Traffic Trace Info


DumpFile: 200608251400.dump
FileSize: 936.79MB
Id: 200608251400
StartTime: Fri Aug 25 14:00:00 2006
EndTime: Fri Aug 25 14:15:01 2006
TotalTime: 900.42 seconds
TotalCapSize: 731.91MB CapLen: 96 bytes
# of packets: 13422374 (8096.88MB)
AvgRate: 75.44Mbps stddev:10.19M

IP flow (unique src/dst pair) Information

# of flows: 350064 (avg. 38.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.2% 1.9% 1.8% 1.5% 1.4% 1.2% 1.2% 1.2% 1.2%

IP address Information

# of IPv4 addresses: 181748
Top 10 bandwidth usage (bytes/total in %):
9.8% 7.7% 7.1% 4.9% 4.2% 2.9% 2.4% 2.4% 2.2% 2.2%
# of IPv6 addresses: 1391
Top 10 bandwidth usage (bytes/total in %):
60.0% 60.0% 5.8% 5.5% 4.9% 3.0% 2.1% 2.1% 2.1% 2.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3577986
 [   64-  127]:    3485818
 [  128-  255]:     445550
 [  256-  511]:     364688
 [  512- 1023]:     510796
 [ 1024- 2047]:    5037536


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         13422374 (100.00%)       8490196473 (100.00%)    632.54
 ip            13351821 ( 99.47%)       8470226599 ( 99.76%)    634.39
  tcp          11390537 ( 84.86%)       8072010153 ( 95.07%)    708.66
   http(s)      3896990 ( 29.03%)       5134673749 ( 60.48%)   1317.60
   http(c)      3544795 ( 26.41%)        435716399 (  5.13%)    122.92
   squid         116326 (  0.87%)        108593170 (  1.28%)    933.52
   smtp          286073 (  2.13%)         74557376 (  0.88%)    260.62
   nntp           14912 (  0.11%)          6022636 (  0.07%)    403.88
   ftp            66510 (  0.50%)          4854707 (  0.06%)     72.99
   pop3           11481 (  0.09%)          1767770 (  0.02%)    153.97
   imap            6306 (  0.05%)          1328900 (  0.02%)    210.74
   telnet           598 (  0.00%)            54279 (  0.00%)     90.77
   ssh           103408 (  0.77%)         36848409 (  0.43%)    356.34
   dns             2412 (  0.02%)           180562 (  0.00%)     74.86
   bgp             1213 (  0.01%)           158988 (  0.00%)    131.07
   napster          109 (  0.00%)            12317 (  0.00%)    113.00
   realaud          113 (  0.00%)            13528 (  0.00%)    119.72
   rtsp          103937 (  0.77%)         28923049 (  0.34%)    278.27
   icecast         5988 (  0.04%)           410551 (  0.00%)     68.56
   hotline           20 (  0.00%)             1812 (  0.00%)     90.60
   other        3229334 ( 24.06%)       2237891231 ( 26.36%)    692.99
  udp           1518778 ( 11.32%)        232104571 (  2.73%)    152.82
   dns          1204297 (  8.97%)        157318959 (  1.85%)    130.63
   realaud         4480 (  0.03%)          1511557 (  0.02%)    337.40
   halflif           14 (  0.00%)             1734 (  0.00%)    123.86
   starcra            8 (  0.00%)              672 (  0.00%)     84.00
   everque            9 (  0.00%)              784 (  0.00%)     87.11
   unreal            15 (  0.00%)             2079 (  0.00%)    138.60
   quake             15 (  0.00%)             1283 (  0.00%)     85.53
   cuseeme            4 (  0.00%)              328 (  0.00%)     82.00
   other         309935 (  2.31%)         73266707 (  0.86%)    236.39
  icmp           117140 (  0.87%)         19450093 (  0.23%)    166.04
  ipsec           87099 (  0.65%)         70260788 (  0.83%)    806.68
  ip6              5803 (  0.04%)          3458370 (  0.04%)    595.96
  other          232464 (  1.73%)         72942624 (  0.86%)    313.78
  frag              502 (  0.00%)           399364 (  0.00%)    795.55
 ip6              70550 (  0.53%)         19969694 (  0.24%)    283.06
  tcp6            32282 (  0.24%)         14470117 (  0.17%)    448.24
   http(s)         7984 (  0.06%)         11709080 (  0.14%)   1466.57
   http(c)        12385 (  0.09%)          1315716 (  0.02%)    106.23
   smtp             137 (  0.00%)            41021 (  0.00%)    299.42
   ftp               46 (  0.00%)             4681 (  0.00%)    101.76
   pop3              53 (  0.00%)             4778 (  0.00%)     90.15
   imap            1138 (  0.01%)           111835 (  0.00%)     98.27
   telnet           400 (  0.00%)            29604 (  0.00%)     74.01
   ssh               17 (  0.00%)             2062 (  0.00%)    121.29
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              145 (  0.00%)            18229 (  0.00%)    125.72
   other           9970 (  0.07%)          1232476 (  0.01%)    123.62
  udp6            18742 (  0.14%)          2810293 (  0.03%)    149.95
   dns            18313 (  0.14%)          2766419 (  0.03%)    151.06
   other            429 (  0.00%)            43874 (  0.00%)    102.27
  icmp6           17257 (  0.13%)          2405907 (  0.03%)    139.42
  ip4                 2 (  0.00%)              326 (  0.00%)    163.00
  ip6              2209 (  0.02%)           276199 (  0.00%)    125.03
  pim6               58 (  0.00%)             6852 (  0.00%)    118.14


tcpdump file: 200608251400.dump.gz (344.55 MB)