Traffic Trace Info
DumpFile: 200712251400.dump
FileSize: 1370.61MB
Id: 200712251400
StartTime: Tue Dec 25 14:00:00 2007
EndTime: Tue Dec 25 14:15:01 2007
TotalTime: 900.82 seconds
TotalCapSize: 1069.14MB CapLen: 96 bytes
# of packets: 19756574 (12912.97MB)
AvgRate: 120.23Mbps stddev:26.83M
IP flow (unique src/dst pair) Information
# of flows: 602658 (avg. 32.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.3% 7.5% 3.1% 2.2% 1.7% 1.5% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 322392
Top 10 bandwidth usage (bytes/total in %):
16.8% 8.5% 7.7% 4.8% 3.6% 3.6% 3.2% 3.2% 3.2% 3.1%
# of IPv6 addresses: 1051
Top 10 bandwidth usage (bytes/total in %):
58.3% 58.3% 5.2% 3.7% 3.4% 3.4% 3.0% 3.0% 2.7% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712251400.pktlen.png)
detailed numbers
[ 32- 63]: 4647567
[ 64- 127]: 5331445
[ 128- 255]: 695943
[ 256- 511]: 387716
[ 512- 1023]: 407446
[ 1024- 2047]: 8286457
Protocol Breakdown
![[protocol breakdown chart]](200712251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19756574 (100.00%) 13540230509 (100.00%) 685.35
ip 19737056 ( 99.90%) 13533574929 ( 99.95%) 685.69
tcp 15174024 ( 76.80%) 12608156452 ( 93.12%) 830.90
http(s) 7146729 ( 36.17%) 9936308218 ( 73.38%) 1390.33
http(c) 3804206 ( 19.26%) 344361904 ( 2.54%) 90.52
squid 397654 ( 2.01%) 274142051 ( 2.02%) 689.40
smtp 1297193 ( 6.57%) 295971334 ( 2.19%) 228.16
ftp 31170 ( 0.16%) 2694416 ( 0.02%) 86.44
pop3 19505 ( 0.10%) 15675831 ( 0.12%) 803.68
imap 47896 ( 0.24%) 35570824 ( 0.26%) 742.67
telnet 304 ( 0.00%) 34130 ( 0.00%) 112.27
ssh 15976 ( 0.08%) 3360322 ( 0.02%) 210.34
dns 2920 ( 0.01%) 218418 ( 0.00%) 74.80
bgp 173 ( 0.00%) 40166 ( 0.00%) 232.17
realaud 56 ( 0.00%) 7963 ( 0.00%) 142.20
rtsp 14835 ( 0.08%) 12422590 ( 0.09%) 837.38
icecast 16751 ( 0.08%) 15469267 ( 0.11%) 923.48
hotline 4 ( 0.00%) 264 ( 0.00%) 66.00
other 2378646 ( 12.04%) 1671878394 ( 12.35%) 702.87
udp 3865090 ( 19.56%) 855175240 ( 6.32%) 221.26
dns 1754762 ( 8.88%) 209731747 ( 1.55%) 119.52
realaud 25 ( 0.00%) 3894 ( 0.00%) 155.76
halflif 14 ( 0.00%) 1757 ( 0.00%) 125.50
starcra 18 ( 0.00%) 2580 ( 0.00%) 143.33
everque 79 ( 0.00%) 15756 ( 0.00%) 199.44
unreal 22 ( 0.00%) 2928 ( 0.00%) 133.09
quake 16 ( 0.00%) 1604 ( 0.00%) 100.25
cuseeme 3 ( 0.00%) 262 ( 0.00%) 87.33
other 2109957 ( 10.68%) 645399740 ( 4.77%) 305.88
icmp 692065 ( 3.50%) 68769394 ( 0.51%) 99.37
ipip 354 ( 0.00%) 42508 ( 0.00%) 120.08
ipsec 982 ( 0.00%) 828636 ( 0.01%) 843.82
ip6 894 ( 0.00%) 110127 ( 0.00%) 123.18
other 3647 ( 0.02%) 492572 ( 0.00%) 135.06
frag 2101 ( 0.01%) 1709275 ( 0.01%) 813.55
ip6 19518 ( 0.10%) 6655580 ( 0.05%) 341.00
tcp6 6020 ( 0.03%) 4528177 ( 0.03%) 752.19
http(s) 381 ( 0.00%) 188756 ( 0.00%) 495.42
http(c) 55 ( 0.00%) 6572 ( 0.00%) 119.49
smtp 245 ( 0.00%) 70827 ( 0.00%) 289.09
ssh 883 ( 0.00%) 210154 ( 0.00%) 238.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 63 ( 0.00%) 6549 ( 0.00%) 103.95
other 4386 ( 0.02%) 4044684 ( 0.03%) 922.18
udp6 10385 ( 0.05%) 1743161 ( 0.01%) 167.85
dns 9733 ( 0.05%) 1670813 ( 0.01%) 171.66
other 652 ( 0.00%) 72348 ( 0.00%) 110.96
icmp6 3083 ( 0.02%) 380162 ( 0.00%) 123.31
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200712251400.dump.gz (478.99 MB)