpFile: 200712211400.dump
FileSize: 1315.97MB
Id: 200712211400
StartTime: Fri Dec 21 14:00:00 2007
EndTime: Fri Dec 21 14:15:01 2007
TotalTime: 900.26 seconds
TotalCapSize: 1028.53MB CapLen: 96 bytes
# of packets: 18836817 (12236.97MB)
AvgRate: 114.03Mbps stddev:22.32M
IP flow (unique src/dst pair) Information
# of flows: 724379 (avg. 26.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.4% 1.6% 1.1% 1.1% 1.0% 1.0% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 386653
Top 10 bandwidth usage (bytes/total in %):
4.6% 3.8% 3.6% 3.6% 3.3% 2.4% 2.4% 2.3% 2.2% 1.7%
# of IPv6 addresses: 1033
Top 10 bandwidth usage (bytes/total in %):
72.1% 72.1% 12.3% 10.4% 2.4% 2.2% 2.1% 1.9% 1.2% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712211400.pktlen.png)
detailed numbers
[ 32- 63]: 3934480
[ 64- 127]: 5432564
[ 128- 255]: 720902
[ 256- 511]: 543502
[ 512- 1023]: 455765
[ 1024- 2047]: 7749604
Protocol Breakdown
![[protocol breakdown chart]](200712211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18836817 (100.00%) 12831388004 (100.00%) 681.19
ip 18794625 ( 99.78%) 12802106273 ( 99.77%) 681.16
tcp 14251210 ( 75.66%) 11950709197 ( 93.14%) 838.58
http(s) 7060885 ( 37.48%) 9428372783 ( 73.48%) 1335.30
http(c) 3436991 ( 18.25%) 444774959 ( 3.47%) 129.41
squid 503366 ( 2.67%) 435861106 ( 3.40%) 865.89
smtp 632928 ( 3.36%) 157711836 ( 1.23%) 249.18
nntp 84 ( 0.00%) 7980 ( 0.00%) 95.00
ftp 29295 ( 0.16%) 2842022 ( 0.02%) 97.01
pop3 20244 ( 0.11%) 16643572 ( 0.13%) 822.15
imap 17409 ( 0.09%) 12249783 ( 0.10%) 703.65
telnet 747 ( 0.00%) 56612 ( 0.00%) 75.79
ssh 289882 ( 1.54%) 44060238 ( 0.34%) 151.99
dns 1915 ( 0.01%) 146056 ( 0.00%) 76.27
bgp 240 ( 0.00%) 85491 ( 0.00%) 356.21
realaud 114 ( 0.00%) 13922 ( 0.00%) 122.12
rtsp 13063 ( 0.07%) 11638480 ( 0.09%) 890.95
icecast 2251 ( 0.01%) 145832 ( 0.00%) 64.79
hotline 1 ( 0.00%) 74 ( 0.00%) 74.00
other 2241792 ( 11.90%) 1396098271 ( 10.88%) 622.76
udp 3640121 ( 19.32%) 749450034 ( 5.84%) 205.89
dns 1724326 ( 9.15%) 211008435 ( 1.64%) 122.37
realaud 1424 ( 0.01%) 107127 ( 0.00%) 75.23
halflif 15 ( 0.00%) 1816 ( 0.00%) 121.07
starcra 13 ( 0.00%) 3345 ( 0.00%) 257.31
everque 86 ( 0.00%) 16810 ( 0.00%) 195.47
unreal 10 ( 0.00%) 1472 ( 0.00%) 147.20
quake 22 ( 0.00%) 1781 ( 0.00%) 80.95
cuseeme 5 ( 0.00%) 1822 ( 0.00%) 364.40
other 1914208 ( 10.16%) 538294699 ( 4.20%) 281.21
icmp 753710 ( 4.00%) 75146943 ( 0.59%) 99.70
ipip 371 ( 0.00%) 44350 ( 0.00%) 119.54
ipsec 704 ( 0.00%) 611528 ( 0.00%) 868.65
ip6 8951 ( 0.05%) 1300525 ( 0.01%) 145.29
other 139558 ( 0.74%) 24843696 ( 0.19%) 178.02
frag 6431 ( 0.03%) 8508563 ( 0.07%) 1323.05
ip6 42192 ( 0.22%) 29281731 ( 0.23%) 694.01
tcp6 21933 ( 0.12%) 26131936 ( 0.20%) 1191.44
http(s) 3317 ( 0.02%) 4349358 ( 0.03%) 1311.23
http(c) 1189 ( 0.01%) 159458 ( 0.00%) 134.11
smtp 1024 ( 0.01%) 289611 ( 0.00%) 282.82
ssh 31 ( 0.00%) 8658 ( 0.00%) 279.29
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 116 ( 0.00%) 14757 ( 0.00%) 127.22
other 16249 ( 0.09%) 21309459 ( 0.17%) 1311.43
udp6 16958 ( 0.09%) 2602817 ( 0.02%) 153.49
dns 16613 ( 0.09%) 2564945 ( 0.02%) 154.39
other 345 ( 0.00%) 37872 ( 0.00%) 109.77
icmp6 3270 ( 0.02%) 542762 ( 0.00%) 165.98
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
tcpdump file: 200712211400.dump.gz (469.88 MB)