Traffic Trace Info


DumpFile: 200701100600.dump
FileSize: 876.42MB
Id: 200701100600
StartTime: Wed Jan 10 06:00:00 2007
EndTime: Wed Jan 10 06:15:01 2007
TotalTime: 900.05 seconds
TotalCapSize: 685.57MB CapLen: 96 bytes
# of packets: 12505557 (7985.52MB)
AvgRate: 74.43Mbps stddev:8.07M

IP flow (unique src/dst pair) Information

# of flows: 470798 (avg. 26.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 3.0% 2.6% 2.4% 2.4% 2.0% 1.8% 1.8% 1.3% 1.2%

IP address Information

# of IPv4 addresses: 249498
Top 10 bandwidth usage (bytes/total in %):
27.9% 8.3% 7.6% 5.6% 4.3% 3.4% 3.4% 3.3% 3.2% 3.1%
# of IPv6 addresses: 1415
Top 10 bandwidth usage (bytes/total in %):
49.7% 49.7% 6.7% 5.6% 3.9% 3.2% 2.9% 2.7% 2.5% 2.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2536928
 [   64-  127]:    3884411
 [  128-  255]:     379774
 [  256-  511]:     257878
 [  512- 1023]:     278362
 [ 1024- 2047]:    5168204


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         12505557 (100.00%)       8373428989 (100.00%)    669.58
 ip            12450855 ( 99.56%)       8357708932 ( 99.81%)    671.26
  tcp           9999860 ( 79.96%)       7851047089 ( 93.76%)    785.12
   http(s)      3426456 ( 27.40%)       4744847091 ( 56.67%)   1384.77
   http(c)      1719434 ( 13.75%)        146352495 (  1.75%)     85.12
   squid         457628 (  3.66%)        281229663 (  3.36%)    614.54
   smtp          382678 (  3.06%)         91673708 (  1.09%)    239.56
   nntp           12483 (  0.10%)          6205106 (  0.07%)    497.08
   ftp            17965 (  0.14%)          1338803 (  0.02%)     74.52
   pop3            2047 (  0.02%)           720335 (  0.01%)    351.90
   imap            1013 (  0.01%)            89888 (  0.00%)     88.73
   telnet            68 (  0.00%)             5488 (  0.00%)     80.71
   ssh           868067 (  6.94%)        349247061 (  4.17%)    402.33
   dns             2699 (  0.02%)          1738598 (  0.02%)    644.16
   bgp             1265 (  0.01%)           210585 (  0.00%)    166.47
   napster           52 (  0.00%)             9601 (  0.00%)    184.63
   realaud           20 (  0.00%)             2423 (  0.00%)    121.15
   rtsp          129344 (  1.03%)         16527635 (  0.20%)    127.78
   icecast         6579 (  0.05%)          9168363 (  0.11%)   1393.58
   hotline            1 (  0.00%)               62 (  0.00%)     62.00
   other        2972044 ( 23.77%)       2201679164 ( 26.29%)    740.80
  udp           1934227 ( 15.47%)        458904561 (  5.48%)    237.25
   dns          1410318 ( 11.28%)        159984130 (  1.91%)    113.44
   realaud           10 (  0.00%)             1136 (  0.00%)    113.60
   halflif           19 (  0.00%)             1511 (  0.00%)     79.53
   starcra            8 (  0.00%)              772 (  0.00%)     96.50
   everque           25 (  0.00%)             2759 (  0.00%)    110.36
   unreal             2 (  0.00%)              174 (  0.00%)     87.00
   quake             10 (  0.00%)              909 (  0.00%)     90.90
   cuseeme            3 (  0.00%)              473 (  0.00%)    157.67
   other         523802 (  4.19%)        298904460 (  3.57%)    570.64
  icmp           508416 (  4.07%)         39549595 (  0.47%)     77.79
  ip6              6567 (  0.05%)          7968790 (  0.10%)   1213.46
  other            1785 (  0.01%)           238897 (  0.00%)    133.84
  frag              486 (  0.00%)           441394 (  0.01%)    908.22
 ip6              54699 (  0.44%)         15719877 (  0.19%)    287.39
  tcp6             2834 (  0.02%)           543185 (  0.01%)    191.67
   http(s)           18 (  0.00%)            13062 (  0.00%)    725.67
   http(c)           53 (  0.00%)             5614 (  0.00%)    105.92
   smtp            1014 (  0.01%)           334712 (  0.00%)    330.09
   dns               10 (  0.00%)             1460 (  0.00%)    146.00
   bgp              140 (  0.00%)            15525 (  0.00%)    110.89
   other           1599 (  0.01%)           172812 (  0.00%)    108.08
  udp6            36872 (  0.29%)          6151791 (  0.07%)    166.84
   dns            34801 (  0.28%)          5916677 (  0.07%)    170.01
   other           2071 (  0.02%)           235114 (  0.00%)    113.53
  icmp6            7520 (  0.06%)          1058958 (  0.01%)    140.82
  ip6              2042 (  0.02%)           249024 (  0.00%)    121.95
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           5401 (  0.04%)          7712839 (  0.09%)   1428.04


tcpdump file: 200701100600.dump.gz (322.78 MB)