Traffic Trace Info


DumpFile: 200701102030.dump
FileSize: 844.52MB
Id: 200701102030
StartTime: Wed Jan 10 20:30:00 2007
EndTime: Wed Jan 10 20:45:01 2007
TotalTime: 900.72 seconds
TotalCapSize: 661.22MB CapLen: 96 bytes
# of packets: 11973118 (7416.57MB)
AvgRate: 69.08Mbps stddev:6.75M

IP flow (unique src/dst pair) Information

# of flows: 481020 (avg. 24.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.9% 2.0% 1.4% 1.2% 1.0% 1.0% 0.9% 0.9% 0.8%

IP address Information

# of IPv4 addresses: 235039
Top 10 bandwidth usage (bytes/total in %):
12.0% 10.1% 9.1% 3.7% 3.7% 3.0% 2.3% 2.0% 1.6% 1.6%
# of IPv6 addresses: 1796
Top 10 bandwidth usage (bytes/total in %):
38.2% 37.0% 29.2% 29.2% 15.1% 15.1% 1.8% 1.7% 1.5% 1.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2555891
 [   64-  127]:    3737655
 [  128-  255]:     401146
 [  256-  511]:     295424
 [  512- 1023]:     307665
 [ 1024- 2047]:    4675337


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         11973118 (100.00%)       7776839887 (100.00%)    649.53
 ip            11660998 ( 97.39%)       7723854549 ( 99.32%)    662.37
  tcp           9129630 ( 76.25%)       7301055298 ( 93.88%)    799.71
   http(s)      3548514 ( 29.64%)       4716969589 ( 60.65%)   1329.28
   http(c)      2118055 ( 17.69%)        243326321 (  3.13%)    114.88
   squid         466154 (  3.89%)        356317687 (  4.58%)    764.38
   smtp          428925 (  3.58%)         98481010 (  1.27%)    229.60
   nntp            9361 (  0.08%)          4561832 (  0.06%)    487.32
   ftp            47148 (  0.39%)          4244088 (  0.05%)     90.02
   pop3            8120 (  0.07%)          7352970 (  0.09%)    905.54
   imap            1540 (  0.01%)           413242 (  0.01%)    268.34
   telnet           504 (  0.00%)            50382 (  0.00%)     99.96
   ssh            38986 (  0.33%)         35048198 (  0.45%)    898.99
   dns             6962 (  0.06%)          1504344 (  0.02%)    216.08
   bgp             1287 (  0.01%)           164376 (  0.00%)    127.72
   napster        16094 (  0.13%)         18452630 (  0.24%)   1146.55
   realaud           37 (  0.00%)             3962 (  0.00%)    107.08
   rtsp          104744 (  0.87%)         48033728 (  0.62%)    458.58
   icecast          110 (  0.00%)            10190 (  0.00%)     92.64
   hotline            9 (  0.00%)              540 (  0.00%)     60.00
   other        2333063 ( 19.49%)       1766119185 ( 22.71%)    757.00
  udp           2041786 ( 17.05%)        371529136 (  4.78%)    181.96
   dns          1652640 ( 13.80%)        193820053 (  2.49%)    117.28
   realaud            9 (  0.00%)              815 (  0.00%)     90.56
   halflif           17 (  0.00%)             1688 (  0.00%)     99.29
   starcra           10 (  0.00%)              887 (  0.00%)     88.70
   everque           20 (  0.00%)             2180 (  0.00%)    109.00
   unreal            13 (  0.00%)             1682 (  0.00%)    129.38
   quake             18 (  0.00%)             1682 (  0.00%)     93.44
   cuseeme            3 (  0.00%)              240 (  0.00%)     80.00
   other         389035 (  3.25%)        177694644 (  2.28%)    456.76
  icmp           418572 (  3.50%)         33695444 (  0.43%)     80.50
  ip6              6588 (  0.06%)          7979364 (  0.10%)   1211.20
  other           64422 (  0.54%)          9595307 (  0.12%)    148.94
  frag              386 (  0.00%)           292734 (  0.00%)    758.38
 ip6             312117 (  2.61%)         52985158 (  0.68%)    169.76
  tcp6           257740 (  2.15%)         37078457 (  0.48%)    143.86
   http(s)          656 (  0.01%)           793478 (  0.01%)   1209.57
   http(c)         7095 (  0.06%)           538495 (  0.01%)     75.90
   squid              4 (  0.00%)              336 (  0.00%)     84.00
   smtp             171 (  0.00%)            76580 (  0.00%)    447.84
   ftp           227817 (  1.90%)         19604129 (  0.25%)     86.05
   pop3              22 (  0.00%)             1992 (  0.00%)     90.55
   ssh              977 (  0.01%)           106390 (  0.00%)    108.89
   bgp              136 (  0.00%)            14988 (  0.00%)    110.21
   icecast        16943 (  0.14%)         15466906 (  0.20%)    912.88
   other           3919 (  0.03%)           475163 (  0.01%)    121.25
  udp6            37838 (  0.32%)          6475489 (  0.08%)    171.14
   dns            35650 (  0.30%)          6229073 (  0.08%)    174.73
   other           2188 (  0.02%)           246416 (  0.00%)    112.62
  icmp6            9025 (  0.08%)          1454750 (  0.02%)    161.19
  ip6              2074 (  0.02%)           252643 (  0.00%)    121.81
  ipsec6              5 (  0.00%)              626 (  0.00%)    125.20
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           5405 (  0.05%)          7719113 (  0.10%)   1428.14


tcpdump file: 200701102030.dump.gz (312.22 MB)