Traffic Trace Info
DumpFile: 200712271400.dump
FileSize: 1095.39MB
Id: 200712271400
StartTime: Thu Dec 27 14:00:00 2007
EndTime: Thu Dec 27 14:15:00 2007
TotalTime: 900.02 seconds
TotalCapSize: 850.47MB CapLen: 96 bytes
# of packets: 16050778 (8840.00MB)
AvgRate: 82.41Mbps stddev:15.49M
IP flow (unique src/dst pair) Information
# of flows: 749735 (avg. 21.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.5% 1.4% 1.3% 1.3% 1.0% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 422976
Top 10 bandwidth usage (bytes/total in %):
5.4% 5.2% 4.6% 4.4% 4.0% 3.5% 3.1% 2.9% 2.5% 2.5%
# of IPv6 addresses: 860
Top 10 bandwidth usage (bytes/total in %):
41.5% 41.5% 9.7% 9.7% 6.8% 6.8% 6.8% 6.7% 5.7% 5.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712271400.pktlen.png)
detailed numbers
[ 32- 63]: 4458294
[ 64- 127]: 4602276
[ 128- 255]: 727423
[ 256- 511]: 447240
[ 512- 1023]: 333656
[ 1024- 2047]: 5481889
Protocol Breakdown
![[protocol breakdown chart]](200712271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16050778 (100.00%) 9269409745 (100.00%) 577.51
ip 16027618 ( 99.86%) 9260010173 ( 99.90%) 577.75
tcp 10762756 ( 67.05%) 8302825293 ( 89.57%) 771.44
http(s) 4639292 ( 28.90%) 6129535603 ( 66.13%) 1321.22
http(c) 2752832 ( 17.15%) 334910116 ( 3.61%) 121.66
squid 482714 ( 3.01%) 333936100 ( 3.60%) 691.79
smtp 818619 ( 5.10%) 155322843 ( 1.68%) 189.74
ftp 23823 ( 0.15%) 4782874 ( 0.05%) 200.77
pop3 15894 ( 0.10%) 9679927 ( 0.10%) 609.03
imap 3384 ( 0.02%) 950827 ( 0.01%) 280.98
telnet 273 ( 0.00%) 29112 ( 0.00%) 106.64
ssh 10411 ( 0.06%) 1833671 ( 0.02%) 176.13
dns 1967 ( 0.01%) 157218 ( 0.00%) 79.93
bgp 220 ( 0.00%) 70829 ( 0.00%) 321.95
napster 29 ( 0.00%) 3495 ( 0.00%) 120.52
realaud 6 ( 0.00%) 844 ( 0.00%) 140.67
rtsp 51094 ( 0.32%) 62388252 ( 0.67%) 1221.05
icecast 889 ( 0.01%) 60990 ( 0.00%) 68.61
other 1961308 ( 12.22%) 1269162532 ( 13.69%) 647.10
udp 4429419 ( 27.60%) 834847269 ( 9.01%) 188.48
dns 1736794 ( 10.82%) 214941004 ( 2.32%) 123.76
realaud 13616 ( 0.08%) 9641402 ( 0.10%) 708.09
halflif 13 ( 0.00%) 1037 ( 0.00%) 79.77
starcra 31 ( 0.00%) 4972 ( 0.00%) 160.39
everque 78 ( 0.00%) 17201 ( 0.00%) 220.53
unreal 26 ( 0.00%) 4895 ( 0.00%) 188.27
quake 34 ( 0.00%) 2959 ( 0.00%) 87.03
cuseeme 1 ( 0.00%) 314 ( 0.00%) 314.00
other 2678668 ( 16.69%) 610215423 ( 6.58%) 227.81
icmp 698359 ( 4.35%) 70812287 ( 0.76%) 101.40
ipip 333 ( 0.00%) 40970 ( 0.00%) 123.03
ipsec 3202 ( 0.02%) 3435564 ( 0.04%) 1072.94
ip6 928 ( 0.01%) 113034 ( 0.00%) 121.80
other 132621 ( 0.83%) 47935756 ( 0.52%) 361.45
frag 1777 ( 0.01%) 1461790 ( 0.02%) 822.62
ip6 23160 ( 0.14%) 9399572 ( 0.10%) 405.85
tcp6 8689 ( 0.05%) 7086962 ( 0.08%) 815.62
http(s) 802 ( 0.00%) 852057 ( 0.01%) 1062.42
http(c) 80 ( 0.00%) 9564 ( 0.00%) 119.55
smtp 735 ( 0.00%) 594543 ( 0.01%) 808.90
ftp 35 ( 0.00%) 3508 ( 0.00%) 100.23
ssh 1852 ( 0.01%) 638632 ( 0.01%) 344.83
dns 4 ( 0.00%) 531 ( 0.00%) 132.75
bgp 77 ( 0.00%) 10803 ( 0.00%) 140.30
other 5104 ( 0.03%) 4977324 ( 0.05%) 975.18
udp6 10967 ( 0.07%) 1863232 ( 0.02%) 169.89
dns 10833 ( 0.07%) 1848435 ( 0.02%) 170.63
other 134 ( 0.00%) 14797 ( 0.00%) 110.43
icmp6 3473 ( 0.02%) 444664 ( 0.00%) 128.03
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1 ( 0.00%) 634 ( 0.00%) 634.00
tcpdump file: 200712271400.dump.gz (395.15 MB)