Traffic Trace Info


DumpFile: 200701091300.dump
FileSize: 1212.58MB
Id: 200701091300
StartTime: Tue Jan 9 13:00:00 2007
EndTime: Tue Jan 9 13:15:01 2007
TotalTime: 900.18 seconds
TotalCapSize: 947.76MB CapLen: 96 bytes
# of packets: 17352977 (11950.11MB)
AvgRate: 111.36Mbps stddev:12.45M

IP flow (unique src/dst pair) Information

# of flows: 603800 (avg. 28.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.9% 1.7% 1.7% 1.4% 1.3% 1.1% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 296849
Top 10 bandwidth usage (bytes/total in %):
10.3% 8.6% 7.6% 3.0% 2.8% 2.4% 2.2% 2.0% 2.0% 1.9%
# of IPv6 addresses: 1363
Top 10 bandwidth usage (bytes/total in %):
52.1% 51.9% 23.5% 23.5% 2.5% 2.5% 2.1% 1.6% 1.5% 1.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4135466
 [   64-  127]:    4107944
 [  128-  255]:     461513
 [  256-  511]:     511146
 [  512- 1023]:     478433
 [ 1024- 2047]:    7658475


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         17352977 (100.00%)      12530597909 (100.00%)    722.10
 ip            17284119 ( 99.60%)      12497436148 ( 99.74%)    723.06
  tcp          14982218 ( 86.34%)      12065577313 ( 96.29%)    805.33
   http(s)      6586625 ( 37.96%)       8700233183 ( 69.43%)   1320.89
   http(c)      3844226 ( 22.15%)        526120777 (  4.20%)    136.86
   squid         375318 (  2.16%)        213808787 (  1.71%)    569.67
   smtp          372092 (  2.14%)        112674212 (  0.90%)    302.81
   nntp            8582 (  0.05%)          5733023 (  0.05%)    668.03
   ftp            72641 (  0.42%)         46034841 (  0.37%)    633.73
   pop3            6893 (  0.04%)          2702460 (  0.02%)    392.06
   imap            5722 (  0.03%)          3078373 (  0.02%)    537.99
   telnet          1224 (  0.01%)           124358 (  0.00%)    101.60
   ssh            32654 (  0.19%)         12140131 (  0.10%)    371.78
   dns             2653 (  0.02%)          1742466 (  0.01%)    656.79
   bgp             1107 (  0.01%)           132697 (  0.00%)    119.87
   napster          164 (  0.00%)            10453 (  0.00%)     63.74
   realaud           83 (  0.00%)             6161 (  0.00%)     74.23
   rtsp          197672 (  1.14%)        145853535 (  1.16%)    737.86
   icecast        40180 (  0.23%)         45318409 (  0.36%)   1127.88
   other        3434366 ( 19.79%)       2249862487 ( 17.95%)    655.10
  udp           1840600 ( 10.61%)        375879033 (  3.00%)    204.22
   dns          1356653 (  7.82%)        175703186 (  1.40%)    129.51
   realaud        16418 (  0.09%)         10188537 (  0.08%)    620.57
   halflif           17 (  0.00%)             2121 (  0.00%)    124.76
   starcra           17 (  0.00%)             2929 (  0.00%)    172.29
   everque           29 (  0.00%)             3908 (  0.00%)    134.76
   unreal            22 (  0.00%)             3374 (  0.00%)    153.36
   quake             18 (  0.00%)             2041 (  0.00%)    113.39
   cuseeme           11 (  0.00%)             2033 (  0.00%)    184.82
   other         467398 (  2.69%)        189965929 (  1.52%)    406.43
  icmp           349567 (  2.01%)         29057348 (  0.23%)     83.12
  ip6              6556 (  0.04%)          7946317 (  0.06%)   1212.07
  other          105178 (  0.61%)         18976137 (  0.15%)    180.42
  frag              422 (  0.00%)           334748 (  0.00%)    793.24
 ip6              68855 (  0.40%)         33161581 (  0.26%)    481.61
  tcp6            19553 (  0.11%)         18825803 (  0.15%)    962.81
   http(s)          744 (  0.00%)           814387 (  0.01%)   1094.61
   http(c)         1095 (  0.01%)           175597 (  0.00%)    160.36
   smtp             128 (  0.00%)            23172 (  0.00%)    181.03
   ftp               47 (  0.00%)             4504 (  0.00%)     95.83
   pop3              11 (  0.00%)             1018 (  0.00%)     92.55
   ssh              159 (  0.00%)            16074 (  0.00%)    101.09
   bgp              169 (  0.00%)            20963 (  0.00%)    124.04
   other          17200 (  0.10%)         17770088 (  0.14%)   1033.14
  udp6            31413 (  0.18%)          4944807 (  0.04%)    157.41
   dns            29223 (  0.17%)          4697541 (  0.04%)    160.75
   other           2190 (  0.01%)           247266 (  0.00%)    112.91
  icmp6            7736 (  0.04%)          1085501 (  0.01%)    140.32
  ip6              2198 (  0.01%)           266856 (  0.00%)    121.41
  ipsec6           2531 (  0.01%)           331606 (  0.00%)    131.02
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           5394 (  0.03%)          7702928 (  0.06%)   1428.05


tcpdump file: 200701091300.dump.gz (447.45 MB)