Traffic Trace Info


DumpFile: -
Id: 200803181945
StartTime: Tue Mar 18 19:45:01 2008
EndTime: Tue Mar 18 20:00:00 2008
TotalTime: 899.36 seconds
TotalCapSize: 829.23MB CapLen: 96 bytes
# of packets: 14975505 (9044.23MB)
AvgRate: 84.36Mbps stddev:13.84M

IP flow (unique src/dst pair) Information

# of flows: 653185 (avg. 22.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.6% 4.3% 2.0% 1.4% 1.3% 1.1% 1.1% 1.0% 1.0% 0.9%

IP address Information

# of IPv4 addresses: 352236
Top 10 bandwidth usage (bytes/total in %):
11.7% 10.9% 7.3% 6.9% 5.2% 4.7% 4.4% 4.3% 3.5% 3.4%
# of IPv6 addresses: 1765
Top 10 bandwidth usage (bytes/total in %):
40.6% 36.5% 21.0% 21.0% 6.9% 5.6% 3.7% 3.2% 2.4% 2.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2958225
 [   64-  127]:    4624495
 [  128-  255]:     881869
 [  256-  511]:     442875
 [  512- 1023]:     390596
 [ 1024- 2047]:    5677445


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         14975505 (100.00%)       9483567246 (100.00%)    633.27
 ip            14918164 ( 99.62%)       9472572334 ( 99.88%)    634.97
  tcp          12147219 ( 81.11%)       8920698674 ( 94.06%)    734.38
   http(s)      4011607 ( 26.79%)       5438695177 ( 57.35%)   1355.74
   http(c)      2354505 ( 15.72%)        251308392 (  2.65%)    106.74
   squid         414520 (  2.77%)        237283910 (  2.50%)    572.43
   smtp          619837 (  4.14%)        106360478 (  1.12%)    171.59
   ftp            80196 (  0.54%)         36761756 (  0.39%)    458.40
   pop3            5318 (  0.04%)          2392703 (  0.03%)    449.93
   imap            7858 (  0.05%)          4159980 (  0.04%)    529.39
   telnet            97 (  0.00%)            26550 (  0.00%)    273.71
   ssh          1252762 (  8.37%)        528136409 (  5.57%)    421.58
   dns             2309 (  0.02%)           196050 (  0.00%)     84.91
   bgp              272 (  0.00%)           118234 (  0.00%)    434.68
   napster           21 (  0.00%)             3092 (  0.00%)    147.24
   realaud           16 (  0.00%)             1953 (  0.00%)    122.06
   rtsp          119728 (  0.80%)        132700397 (  1.40%)   1108.35
   icecast        14725 (  0.10%)         15715215 (  0.17%)   1067.25
   hotline           12 (  0.00%)             1320 (  0.00%)    110.00
   other        3263422 ( 21.79%)       2166836218 ( 22.85%)    663.98
  udp           1913615 ( 12.78%)        466269224 (  4.92%)    243.66
   dns          1029866 (  6.88%)        150987565 (  1.59%)    146.61
   realaud        11509 (  0.08%)          7849604 (  0.08%)    682.04
   halflif           14 (  0.00%)             2294 (  0.00%)    163.86
   starcra           37 (  0.00%)             8121 (  0.00%)    219.49
   everque           32 (  0.00%)             5607 (  0.00%)    175.22
   unreal           161 (  0.00%)            14095 (  0.00%)     87.55
   quake           1941 (  0.01%)           356688 (  0.00%)    183.77
   cuseeme           12 (  0.00%)              809 (  0.00%)     67.42
   other         870016 (  5.81%)        307037757 (  3.24%)    352.91
  icmp           663334 (  4.43%)         56215339 (  0.59%)     84.75
  ipip              313 (  0.00%)            38242 (  0.00%)    122.18
  ip6              1110 (  0.01%)           154624 (  0.00%)    139.30
  other          192573 (  1.29%)         29196231 (  0.31%)    151.61
  frag             4130 (  0.03%)          2813192 (  0.03%)    681.16
 ip6              57341 (  0.38%)         10994912 (  0.12%)    191.75
  tcp6            31367 (  0.21%)          2971113 (  0.03%)     94.72
   http(s)           16 (  0.00%)             3517 (  0.00%)    219.81
   http(c)        28309 (  0.19%)          2460731 (  0.03%)     86.92
   smtp             802 (  0.01%)           251535 (  0.00%)    313.63
   pop3              44 (  0.00%)             4016 (  0.00%)     91.27
   bgp               65 (  0.00%)             6909 (  0.00%)    106.29
   other           2131 (  0.01%)           244405 (  0.00%)    114.69
  udp6            18008 (  0.12%)          3309081 (  0.03%)    183.76
   dns            16428 (  0.11%)          2891657 (  0.03%)    176.02
   everque            4 (  0.00%)              900 (  0.00%)    225.00
   other           1576 (  0.01%)           416524 (  0.00%)    264.29
  icmp6            4886 (  0.03%)           718638 (  0.01%)    147.08
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           3050 (  0.02%)          3992000 (  0.04%)   1308.85


tcpdump file: 200803181945.dump.gz (384.87 MB)