Traffic Trace Info
DumpFile: 200712261400.dump
FileSize: 1201.65MB
Id: 200712261400
StartTime: Wed Dec 26 14:00:01 2007
EndTime: Wed Dec 26 14:15:01 2007
TotalTime: 899.83 seconds
TotalCapSize: 930.65MB CapLen: 96 bytes
# of packets: 17759961 (9819.66MB)
AvgRate: 91.55Mbps stddev:16.40M
IP flow (unique src/dst pair) Information
# of flows: 716415 (avg. 24.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 2.7% 2.4% 2.3% 1.2% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 400698
Top 10 bandwidth usage (bytes/total in %):
9.0% 8.0% 6.5% 4.7% 4.7% 4.0% 3.5% 2.7% 2.6% 2.4%
# of IPv6 addresses: 1064
Top 10 bandwidth usage (bytes/total in %):
55.9% 55.9% 4.0% 3.3% 3.2% 3.1% 3.1% 2.8% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712261400.pktlen.png)
detailed numbers
[ 32- 63]: 4950287
[ 64- 127]: 5147642
[ 128- 255]: 699391
[ 256- 511]: 399112
[ 512- 1023]: 418964
[ 1024- 2047]: 6144565
Protocol Breakdown
![[protocol breakdown chart]](200712261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17759961 (100.00%) 10296661274 (100.00%) 579.77
ip 17739755 ( 99.89%) 10289683614 ( 99.93%) 580.04
tcp 11236218 ( 63.27%) 8684408345 ( 84.34%) 772.89
http(s) 5065964 ( 28.52%) 6724359843 ( 65.31%) 1327.36
http(c) 2345137 ( 13.20%) 253942324 ( 2.47%) 108.28
squid 410502 ( 2.31%) 289249507 ( 2.81%) 704.62
smtp 681080 ( 3.83%) 138591554 ( 1.35%) 203.49
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 84145 ( 0.47%) 43796321 ( 0.43%) 520.49
pop3 11824 ( 0.07%) 6849450 ( 0.07%) 579.28
imap 50224 ( 0.28%) 6718262 ( 0.07%) 133.77
telnet 893 ( 0.01%) 66484 ( 0.00%) 74.45
ssh 69090 ( 0.39%) 8171957 ( 0.08%) 118.28
dns 2119 ( 0.01%) 158287 ( 0.00%) 74.70
bgp 194 ( 0.00%) 51024 ( 0.00%) 263.01
napster 2 ( 0.00%) 120 ( 0.00%) 60.00
realaud 9977 ( 0.06%) 5060824 ( 0.05%) 507.25
rtsp 27764 ( 0.16%) 17315872 ( 0.17%) 623.68
icecast 142 ( 0.00%) 11079 ( 0.00%) 78.02
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2477153 ( 13.95%) 1190064957 ( 11.56%) 480.42
udp 5640561 ( 31.76%) 1521570936 ( 14.78%) 269.76
dns 1689092 ( 9.51%) 210123095 ( 2.04%) 124.40
realaud 4813 ( 0.03%) 2613855 ( 0.03%) 543.08
halflif 21 ( 0.00%) 2516 ( 0.00%) 119.81
starcra 34 ( 0.00%) 5342 ( 0.00%) 157.12
everque 69 ( 0.00%) 12722 ( 0.00%) 184.38
unreal 24 ( 0.00%) 3490 ( 0.00%) 145.42
quake 65 ( 0.00%) 5370 ( 0.00%) 82.62
cuseeme 8 ( 0.00%) 628 ( 0.00%) 78.50
other 3946296 ( 22.22%) 1308791814 ( 12.71%) 331.65
icmp 859995 ( 4.84%) 83314877 ( 0.81%) 96.88
ipip 350 ( 0.00%) 43768 ( 0.00%) 125.05
ipsec 161 ( 0.00%) 17710 ( 0.00%) 110.00
ip6 868 ( 0.00%) 106525 ( 0.00%) 122.72
other 1602 ( 0.01%) 221453 ( 0.00%) 138.24
frag 2835 ( 0.02%) 2421943 ( 0.02%) 854.30
ip6 20206 ( 0.11%) 6977660 ( 0.07%) 345.33
tcp6 5555 ( 0.03%) 4623421 ( 0.04%) 832.30
http(s) 365 ( 0.00%) 344925 ( 0.00%) 945.00
http(c) 45 ( 0.00%) 5584 ( 0.00%) 124.09
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 546 ( 0.00%) 159292 ( 0.00%) 291.74
ftp 52 ( 0.00%) 9527 ( 0.00%) 183.21
ssh 31 ( 0.00%) 7874 ( 0.00%) 254.00
bgp 83 ( 0.00%) 12667 ( 0.00%) 152.61
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 4430 ( 0.02%) 4083330 ( 0.04%) 921.74
udp6 11424 ( 0.06%) 1943668 ( 0.02%) 170.14
dns 10806 ( 0.06%) 1875159 ( 0.02%) 173.53
other 618 ( 0.00%) 68509 ( 0.00%) 110.86
icmp6 3197 ( 0.02%) 406491 ( 0.00%) 127.15
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200712261400.dump.gz (423.55 MB)