Traffic Trace Info


DumpFile: 200803180000.dump
FileSize: 1136.31MB
Id: 200803180000
StartTime: Tue Mar 18 00:00:00 2008
EndTime: Tue Mar 18 00:15:00 2008
TotalTime: 900.27 seconds
TotalCapSize: 893.95MB CapLen: 96 bytes
# of packets: 15882634 (7849.61MB)
AvgRate: 73.15Mbps stddev:13.89M

IP flow (unique src/dst pair) Information

# of flows: 811325 (avg. 19.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 3.9% 1.9% 1.7% 1.4% 1.1% 0.9% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 462193
Top 10 bandwidth usage (bytes/total in %):
11.1% 9.0% 9.0% 6.3% 6.3% 5.4% 5.0% 4.0% 4.0% 2.5%
# of IPv6 addresses: 1705
Top 10 bandwidth usage (bytes/total in %):
38.3% 36.8% 11.4% 9.6% 5.6% 4.1% 3.8% 3.8% 3.5% 2.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2988875
 [   64-  127]:    6087980
 [  128-  255]:    1183333
 [  256-  511]:     514009
 [  512- 1023]:     415067
 [ 1024- 2047]:    4693370


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         15882634 (100.00%)       8230907812 (100.00%)    518.23
 ip            15852488 ( 99.81%)       8223444177 ( 99.91%)    518.75
  tcp          12533850 ( 78.92%)       7520103646 ( 91.36%)    599.98
   http(s)      3232706 ( 20.35%)       4452392834 ( 54.09%)   1377.30
   http(c)      2089374 ( 13.16%)        192341648 (  2.34%)     92.06
   squid         534794 (  3.37%)        334144294 (  4.06%)    624.81
   smtp          935059 (  5.89%)        148698575 (  1.81%)    159.03
   ftp           223066 (  1.40%)         40546824 (  0.49%)    181.77
   pop3            7667 (  0.05%)          3857420 (  0.05%)    503.12
   imap            5371 (  0.03%)          1310186 (  0.02%)    243.94
   ssh          2891964 ( 18.21%)        858713223 ( 10.43%)    296.93
   dns             2327 (  0.01%)           191549 (  0.00%)     82.32
   bgp              204 (  0.00%)            59016 (  0.00%)    289.29
   napster           69 (  0.00%)             7653 (  0.00%)    110.91
   realaud          131 (  0.00%)            12825 (  0.00%)     97.90
   rtsp            1820 (  0.01%)           140669 (  0.00%)     77.29
   icecast        12487 (  0.08%)         15213637 (  0.18%)   1218.36
   hotline           47 (  0.00%)             6348 (  0.00%)    135.06
   other        2596761 ( 16.35%)       1472466765 ( 17.89%)    567.04
  udp           2297131 ( 14.46%)        617462737 (  7.50%)    268.80
   dns          1239519 (  7.80%)        181554516 (  2.21%)    146.47
   realaud          632 (  0.00%)            40128 (  0.00%)     63.49
   halflif           20 (  0.00%)             4528 (  0.00%)    226.40
   starcra           39 (  0.00%)             7512 (  0.00%)    192.62
   everque           28 (  0.00%)             4706 (  0.00%)    168.07
   unreal            89 (  0.00%)             7123 (  0.00%)     80.03
   quake             10 (  0.00%)             1147 (  0.00%)    114.70
   cuseeme            5 (  0.00%)              779 (  0.00%)    155.80
   other        1056735 (  6.65%)        435816477 (  5.29%)    412.42
  icmp          1010371 (  6.36%)         84303811 (  1.02%)     83.44
  ipip              332 (  0.00%)            41972 (  0.00%)    126.42
  ip6              1085 (  0.01%)           152511 (  0.00%)    140.56
  other            9719 (  0.06%)          1379500 (  0.02%)    141.94
  frag             3732 (  0.02%)          3120200 (  0.04%)    836.07
 ip6              30146 (  0.19%)          7463635 (  0.09%)    247.58
  tcp6             6400 (  0.04%)          3322260 (  0.04%)    519.10
   http(c)         1394 (  0.01%)           136407 (  0.00%)     97.85
   smtp             553 (  0.00%)           202659 (  0.00%)    366.47
   pop3              34 (  0.00%)             3172 (  0.00%)     93.29
   dns               15 (  0.00%)             2421 (  0.00%)    161.40
   bgp               62 (  0.00%)             6436 (  0.00%)    103.81
   other           4342 (  0.03%)          2971165 (  0.04%)    684.28
  udp6            18495 (  0.12%)          3408515 (  0.04%)    184.29
   dns            16954 (  0.11%)          3073569 (  0.04%)    181.29
   other           1541 (  0.01%)           334946 (  0.00%)    217.36
  icmp6            5217 (  0.03%)           725063 (  0.01%)    138.98
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              4 (  0.00%)             3717 (  0.00%)    929.25


tcpdump file: 200803180000.dump.gz (428.34 MB)