Traffic Trace Info


DumpFile: 200503211400.dump
FileSize: 428.58MB
Id: 200503211400
StartTime: Mon Mar 21 14:00:00 2005
EndTime: Mon Mar 21 14:15:00 2005
TotalTime: 900.41 seconds
TotalCapSize: 334.76MB CapLen: 96 bytes
# of packets: 6148787 (2288.66MB)
AvgRate: 21.32Mbps stddev:1.61M

IP flow (unique src/dst pair) Information

# of flows: 736236 (avg. 8.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.9% 3.6% 2.8% 1.7% 1.7% 1.6% 1.4% 1.4% 1.2%

IP address Information

# of IPv4 addresses: 426272
Top 10 bandwidth usage (bytes/total in %):
21.9% 9.0% 8.4% 5.0% 4.9% 4.1% 4.1% 3.9% 3.9% 3.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   16-   31]:      38638
 [   32-   63]:    2390428
 [   64-  127]:    1778541
 [  128-  255]:     154222
 [  256-  511]:     178859
 [  512- 1023]:     425992
 [ 1024- 2047]:    1182107


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total          6148787 (100.00%)       2399831175 (100.00%)    390.29
 ip             6041501 ( 98.26%)       2396543829 ( 99.86%)    396.68
  tcp           4772001 ( 77.61%)       2065760632 ( 86.08%)    432.89
   http(s)       589841 (  9.59%)        631083255 ( 26.30%)   1069.92
   http(c)      1241422 ( 20.19%)        128086843 (  5.34%)    103.18
   squid          14086 (  0.23%)          8870229 (  0.37%)    629.72
   smtp          183740 (  2.99%)        120553676 (  5.02%)    656.11
   nntp             465 (  0.01%)            50660 (  0.00%)    108.95
   ftp            57137 (  0.93%)         27429058 (  1.14%)    480.06
   pop3            3090 (  0.05%)           333413 (  0.01%)    107.90
   imap            3548 (  0.06%)           432495 (  0.02%)    121.90
   telnet          1214 (  0.02%)           116463 (  0.00%)     95.93
   ssh           143626 (  2.34%)         12633128 (  0.53%)     87.96
   dns              589 (  0.01%)            42176 (  0.00%)     71.61
   bgp              168 (  0.00%)            33596 (  0.00%)    199.98
   napster          694 (  0.01%)            71800 (  0.00%)    103.46
   realaud         1677 (  0.03%)           112941 (  0.00%)     67.35
   rtsp          120303 (  1.96%)        129657807 (  5.40%)   1077.76
   icecast        13202 (  0.21%)           837068 (  0.03%)     63.40
   hotline            2 (  0.00%)              124 (  0.00%)     62.00
   other        2384246 ( 38.78%)       1004966529 ( 41.88%)    421.50
  udp            740635 ( 12.05%)        265663314 ( 11.07%)    358.70
   dns           559200 (  9.09%)        233539939 (  9.73%)    417.63
   realaud         6227 (  0.10%)          2679494 (  0.11%)    430.30
   starcra         1361 (  0.02%)            90946 (  0.00%)     66.82
   everque            2 (  0.00%)              161 (  0.00%)     80.50
   quake              1 (  0.00%)               74 (  0.00%)     74.00
   other         169460 (  2.76%)         29200739 (  1.22%)    172.32
  icmp           231370 (  3.76%)         17436175 (  0.73%)     75.36
  ipsec              88 (  0.00%)             8214 (  0.00%)     93.34
  ip6              1329 (  0.02%)           396569 (  0.02%)    298.40
  other          296078 (  4.82%)         47278925 (  1.97%)    159.68
  frag               17 (  0.00%)             1546 (  0.00%)     90.94


tcpdump file: 200503211400.dump.gz (160.61 MB)