Traffic Trace Info


DumpFile: -
Id: 200803181515
StartTime: Tue Mar 18 15:15:01 2008
EndTime: Tue Mar 18 15:30:00 2008
TotalTime: 899.68 seconds
TotalCapSize: 935.74MB CapLen: 96 bytes
# of packets: 16961403 (11419.20MB)
AvgRate: 106.50Mbps stddev:19.19M

IP flow (unique src/dst pair) Information

# of flows: 652208 (avg. 26.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.8% 2.5% 2.2% 2.2% 2.2% 1.9% 1.5% 1.5% 1.0%

IP address Information

# of IPv4 addresses: 366078
Top 10 bandwidth usage (bytes/total in %):
12.5% 4.4% 4.3% 3.6% 3.3% 3.3% 3.1% 3.1% 3.1% 2.9%
# of IPv6 addresses: 2230
Top 10 bandwidth usage (bytes/total in %):
89.5% 89.5% 5.5% 5.0% 0.7% 0.5% 0.5% 0.4% 0.4% 0.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3474259
 [   64-  127]:    4328134
 [  128-  255]:     939062
 [  256-  511]:     504166
 [  512- 1023]:     418207
 [ 1024- 2047]:    7297575


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         16961403 (100.00%)      11973899518 (100.00%)    705.95
 ip            16868169 ( 99.45%)      11882956724 ( 99.24%)    704.46
  tcp          14552103 ( 85.80%)      11421704269 ( 95.39%)    784.88
   http(s)      5984537 ( 35.28%)       7894725879 ( 65.93%)   1319.19
   http(c)      3605120 ( 21.25%)        834785985 (  6.97%)    231.56
   squid         605536 (  3.57%)        472902962 (  3.95%)    780.97
   smtp          664238 (  3.92%)        140455495 (  1.17%)    211.45
   ftp            83284 (  0.49%)         41097986 (  0.34%)    493.47
   pop3           12351 (  0.07%)          5729299 (  0.05%)    463.87
   imap            7551 (  0.04%)          4215764 (  0.04%)    558.31
   telnet           598 (  0.00%)            46280 (  0.00%)     77.39
   ssh          1219863 (  7.19%)        466429672 (  3.90%)    382.36
   dns             1835 (  0.01%)           150481 (  0.00%)     82.01
   bgp              208 (  0.00%)            66689 (  0.00%)    320.62
   napster          182 (  0.00%)            14221 (  0.00%)     78.14
   realaud          562 (  0.00%)           198165 (  0.00%)    352.61
   rtsp          191033 (  1.13%)        178166252 (  1.49%)    932.65
   icecast        31506 (  0.19%)         23638075 (  0.20%)    750.27
   hotline           54 (  0.00%)             6512 (  0.00%)    120.59
   other        2143638 ( 12.64%)       1359074132 ( 11.35%)    634.00
  udp           1692160 (  9.98%)        361891960 (  3.02%)    213.86
   dns           960593 (  5.66%)        141749833 (  1.18%)    147.56
   realaud        19307 (  0.11%)         13251926 (  0.11%)    686.38
   halflif           19 (  0.00%)             4906 (  0.00%)    258.21
   starcra           36 (  0.00%)             7378 (  0.00%)    204.94
   everque           45 (  0.00%)             7902 (  0.00%)    175.60
   unreal            11 (  0.00%)             2200 (  0.00%)    200.00
   quake           3058 (  0.02%)           529660 (  0.00%)    173.20
   cuseeme            2 (  0.00%)              150 (  0.00%)     75.00
   other         709073 (  4.18%)        206334893 (  1.72%)    290.99
  icmp           333816 (  1.97%)         31850031 (  0.27%)     95.41
  ipip              312 (  0.00%)            37384 (  0.00%)    119.82
  ip6              1013 (  0.01%)           136318 (  0.00%)    134.57
  other          288765 (  1.70%)         67336762 (  0.56%)    233.19
  frag            14568 (  0.09%)         11529404 (  0.10%)    791.42
 ip6              93234 (  0.55%)         90942794 (  0.76%)    975.43
  tcp6            66460 (  0.39%)         82345100 (  0.69%)   1239.02
   http(s)        58908 (  0.35%)         81469258 (  0.68%)   1382.99
   http(c)         4315 (  0.03%)           393902 (  0.00%)     91.29
   smtp             629 (  0.00%)           191574 (  0.00%)    304.57
   ftp              112 (  0.00%)            13005 (  0.00%)    116.12
   pop3              33 (  0.00%)             3042 (  0.00%)     92.18
   ssh               68 (  0.00%)             7744 (  0.00%)    113.88
   dns               18 (  0.00%)             2112 (  0.00%)    117.33
   bgp               64 (  0.00%)             6815 (  0.00%)    106.48
   other           2313 (  0.01%)           257648 (  0.00%)    111.39
  udp6            17629 (  0.10%)          3264960 (  0.03%)    185.20
   dns            15494 (  0.09%)          2700846 (  0.02%)    174.32
   everque            1 (  0.00%)              552 (  0.00%)    552.00
   other           2134 (  0.01%)           563562 (  0.00%)    264.09
  icmp6            5620 (  0.03%)           762370 (  0.01%)    135.65
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           3495 (  0.02%)          4566284 (  0.04%)   1306.52


tcpdump file: 200803181515.dump.gz (420.15 MB)