Traffic Trace Info
DumpFile: 200712301400.dump
FileSize: 871.47MB
Id: 200712301400
StartTime: Sun Dec 30 14:00:00 2007
EndTime: Sun Dec 30 14:15:00 2007
TotalTime: 900.08 seconds
TotalCapSize: 684.59MB CapLen: 96 bytes
# of packets: 12247129 (6210.18MB)
AvgRate: 57.89Mbps stddev:10.08M
IP flow (unique src/dst pair) Information
# of flows: 540793 (avg. 22.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.9% 3.1% 1.9% 1.3% 1.2% 1.2% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 292208
Top 10 bandwidth usage (bytes/total in %):
13.9% 13.9% 7.1% 6.7% 6.1% 5.4% 5.1% 3.3% 3.2% 2.6%
# of IPv6 addresses: 1846
Top 10 bandwidth usage (bytes/total in %):
53.8% 53.8% 7.4% 6.2% 3.1% 3.1% 3.0% 2.9% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200712301400.pktlen.png)
detailed numbers
[ 32- 63]: 2283416
[ 64- 127]: 4779129
[ 128- 255]: 668618
[ 256- 511]: 346159
[ 512- 1023]: 530638
[ 1024- 2047]: 3639169
Protocol Breakdown
![[protocol breakdown chart]](200712301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 12247129 (100.00%) 6511842842 (100.00%) 531.70
ip 12223688 ( 99.81%) 6504599149 ( 99.89%) 532.13
tcp 9783411 ( 79.88%) 6150813314 ( 94.46%) 628.70
http(s) 2753553 ( 22.48%) 3828872815 ( 58.80%) 1390.52
http(c) 1300301 ( 10.62%) 112704520 ( 1.73%) 86.68
squid 574892 ( 4.69%) 414603897 ( 6.37%) 721.19
smtp 788541 ( 6.44%) 161816114 ( 2.48%) 205.21
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 22584 ( 0.18%) 1912246 ( 0.03%) 84.67
pop3 10163 ( 0.08%) 6691342 ( 0.10%) 658.40
imap 2232 ( 0.02%) 590967 ( 0.01%) 264.77
telnet 1274 ( 0.01%) 82942 ( 0.00%) 65.10
ssh 2569046 ( 20.98%) 438096156 ( 6.73%) 170.53
dns 2579 ( 0.02%) 198151 ( 0.00%) 76.83
bgp 187 ( 0.00%) 40093 ( 0.00%) 214.40
napster 10 ( 0.00%) 617 ( 0.00%) 61.70
realaud 63 ( 0.00%) 4753 ( 0.00%) 75.44
rtsp 217 ( 0.00%) 32453 ( 0.00%) 149.55
icecast 62 ( 0.00%) 5176 ( 0.00%) 83.48
hotline 4 ( 0.00%) 248 ( 0.00%) 62.00
other 1757698 ( 14.35%) 1185160522 ( 18.20%) 674.27
udp 1922433 ( 15.70%) 298043013 ( 4.58%) 155.03
dns 1356941 ( 11.08%) 164307348 ( 2.52%) 121.09
realaud 1827 ( 0.01%) 111576 ( 0.00%) 61.07
halflif 15 ( 0.00%) 1495 ( 0.00%) 99.67
starcra 18 ( 0.00%) 4075 ( 0.00%) 226.39
everque 61 ( 0.00%) 11454 ( 0.00%) 187.77
unreal 4 ( 0.00%) 411 ( 0.00%) 102.75
quake 20 ( 0.00%) 1991 ( 0.00%) 99.55
cuseeme 1 ( 0.00%) 87 ( 0.00%) 87.00
other 563413 ( 4.60%) 133592796 ( 2.05%) 237.11
icmp 503030 ( 4.11%) 49901864 ( 0.77%) 99.20
ipip 361 ( 0.00%) 44378 ( 0.00%) 122.93
ipsec 878 ( 0.01%) 837412 ( 0.01%) 953.77
ip6 851 ( 0.01%) 102466 ( 0.00%) 120.41
other 12724 ( 0.10%) 4856702 ( 0.07%) 381.70
frag 1289 ( 0.01%) 1064927 ( 0.02%) 826.17
ip6 23441 ( 0.19%) 7243693 ( 0.11%) 309.02
tcp6 5883 ( 0.05%) 4371721 ( 0.07%) 743.11
http(s) 131 ( 0.00%) 106597 ( 0.00%) 813.72
http(c) 44 ( 0.00%) 4756 ( 0.00%) 108.09
smtp 178 ( 0.00%) 51885 ( 0.00%) 291.49
ssh 28 ( 0.00%) 7616 ( 0.00%) 272.00
dns 7 ( 0.00%) 635 ( 0.00%) 90.71
bgp 63 ( 0.00%) 6549 ( 0.00%) 103.95
other 5432 ( 0.04%) 4193683 ( 0.06%) 772.03
udp6 10219 ( 0.08%) 2037120 ( 0.03%) 199.35
dns 7953 ( 0.06%) 1440384 ( 0.02%) 181.11
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
other 2265 ( 0.02%) 596599 ( 0.01%) 263.40
icmp6 7278 ( 0.06%) 803634 ( 0.01%) 110.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 31 ( 0.00%) 27138 ( 0.00%) 875.42
tcpdump file: 200712301400.dump.gz (337.30 MB)