Traffic Trace Info
DumpFile: 200712241400.dump
FileSize: 886.73MB
Id: 200712241400
StartTime: Mon Dec 24 14:00:00 2007
EndTime: Mon Dec 24 14:15:01 2007
TotalTime: 900.53 seconds
TotalCapSize: 691.37MB CapLen: 96 bytes
# of packets: 12802476 (7288.43MB)
AvgRate: 67.90Mbps stddev:16.34M
IP flow (unique src/dst pair) Information
# of flows: 566410 (avg. 22.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 4.8% 2.3% 1.7% 1.4% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 301389
Top 10 bandwidth usage (bytes/total in %):
11.2% 6.2% 5.9% 4.9% 4.8% 4.8% 3.1% 2.9% 2.5% 2.4%
# of IPv6 addresses: 1624
Top 10 bandwidth usage (bytes/total in %):
88.1% 88.1% 1.1% 1.1% 0.9% 0.9% 0.9% 0.7% 0.7% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712241400.pktlen.png)
detailed numbers
[ 32- 63]: 3375489
[ 64- 127]: 3623140
[ 128- 255]: 615598
[ 256- 511]: 324966
[ 512- 1023]: 378103
[ 1024- 2047]: 4485180
Protocol Breakdown
![[protocol breakdown chart]](200712241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12802476 (100.00%) 7642474898 (100.00%) 596.95
ip 12774878 ( 99.78%) 7621818087 ( 99.73%) 596.63
tcp 9383466 ( 73.29%) 7075611378 ( 92.58%) 754.05
http(s) 4006697 ( 31.30%) 5449578725 ( 71.31%) 1360.12
http(c) 1809371 ( 14.13%) 162572576 ( 2.13%) 89.85
squid 483632 ( 3.78%) 348920544 ( 4.57%) 721.46
smtp 591573 ( 4.62%) 121821176 ( 1.59%) 205.93
ftp 66306 ( 0.52%) 6342407 ( 0.08%) 95.65
pop3 7590 ( 0.06%) 4853028 ( 0.06%) 639.40
imap 4370 ( 0.03%) 2513481 ( 0.03%) 575.17
telnet 342 ( 0.00%) 25192 ( 0.00%) 73.66
ssh 99631 ( 0.78%) 11023260 ( 0.14%) 110.64
dns 2581 ( 0.02%) 197295 ( 0.00%) 76.44
bgp 196 ( 0.00%) 50582 ( 0.00%) 258.07
napster 49 ( 0.00%) 4443 ( 0.00%) 90.67
realaud 28 ( 0.00%) 3570 ( 0.00%) 127.50
rtsp 367 ( 0.00%) 83419 ( 0.00%) 227.30
icecast 15413 ( 0.12%) 15355225 ( 0.20%) 996.25
hotline 2 ( 0.00%) 122 ( 0.00%) 61.00
other 2295310 ( 17.93%) 952265853 ( 12.46%) 414.87
udp 2763326 ( 21.58%) 480122568 ( 6.28%) 173.75
dns 1522408 ( 11.89%) 191237759 ( 2.50%) 125.62
realaud 12690 ( 0.10%) 7896631 ( 0.10%) 622.27
halflif 16 ( 0.00%) 1769 ( 0.00%) 110.56
starcra 20 ( 0.00%) 3846 ( 0.00%) 192.30
everque 87 ( 0.00%) 16516 ( 0.00%) 189.84
unreal 11 ( 0.00%) 1404 ( 0.00%) 127.64
quake 16 ( 0.00%) 1383 ( 0.00%) 86.44
cuseeme 6 ( 0.00%) 505 ( 0.00%) 84.17
other 1227802 ( 9.59%) 280943419 ( 3.68%) 228.82
icmp 617701 ( 4.82%) 62290797 ( 0.82%) 100.84
ipip 337 ( 0.00%) 40942 ( 0.00%) 121.49
ipsec 1989 ( 0.02%) 2036238 ( 0.03%) 1023.75
ip6 848 ( 0.01%) 103781 ( 0.00%) 122.38
other 7211 ( 0.06%) 1612383 ( 0.02%) 223.60
frag 2945 ( 0.02%) 2493788 ( 0.03%) 846.79
ip6 27598 ( 0.22%) 20656811 ( 0.27%) 748.49
tcp6 15060 ( 0.12%) 18620932 ( 0.24%) 1236.45
http(s) 128 ( 0.00%) 106249 ( 0.00%) 830.07
http(c) 553 ( 0.00%) 50876 ( 0.00%) 92.00
smtp 354 ( 0.00%) 99473 ( 0.00%) 281.00
ssh 34 ( 0.00%) 8988 ( 0.00%) 264.35
bgp 62 ( 0.00%) 6436 ( 0.00%) 103.81
other 13929 ( 0.11%) 18348910 ( 0.24%) 1317.32
udp6 8677 ( 0.07%) 1551774 ( 0.02%) 178.84
dns 8637 ( 0.07%) 1547369 ( 0.02%) 179.16
other 40 ( 0.00%) 4405 ( 0.00%) 110.12
icmp6 3829 ( 0.03%) 479634 ( 0.01%) 125.26
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
sctp6 1 ( 0.00%) 214 ( 0.00%) 214.00
other6 1 ( 0.00%) 177 ( 0.00%) 177.00
tcpdump file: 200712241400.dump.gz (312.51 MB)