Traffic Trace Info


DumpFile: -
Id: 200803181715
StartTime: Tue Mar 18 17:15:01 2008
EndTime: Tue Mar 18 17:30:01 2008
TotalTime: 899.85 seconds
TotalCapSize: 973.73MB CapLen: 96 bytes
# of packets: 17498674 (11599.86MB)
AvgRate: 108.13Mbps stddev:18.76M

IP flow (unique src/dst pair) Information

# of flows: 708781 (avg. 24.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.3% 2.4% 2.4% 1.9% 1.8% 1.8% 1.5% 1.4% 1.1%

IP address Information

# of IPv4 addresses: 380876
Top 10 bandwidth usage (bytes/total in %):
7.4% 6.5% 6.4% 6.2% 4.8% 4.4% 4.3% 3.7% 3.4% 3.4%
# of IPv6 addresses: 2045
Top 10 bandwidth usage (bytes/total in %):
49.6% 45.5% 13.2% 10.5% 4.5% 4.2% 2.7% 2.2% 2.0% 2.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3499411
 [   64-  127]:    4863126
 [  128-  255]:     902209
 [  256-  511]:     470288
 [  512- 1023]:     393032
 [ 1024- 2047]:    7370608


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         17498674 (100.00%)      12163332435 (100.00%)    695.10
 ip            17463688 ( 99.80%)      12153476824 ( 99.92%)    695.93
  tcp          15138039 ( 86.51%)      11773222717 ( 96.79%)    777.72
   http(s)      5793805 ( 33.11%)       7788138577 ( 64.03%)   1344.22
   http(c)      3445010 ( 19.69%)        571191228 (  4.70%)    165.80
   squid         711202 (  4.06%)        523105369 (  4.30%)    735.52
   smtp          636656 (  3.64%)        154699362 (  1.27%)    242.99
   nntp               1 (  0.00%)               60 (  0.00%)     60.00
   ftp            66846 (  0.38%)         27056629 (  0.22%)    404.76
   pop3           16262 (  0.09%)          6183016 (  0.05%)    380.21
   imap            4742 (  0.03%)          2322844 (  0.02%)    489.84
   telnet           562 (  0.00%)            50748 (  0.00%)     90.30
   ssh          1309478 (  7.48%)        534880512 (  4.40%)    408.47
   dns             2258 (  0.01%)           182461 (  0.00%)     80.81
   bgp              264 (  0.00%)            99216 (  0.00%)    375.82
   napster           42 (  0.00%)             6079 (  0.00%)    144.74
   realaud          100 (  0.00%)            15202 (  0.00%)    152.02
   rtsp          225450 (  1.29%)        258915555 (  2.13%)   1148.44
   icecast        23513 (  0.13%)         23279084 (  0.19%)    990.05
   hotline           24 (  0.00%)             3404 (  0.00%)    141.83
   other        2901822 ( 16.58%)       1883093251 ( 15.48%)    648.93
  udp           1767658 ( 10.10%)        319604345 (  2.63%)    180.81
   dns          1094549 (  6.26%)        162478313 (  1.34%)    148.44
   realaud        10632 (  0.06%)          7801513 (  0.06%)    733.78
   halflif           17 (  0.00%)             2432 (  0.00%)    143.06
   starcra           40 (  0.00%)             7579 (  0.00%)    189.47
   everque           13 (  0.00%)             1220 (  0.00%)     93.85
   unreal            17 (  0.00%)             3918 (  0.00%)    230.47
   quake             14 (  0.00%)             1822 (  0.00%)    130.14
   cuseeme            2 (  0.00%)              175 (  0.00%)     87.50
   other         662343 (  3.79%)        149299629 (  1.23%)    225.41
  icmp           451012 (  2.58%)         40661789 (  0.33%)     90.16
  ipip              321 (  0.00%)            40954 (  0.00%)    127.58
  ip6              1068 (  0.01%)           146681 (  0.00%)    137.34
  other          105590 (  0.60%)         19800338 (  0.16%)    187.52
  frag             1548 (  0.01%)          1295467 (  0.01%)    836.86
 ip6              34986 (  0.20%)          9855611 (  0.08%)    281.70
  tcp6             4130 (  0.02%)           719009 (  0.01%)    174.09
   http(s)           88 (  0.00%)            75359 (  0.00%)    856.35
   http(c)         1559 (  0.01%)           155082 (  0.00%)     99.48
   smtp             523 (  0.00%)           261426 (  0.00%)    499.86
   ftp               33 (  0.00%)             2691 (  0.00%)     81.55
   pop3              33 (  0.00%)             3042 (  0.00%)     92.18
   bgp               66 (  0.00%)             7228 (  0.00%)    109.52
   other           1828 (  0.01%)           214181 (  0.00%)    117.17
  udp6            22402 (  0.13%)          3976248 (  0.03%)    177.50
   dns            20539 (  0.12%)          3586368 (  0.03%)    174.61
   everque            1 (  0.00%)              142 (  0.00%)    142.00
   other           1862 (  0.01%)           389738 (  0.00%)    209.31
  icmp6            4992 (  0.03%)           682970 (  0.01%)    136.81
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           3432 (  0.02%)          4473304 (  0.04%)   1303.41


tcpdump file: 200803181715.dump.gz (445.62 MB)