Traffic Trace Info


DumpFile: 200608261400.dump
FileSize: 740.59MB
Id: 200608261400
StartTime: Sat Aug 26 14:00:01 2006
EndTime: Sat Aug 26 14:15:01 2006
TotalTime: 900.11 seconds
TotalCapSize: 577.28MB CapLen: 96 bytes
# of packets: 10696569 (6709.75MB)
AvgRate: 62.54Mbps stddev:8.08M

IP flow (unique src/dst pair) Information

# of flows: 316874 (avg. 33.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 4.2% 2.1% 2.1% 1.6% 1.3% 1.3% 1.3% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 167227
Top 10 bandwidth usage (bytes/total in %):
11.1% 10.8% 10.5% 8.9% 6.7% 6.5% 4.3% 3.9% 3.1% 2.1%
# of IPv6 addresses: 1262
Top 10 bandwidth usage (bytes/total in %):
12.7% 12.6% 12.2% 9.4% 6.8% 4.4% 4.2% 4.2% 4.2% 3.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2554692
 [   64-  127]:    2852048
 [  128-  255]:     467482
 [  256-  511]:     251093
 [  512- 1023]:     281153
 [ 1024- 2047]:    4290101


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         10696569 (100.00%)       7035686477 (100.00%)    657.75
 ip            10653692 ( 99.60%)       7029429585 ( 99.91%)    659.81
  tcp           8809697 ( 82.36%)       6662213035 ( 94.69%)    756.24
   http(s)      3115419 ( 29.13%)       4156446602 ( 59.08%)   1334.15
   http(c)      2209263 ( 20.65%)        258966501 (  3.68%)    117.22
   squid         159991 (  1.50%)        101780949 (  1.45%)    636.17
   smtp          236157 (  2.21%)         49068314 (  0.70%)    207.78
   nntp           28566 (  0.27%)          7333978 (  0.10%)    256.74
   ftp            68477 (  0.64%)          6347048 (  0.09%)     92.69
   pop3            8797 (  0.08%)          2215534 (  0.03%)    251.85
   imap            9159 (  0.09%)          4747079 (  0.07%)    518.30
   telnet          5406 (  0.05%)           349309 (  0.00%)     64.62
   ssh            12577 (  0.12%)          5425785 (  0.08%)    431.41
   dns             1025 (  0.01%)            76290 (  0.00%)     74.43
   bgp             1052 (  0.01%)           128319 (  0.00%)    121.98
   napster          151 (  0.00%)            14234 (  0.00%)     94.26
   realaud         4097 (  0.04%)           323319 (  0.00%)     78.92
   rtsp           93102 (  0.87%)         11585176 (  0.16%)    124.44
   icecast         1023 (  0.01%)            77239 (  0.00%)     75.50
   hotline            4 (  0.00%)              246 (  0.00%)     61.50
   other        2855423 ( 26.69%)       2057326633 ( 29.24%)    720.50
  udp           1358120 ( 12.70%)        204559472 (  2.91%)    150.62
   dns          1082358 ( 10.12%)        132374334 (  1.88%)    122.30
   realaud        14317 (  0.13%)          5749675 (  0.08%)    401.60
   halflif           16 (  0.00%)             2688 (  0.00%)    168.00
   starcra           17 (  0.00%)             2888 (  0.00%)    169.88
   everque           19 (  0.00%)             1947 (  0.00%)    102.47
   unreal             6 (  0.00%)              665 (  0.00%)    110.83
   quake             13 (  0.00%)             1525 (  0.00%)    117.31
   cuseeme            6 (  0.00%)              500 (  0.00%)     83.33
   other         260958 (  2.44%)         66349415 (  0.94%)    254.25
  icmp           115153 (  1.08%)         19379059 (  0.28%)    168.29
  ipsec           49106 (  0.46%)         35606868 (  0.51%)    725.10
  ip6              7722 (  0.07%)          4679653 (  0.07%)    606.02
  other          313894 (  2.93%)        102991498 (  1.46%)    328.11
  frag             1618 (  0.02%)          1368327 (  0.02%)    845.69
 ip6              42877 (  0.40%)          6256892 (  0.09%)    145.93
  tcp6             8509 (  0.08%)          1122557 (  0.02%)    131.93
   http(s)          233 (  0.00%)           152576 (  0.00%)    654.83
   http(c)         1638 (  0.02%)           248097 (  0.00%)    151.46
   squid              7 (  0.00%)              546 (  0.00%)     78.00
   smtp             181 (  0.00%)            44618 (  0.00%)    246.51
   ftp               34 (  0.00%)             3513 (  0.00%)    103.32
   ssh               15 (  0.00%)             1890 (  0.00%)    126.00
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              159 (  0.00%)            18529 (  0.00%)    116.53
   other           6235 (  0.06%)           652153 (  0.01%)    104.60
  udp6            18368 (  0.17%)          2844140 (  0.04%)    154.84
   dns            17709 (  0.17%)          2783994 (  0.04%)    157.21
   other            659 (  0.01%)            60146 (  0.00%)     91.27
  icmp6           14360 (  0.13%)          1986688 (  0.03%)    138.35
  ip4                 2 (  0.00%)              326 (  0.00%)    163.00
  ip6              1573 (  0.01%)           293754 (  0.00%)    186.75
  pim6               63 (  0.00%)             7384 (  0.00%)    117.21
  other6              2 (  0.00%)             2043 (  0.00%)   1021.50


tcpdump file: 200608261400.dump.gz (276.33 MB)