Traffic Trace Info
DumpFile: 200712231400.dump
FileSize: 835.44MB
Id: 200712231400
StartTime: Sun Dec 23 14:00:00 2007
EndTime: Sun Dec 23 14:15:00 2007
TotalTime: 900.12 seconds
TotalCapSize: 652.46MB CapLen: 96 bytes
# of packets: 11991488 (5735.60MB)
AvgRate: 53.46Mbps stddev:8.41M
IP flow (unique src/dst pair) Information
# of flows: 556680 (avg. 21.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.4% 1.9% 1.7% 1.4% 1.3% 1.3% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 294202
Top 10 bandwidth usage (bytes/total in %):
8.5% 7.6% 6.8% 4.7% 3.8% 2.7% 2.7% 2.6% 2.5% 2.5%
# of IPv6 addresses: 774
Top 10 bandwidth usage (bytes/total in %):
69.2% 69.2% 2.9% 2.9% 2.8% 2.6% 2.4% 2.0% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712231400.pktlen.png)
detailed numbers
[ 32- 63]: 2888385
[ 64- 127]: 4187309
[ 128- 255]: 866253
[ 256- 511]: 327484
[ 512- 1023]: 342081
[ 1024- 2047]: 3379976
Protocol Breakdown
![[protocol breakdown chart]](200712231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11991488 (100.00%) 6014210995 (100.00%) 501.54
ip 11973528 ( 99.85%) 6006517112 ( 99.87%) 501.65
tcp 8067007 ( 67.27%) 5501584910 ( 91.48%) 681.99
http(s) 2495940 ( 20.81%) 3357973556 ( 55.83%) 1345.37
http(c) 1706638 ( 14.23%) 195929221 ( 3.26%) 114.80
squid 446661 ( 3.72%) 337335347 ( 5.61%) 755.24
smtp 651358 ( 5.43%) 108106432 ( 1.80%) 165.97
ftp 69543 ( 0.58%) 43157417 ( 0.72%) 620.59
pop3 8989 ( 0.07%) 4895707 ( 0.08%) 544.63
imap 1344 ( 0.01%) 273955 ( 0.00%) 203.84
telnet 123 ( 0.00%) 8136 ( 0.00%) 66.15
ssh 726933 ( 6.06%) 108542238 ( 1.80%) 149.32
dns 1743 ( 0.01%) 136488 ( 0.00%) 78.31
bgp 188 ( 0.00%) 49517 ( 0.00%) 263.39
napster 27 ( 0.00%) 8373 ( 0.00%) 310.11
realaud 15 ( 0.00%) 968 ( 0.00%) 64.53
rtsp 318 ( 0.00%) 202877 ( 0.00%) 637.98
icecast 179 ( 0.00%) 13863 ( 0.00%) 77.45
hotline 11 ( 0.00%) 1114 ( 0.00%) 101.27
other 1956989 ( 16.32%) 1344949221 ( 22.36%) 687.25
udp 3090573 ( 25.77%) 425291463 ( 7.07%) 137.61
dns 1508827 ( 12.58%) 179763508 ( 2.99%) 119.14
realaud 936 ( 0.01%) 57401 ( 0.00%) 61.33
halflif 21 ( 0.00%) 2062 ( 0.00%) 98.19
starcra 15 ( 0.00%) 2209 ( 0.00%) 147.27
everque 71 ( 0.00%) 12728 ( 0.00%) 179.27
unreal 12 ( 0.00%) 1484 ( 0.00%) 123.67
quake 22 ( 0.00%) 2705 ( 0.00%) 122.95
cuseeme 3 ( 0.00%) 240 ( 0.00%) 80.00
other 1580498 ( 13.18%) 245436954 ( 4.08%) 155.29
icmp 811169 ( 6.76%) 79000668 ( 1.31%) 97.39
ipip 325 ( 0.00%) 39706 ( 0.00%) 122.17
ipsec 179 ( 0.00%) 19690 ( 0.00%) 110.00
ip6 833 ( 0.01%) 101103 ( 0.00%) 121.37
other 3442 ( 0.03%) 479572 ( 0.01%) 139.33
frag 2033 ( 0.02%) 1668942 ( 0.03%) 820.93
ip6 17960 ( 0.15%) 7693883 ( 0.13%) 428.39
tcp6 6594 ( 0.05%) 5801923 ( 0.10%) 879.88
http(s) 125 ( 0.00%) 105991 ( 0.00%) 847.93
http(c) 112 ( 0.00%) 13170 ( 0.00%) 117.59
smtp 414 ( 0.00%) 137877 ( 0.00%) 333.04
pop3 275 ( 0.00%) 25063 ( 0.00%) 91.14
ssh 29 ( 0.00%) 7702 ( 0.00%) 265.59
bgp 83 ( 0.00%) 9459 ( 0.00%) 113.96
other 5556 ( 0.05%) 5502661 ( 0.09%) 990.40
udp6 8380 ( 0.07%) 1505801 ( 0.03%) 179.69
dns 8256 ( 0.07%) 1492064 ( 0.02%) 180.72
other 124 ( 0.00%) 13737 ( 0.00%) 110.78
icmp6 2954 ( 0.02%) 380514 ( 0.01%) 128.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1565 ( 0.00%) 782.50
tcpdump file: 200712231400.dump.gz (306.89 MB)