Traffic Trace Info


DumpFile: -
Id: 200803201315
StartTime: Thu Mar 20 13:15:01 2008
EndTime: Thu Mar 20 13:30:00 2008
TotalTime: 899.46 seconds
TotalCapSize: 693.21MB CapLen: 96 bytes
# of packets: 12534453 (7344.60MB)
AvgRate: 68.51Mbps stddev:11.44M

IP flow (unique src/dst pair) Information

# of flows: 559253 (avg. 22.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 4.8% 2.5% 2.5% 2.4% 2.4% 2.3% 2.1% 1.9% 1.4%

IP address Information

# of IPv4 addresses: 308675
Top 10 bandwidth usage (bytes/total in %):
10.0% 6.8% 6.1% 6.0% 5.8% 5.2% 5.0% 4.9% 4.2% 2.6%
# of IPv6 addresses: 1310
Top 10 bandwidth usage (bytes/total in %):
58.4% 49.5% 6.4% 5.2% 2.9% 2.8% 2.5% 2.5% 2.4% 2.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3043510
 [   64-  127]:    3435028
 [  128-  255]:     688694
 [  256-  511]:     425759
 [  512- 1023]:     364226
 [ 1024- 2047]:    4577236


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         12534453 (100.00%)       7701370177 (100.00%)    614.42
 ip            12504970 ( 99.76%)       7692533220 ( 99.89%)    615.16
  tcp          10715206 ( 85.49%)       7367585804 ( 95.67%)    687.58
   http(s)      2922467 ( 23.32%)       3946773711 ( 51.25%)   1350.49
   http(c)      2023871 ( 16.15%)        174361835 (  2.26%)     86.15
   squid         778231 (  6.21%)        452971460 (  5.88%)    582.05
   smtp          528716 (  4.22%)        106698348 (  1.39%)    201.81
   ftp           114819 (  0.92%)         74047623 (  0.96%)    644.91
   pop3            4759 (  0.04%)          1933375 (  0.03%)    406.26
   imap            5103 (  0.04%)           958624 (  0.01%)    187.85
   telnet          6872 (  0.05%)          4273863 (  0.06%)    621.92
   ssh           832491 (  6.64%)        469054481 (  6.09%)    563.43
   dns             1746 (  0.01%)           126405 (  0.00%)     72.40
   bgp              205 (  0.00%)            65425 (  0.00%)    319.15
   napster           67 (  0.00%)            24979 (  0.00%)    372.82
   realaud           15 (  0.00%)             1197 (  0.00%)     79.80
   rtsp            7765 (  0.06%)          9138446 (  0.12%)   1176.88
   icecast         7236 (  0.06%)          2421532 (  0.03%)    334.65
   hotline           48 (  0.00%)            15562 (  0.00%)    324.21
   other        3480768 ( 27.77%)       2124717318 ( 27.59%)    610.42
  udp           1448555 ( 11.56%)        290571211 (  3.77%)    200.59
   dns           827977 (  6.61%)        121059712 (  1.57%)    146.21
   realaud        10466 (  0.08%)          5555443 (  0.07%)    530.81
   halflif           13 (  0.00%)             2399 (  0.00%)    184.54
   starcra           59 (  0.00%)            11139 (  0.00%)    188.80
   everque           31 (  0.00%)             4656 (  0.00%)    150.19
   unreal            18 (  0.00%)             4672 (  0.00%)    259.56
   quake              5 (  0.00%)              730 (  0.00%)    146.00
   cuseeme            7 (  0.00%)              960 (  0.00%)    137.14
   other         609902 (  4.87%)        163895448 (  2.13%)    268.72
  icmp           322567 (  2.57%)         30814567 (  0.40%)     95.53
  ipip              343 (  0.00%)            42606 (  0.00%)    124.22
  ip6              1032 (  0.01%)           139764 (  0.00%)    135.43
  other           17267 (  0.14%)          3379268 (  0.04%)    195.71
  frag             2329 (  0.02%)          1879268 (  0.02%)    806.90
 ip6              29483 (  0.24%)          8836957 (  0.11%)    299.73
  tcp6             4972 (  0.04%)           964305 (  0.01%)    193.95
   http(s)          509 (  0.00%)           436746 (  0.01%)    858.05
   http(c)          831 (  0.01%)            84258 (  0.00%)    101.39
   smtp             291 (  0.00%)            70498 (  0.00%)    242.26
   ftp              557 (  0.00%)            65556 (  0.00%)    117.69
   pop3              36 (  0.00%)             3084 (  0.00%)     85.67
   bgp              119 (  0.00%)            20648 (  0.00%)    173.51
   other           2629 (  0.02%)           283515 (  0.00%)    107.84
  udp6            16195 (  0.13%)          2816282 (  0.04%)    173.90
   dns            15112 (  0.12%)          2577044 (  0.03%)    170.53
   everque            1 (  0.00%)              137 (  0.00%)    137.00
   other           1082 (  0.01%)           239101 (  0.00%)    220.98
  icmp6            4941 (  0.04%)           687556 (  0.01%)    139.15
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           3345 (  0.03%)          4364734 (  0.06%)   1304.85


tcpdump file: 200803201315.dump.gz (321.23 MB)