Traffic Trace Info
DumpFile: 200712281400.dump
FileSize: 881.60MB
Id: 200712281400
StartTime: Fri Dec 28 14:00:00 2007
EndTime: Fri Dec 28 14:15:01 2007
TotalTime: 900.41 seconds
TotalCapSize: 689.41MB CapLen: 96 bytes
# of packets: 12595276 (7628.80MB)
AvgRate: 71.07Mbps stddev:13.27M
IP flow (unique src/dst pair) Information
# of flows: 744106 (avg. 16.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 1.6% 1.5% 1.2% 1.1% 1.1% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 401083
Top 10 bandwidth usage (bytes/total in %):
7.9% 5.6% 4.3% 3.8% 3.2% 3.0% 2.9% 2.6% 2.5% 2.4%
# of IPv6 addresses: 883
Top 10 bandwidth usage (bytes/total in %):
53.2% 53.2% 4.3% 3.4% 3.4% 3.2% 3.2% 3.2% 3.1% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712281400.pktlen.png)
detailed numbers
[ 32- 63]: 2725990
[ 64- 127]: 3792342
[ 128- 255]: 673514
[ 256- 511]: 371322
[ 512- 1023]: 242516
[ 1024- 2047]: 4789592
Protocol Breakdown
![[protocol breakdown chart]](200712281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12595276 (100.00%) 7999372539 (100.00%) 635.11
ip 12574114 ( 99.83%) 7992061811 ( 99.91%) 635.60
tcp 9582143 ( 76.08%) 7591611741 ( 94.90%) 792.27
http(s) 3994169 ( 31.71%) 5355515765 ( 66.95%) 1340.83
http(c) 2185162 ( 17.35%) 261171179 ( 3.26%) 119.52
squid 608606 ( 4.83%) 455885989 ( 5.70%) 749.07
smtp 655367 ( 5.20%) 184033278 ( 2.30%) 280.81
ftp 43040 ( 0.34%) 4942668 ( 0.06%) 114.84
pop3 15724 ( 0.12%) 12789676 ( 0.16%) 813.39
imap 8081 ( 0.06%) 2833825 ( 0.04%) 350.68
telnet 298 ( 0.00%) 30062 ( 0.00%) 100.88
ssh 33114 ( 0.26%) 15244854 ( 0.19%) 460.37
dns 1569 ( 0.01%) 122981 ( 0.00%) 78.38
bgp 202 ( 0.00%) 55273 ( 0.00%) 273.63
napster 8 ( 0.00%) 1593 ( 0.00%) 199.12
realaud 26 ( 0.00%) 3893 ( 0.00%) 149.73
rtsp 28577 ( 0.23%) 39866667 ( 0.50%) 1395.06
icecast 18114 ( 0.14%) 15567165 ( 0.19%) 859.40
other 1990083 ( 15.80%) 1243546693 ( 15.55%) 624.87
udp 2382078 ( 18.91%) 332550364 ( 4.16%) 139.61
dns 1715156 ( 13.62%) 214031393 ( 2.68%) 124.79
realaud 5387 ( 0.04%) 2739140 ( 0.03%) 508.47
halflif 27 ( 0.00%) 2755 ( 0.00%) 102.04
starcra 43 ( 0.00%) 8788 ( 0.00%) 204.37
everque 63 ( 0.00%) 11671 ( 0.00%) 185.25
unreal 9 ( 0.00%) 1189 ( 0.00%) 132.11
quake 23 ( 0.00%) 2674 ( 0.00%) 116.26
cuseeme 5 ( 0.00%) 874 ( 0.00%) 174.80
other 660844 ( 5.25%) 115717617 ( 1.45%) 175.11
icmp 603960 ( 4.80%) 65520006 ( 0.82%) 108.48
ipip 436 ( 0.00%) 56300 ( 0.00%) 129.13
ipsec 1542 ( 0.01%) 1753732 ( 0.02%) 1137.31
ip6 906 ( 0.01%) 116157 ( 0.00%) 128.21
other 3049 ( 0.02%) 453511 ( 0.01%) 148.74
frag 3563 ( 0.03%) 2860389 ( 0.04%) 802.80
ip6 21162 ( 0.17%) 7310728 ( 0.09%) 345.46
tcp6 6232 ( 0.05%) 4869583 ( 0.06%) 781.38
http(s) 572 ( 0.00%) 466804 ( 0.01%) 816.09
http(c) 210 ( 0.00%) 25179 ( 0.00%) 119.90
squid 11 ( 0.00%) 1036 ( 0.00%) 94.18
smtp 756 ( 0.01%) 281727 ( 0.00%) 372.65
nntp 1 ( 0.00%) 141 ( 0.00%) 141.00
ssh 108 ( 0.00%) 23104 ( 0.00%) 213.93
bgp 94 ( 0.00%) 11843 ( 0.00%) 125.99
other 4480 ( 0.04%) 4059749 ( 0.05%) 906.19
udp6 11428 ( 0.09%) 1987332 ( 0.02%) 173.90
dns 11245 ( 0.09%) 1967239 ( 0.02%) 174.94
other 183 ( 0.00%) 20093 ( 0.00%) 109.80
icmp6 3467 ( 0.03%) 448625 ( 0.01%) 129.40
ip6 4 ( 0.00%) 522 ( 0.00%) 130.50
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1 ( 0.00%) 586 ( 0.00%) 586.00
tcpdump file: 200712281400.dump.gz (322.04 MB)