Traffic Trace Info


DumpFile: 200608311400.dump
FileSize: 1481.35MB
Id: 200608311400
StartTime: Thu Aug 31 14:00:00 2006
EndTime: Thu Aug 31 14:15:01 2006
TotalTime: 900.64 seconds
TotalCapSize: 1159.94MB CapLen: 96 bytes
# of packets: 21058986 (14481.04MB)
AvgRate: 134.87Mbps stddev:26.80M

IP flow (unique src/dst pair) Information

# of flows: 404436 (avg. 52.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.4% 4.9% 3.8% 2.9% 2.2% 1.8% 1.8% 1.6% 1.3% 1.1%

IP address Information

# of IPv4 addresses: 237852
Top 10 bandwidth usage (bytes/total in %):
16.7% 12.8% 12.7% 5.4% 4.9% 4.9% 4.6% 3.9% 3.9% 3.9%
# of IPv6 addresses: 1458
Top 10 bandwidth usage (bytes/total in %):
31.5% 31.5% 13.6% 7.3% 6.4% 5.8% 5.8% 4.5% 3.1% 2.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5216167
 [   64-  127]:    4999247
 [  128-  255]:     625778
 [  256-  511]:     359506
 [  512- 1023]:     506492
 [ 1024- 2047]:    9351796


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         21058986 (100.00%)      15184466055 (100.00%)    721.04
 ip            20995720 ( 99.70%)      15171042791 ( 99.91%)    722.58
  tcp          18923784 ( 89.86%)      14817363500 ( 97.58%)    783.00
   http(s)      7657226 ( 36.36%)      10691889721 ( 70.41%)   1396.31
   http(c)      5778735 ( 27.44%)        591093918 (  3.89%)    102.29
   squid         137808 (  0.65%)        134695502 (  0.89%)    977.41
   smtp          283521 (  1.35%)         71609882 (  0.47%)    252.57
   nntp           17170 (  0.08%)          7219215 (  0.05%)    420.46
   ftp           204432 (  0.97%)        179010509 (  1.18%)    875.65
   pop3           14970 (  0.07%)          4639339 (  0.03%)    309.91
   imap            4267 (  0.02%)           852340 (  0.01%)    199.75
   telnet          1518 (  0.01%)           140194 (  0.00%)     92.35
   ssh           979756 (  4.65%)        142654370 (  0.94%)    145.60
   dns             1250 (  0.01%)            92099 (  0.00%)     73.68
   bgp             1297 (  0.01%)           168919 (  0.00%)    130.24
   napster          116 (  0.00%)            12358 (  0.00%)    106.53
   realaud           17 (  0.00%)             2361 (  0.00%)    138.88
   rtsp          279650 (  1.33%)         38796743 (  0.26%)    138.73
   icecast        10699 (  0.05%)         13639918 (  0.09%)   1274.88
   hotline         8165 (  0.04%)           490787 (  0.00%)     60.11
   other        3543180 ( 16.83%)       2940354905 ( 19.36%)    829.86
  udp           1435934 (  6.82%)        243881421 (  1.61%)    169.84
   dns          1101620 (  5.23%)        146708532 (  0.97%)    133.18
   realaud        10432 (  0.05%)          5931553 (  0.04%)    568.59
   halflif            8 (  0.00%)             1451 (  0.00%)    181.38
   starcra            7 (  0.00%)             1609 (  0.00%)    229.86
   everque           25 (  0.00%)             4139 (  0.00%)    165.56
   unreal            15 (  0.00%)             3912 (  0.00%)    260.80
   quake             47 (  0.00%)             4026 (  0.00%)     85.66
   cuseeme            7 (  0.00%)             1342 (  0.00%)    191.71
   other         323748 (  1.54%)         91219902 (  0.60%)    281.76
  icmp           397002 (  1.89%)         38475309 (  0.25%)     96.91
  ip6              5602 (  0.03%)          2374294 (  0.02%)    423.83
  other          233398 (  1.11%)         68948267 (  0.45%)    295.41
  frag              439 (  0.00%)           343560 (  0.00%)    782.60
 ip6              63263 (  0.30%)         13423084 (  0.09%)    212.18
  tcp6            27225 (  0.13%)          7812528 (  0.05%)    286.96
   http(s)          138 (  0.00%)            83267 (  0.00%)    603.38
   http(c)        15619 (  0.07%)          1848459 (  0.01%)    118.35
   squid              6 (  0.00%)              468 (  0.00%)     78.00
   smtp             239 (  0.00%)            99181 (  0.00%)    414.98
   ftp               84 (  0.00%)             8528 (  0.00%)    101.52
   ssh             1343 (  0.01%)           779170 (  0.01%)    580.17
   bgp              194 (  0.00%)            25761 (  0.00%)    132.79
   other           9602 (  0.05%)          4967694 (  0.03%)    517.36
  udp6            21645 (  0.10%)          3466177 (  0.02%)    160.14
   dns            21092 (  0.10%)          3413299 (  0.02%)    161.83
   other            553 (  0.00%)            52878 (  0.00%)     95.62
  icmp6           12621 (  0.06%)          1815806 (  0.01%)    143.87
  ip6              1667 (  0.01%)           313384 (  0.00%)    187.99
  pim6              101 (  0.00%)            11112 (  0.00%)    110.02
  other6              4 (  0.00%)             4077 (  0.00%)   1019.25


tcpdump file: 200608311400.dump.gz (514.52 MB)