Traffic Trace Info


DumpFile: -
Id: 200803201045
StartTime: Thu Mar 20 10:45:00 2008
EndTime: Thu Mar 20 11:00:00 2008
TotalTime: 900.12 seconds
TotalCapSize: 549.35MB CapLen: 96 bytes
# of packets: 9944080 (5757.44MB)
AvgRate: 53.66Mbps stddev:11.01M

IP flow (unique src/dst pair) Information

# of flows: 638381 (avg. 15.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 4.0% 1.8% 1.8% 1.1% 1.1% 1.0% 0.9% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 343380
Top 10 bandwidth usage (bytes/total in %):
8.2% 7.6% 7.5% 7.0% 6.9% 6.9% 5.7% 4.1% 3.2% 2.7%
# of IPv6 addresses: 1533
Top 10 bandwidth usage (bytes/total in %):
40.5% 35.4% 9.1% 8.1% 7.4% 5.3% 3.4% 3.0% 3.0% 2.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2352912
 [   64-  127]:    2779605
 [  128-  255]:     724032
 [  256-  511]:     331549
 [  512- 1023]:     177689
 [ 1024- 2047]:    3578293


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total          9944080 (100.00%)       6037118370 (100.00%)    607.11
 ip             9920089 ( 99.76%)       6030934386 ( 99.90%)    607.95
  tcp           8106508 ( 81.52%)       5752925153 ( 95.29%)    709.67
   http(s)      2625396 ( 26.40%)       3530521948 ( 58.48%)   1344.76
   http(c)      1437137 ( 14.45%)        145522397 (  2.41%)    101.26
   squid         447289 (  4.50%)        287907059 (  4.77%)    643.67
   smtp          833185 (  8.38%)        130660911 (  2.16%)    156.82
   ftp            54458 (  0.55%)          4503651 (  0.07%)     82.70
   pop3           26396 (  0.27%)         21396131 (  0.35%)    810.58
   imap            4198 (  0.04%)          1068007 (  0.02%)    254.41
   telnet           296 (  0.00%)            19109 (  0.00%)     64.56
   ssh           446788 (  4.49%)        416905172 (  6.91%)    933.12
   dns             1721 (  0.02%)           129476 (  0.00%)     75.23
   bgp              188 (  0.00%)            55743 (  0.00%)    296.51
   napster          123 (  0.00%)            39448 (  0.00%)    320.72
   realaud           74 (  0.00%)            10393 (  0.00%)    140.45
   rtsp            4440 (  0.04%)          6126884 (  0.10%)   1379.93
   icecast         6832 (  0.07%)          3404075 (  0.06%)    498.25
   other        2217902 ( 22.30%)       1204649649 ( 19.95%)    543.15
  udp           1408886 ( 14.17%)        240859895 (  3.99%)    170.96
   dns           861660 (  8.67%)        127639496 (  2.11%)    148.13
   realaud         8711 (  0.09%)          5455831 (  0.09%)    626.32
   halflif           23 (  0.00%)             3334 (  0.00%)    144.96
   starcra           28 (  0.00%)             4106 (  0.00%)    146.64
   everque           31 (  0.00%)             4658 (  0.00%)    150.26
   unreal             3 (  0.00%)              248 (  0.00%)     82.67
   quake              3 (  0.00%)              296 (  0.00%)     98.67
   cuseeme            6 (  0.00%)             1331 (  0.00%)    221.83
   other         538350 (  5.41%)        107716997 (  1.78%)    200.09
  icmp           398432 (  4.01%)         36268648 (  0.60%)     91.03
  ipip              321 (  0.00%)            37630 (  0.00%)    117.23
  ip6              1017 (  0.01%)           137665 (  0.00%)    135.36
  other            4925 (  0.05%)           705395 (  0.01%)    143.23
  frag             1504 (  0.02%)          1284518 (  0.02%)    854.07
 ip6              23989 (  0.24%)          6183864 (  0.10%)    257.78
  tcp6             3021 (  0.03%)           558261 (  0.01%)    184.79
   http(s)          111 (  0.00%)           143691 (  0.00%)   1294.51
   http(c)          897 (  0.01%)           103333 (  0.00%)    115.20
   smtp             228 (  0.00%)            96423 (  0.00%)    422.91
   pop3              34 (  0.00%)             3140 (  0.00%)     92.35
   dns               15 (  0.00%)             2429 (  0.00%)    161.93
   bgp              116 (  0.00%)            14780 (  0.00%)    127.41
   other           1620 (  0.02%)           194465 (  0.00%)    120.04
  udp6            14482 (  0.15%)          2780257 (  0.05%)    191.98
   dns            13186 (  0.13%)          2350330 (  0.04%)    178.24
   everque            1 (  0.00%)              137 (  0.00%)    137.00
   other           1295 (  0.01%)           429790 (  0.01%)    331.88
  icmp6            4868 (  0.05%)           669554 (  0.01%)    137.54
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1588 (  0.02%)          2171712 (  0.04%)   1367.58


tcpdump file: 200803201045.dump.gz (253.67 MB)