Traffic Trace Info


DumpFile: 200701090900.dump
FileSize: 758.35MB
Id: 200701090900
StartTime: Tue Jan 9 09:00:01 2007
EndTime: Tue Jan 9 09:15:00 2007
TotalTime: 899.24 seconds
TotalCapSize: 594.02MB CapLen: 96 bytes
# of packets: 10767388 (7024.29MB)
AvgRate: 65.52Mbps stddev:12.88M

IP flow (unique src/dst pair) Information

# of flows: 366445 (avg. 29.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.9% 2.4% 1.7% 1.4% 1.4% 1.3% 1.2% 1.2% 1.1%

IP address Information

# of IPv4 addresses: 189393
Top 10 bandwidth usage (bytes/total in %):
23.2% 8.2% 5.6% 5.3% 4.2% 3.9% 3.8% 3.5% 3.2% 3.0%
# of IPv6 addresses: 1336
Top 10 bandwidth usage (bytes/total in %):
81.7% 81.7% 9.5% 9.5% 1.1% 0.7% 0.6% 0.6% 0.5% 0.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2383629
 [   64-  127]:    3054526
 [  128-  255]:     291989
 [  256-  511]:     262456
 [  512- 1023]:     267181
 [ 1024- 2047]:    4507607


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         10767388 (100.00%)       7365502984 (100.00%)    684.06
 ip            10669998 ( 99.10%)       7283480579 ( 98.89%)    682.61
  tcp           8831540 ( 82.02%)       6937222012 ( 94.19%)    785.51
   http(s)      3828814 ( 35.56%)       5191498434 ( 70.48%)   1355.90
   http(c)      2281053 ( 21.18%)        259045602 (  3.52%)    113.56
   squid         329930 (  3.06%)        199262505 (  2.71%)    603.95
   smtp          319840 (  2.97%)         82182559 (  1.12%)    256.95
   nntp            9517 (  0.09%)          4334595 (  0.06%)    455.46
   ftp            28556 (  0.27%)          2074648 (  0.03%)     72.65
   pop3           20222 (  0.19%)         13357539 (  0.18%)    660.54
   imap            5682 (  0.05%)          3044647 (  0.04%)    535.84
   telnet            63 (  0.00%)            22562 (  0.00%)    358.13
   ssh            56448 (  0.52%)         34190610 (  0.46%)    605.70
   dns             2579 (  0.02%)          1727866 (  0.02%)    669.98
   bgp              933 (  0.01%)           104010 (  0.00%)    111.48
   napster          401 (  0.00%)            49830 (  0.00%)    124.26
   rtsp          126344 (  1.17%)         12180843 (  0.17%)     96.41
   icecast        11755 (  0.11%)         16500262 (  0.22%)   1403.68
   hotline            6 (  0.00%)              679 (  0.00%)    113.17
   other        1809384 ( 16.80%)       1117644041 ( 15.17%)    617.69
  udp           1620736 ( 15.05%)        319758903 (  4.34%)    197.29
   dns          1319844 ( 12.26%)        167993653 (  2.28%)    127.28
   realaud           21 (  0.00%)             1736 (  0.00%)     82.67
   halflif            9 (  0.00%)              737 (  0.00%)     81.89
   starcra            7 (  0.00%)              868 (  0.00%)    124.00
   everque           19 (  0.00%)             2284 (  0.00%)    120.21
   unreal             5 (  0.00%)              727 (  0.00%)    145.40
   quake             16 (  0.00%)             1416 (  0.00%)     88.50
   cuseeme            4 (  0.00%)              312 (  0.00%)     78.00
   other         300527 (  2.79%)        151508514 (  2.06%)    504.14
  icmp           208772 (  1.94%)         18253537 (  0.25%)     87.43
  ip6              6598 (  0.06%)          7966912 (  0.11%)   1207.47
  other            2352 (  0.02%)           279215 (  0.00%)    118.71
  frag             3970 (  0.04%)          4679502 (  0.06%)   1178.72
 ip6              97390 (  0.90%)         82022405 (  1.11%)    842.21
  tcp6            49004 (  0.46%)         67726266 (  0.92%)   1382.06
   http(s)          156 (  0.00%)           134830 (  0.00%)    864.29
   http(c)          107 (  0.00%)            10382 (  0.00%)     97.03
   smtp             350 (  0.00%)           124195 (  0.00%)    354.84
   dns               26 (  0.00%)             3539 (  0.00%)    136.12
   bgp              123 (  0.00%)            12938 (  0.00%)    105.19
   other          48242 (  0.45%)         67440382 (  0.92%)   1397.96
  udp6            32806 (  0.30%)          5188525 (  0.07%)    158.16
   dns            30713 (  0.29%)          4951159 (  0.07%)    161.21
   other           2093 (  0.02%)           237366 (  0.00%)    113.41
  icmp6            7898 (  0.07%)          1133482 (  0.02%)    143.52
  ip6              2263 (  0.02%)           274176 (  0.00%)    121.16
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           5389 (  0.05%)          7695876 (  0.10%)   1428.07


tcpdump file: 200701090900.dump.gz (266.71 MB)