Traffic Trace Info


DumpFile: 200610041400.dump
FileSize: 1047.15MB
Id: 200610041400
StartTime: Wed Oct 4 14:00:01 2006
EndTime: Wed Oct 4 14:15:00 2006
TotalTime: 899.56 seconds
TotalCapSize: 822.76MB CapLen: 96 bytes
# of packets: 14705582 (9425.65MB)
AvgRate: 87.90Mbps stddev:11.53M

IP flow (unique src/dst pair) Information

# of flows: 464034 (avg. 31.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 1.9% 1.7% 1.5% 1.2% 1.0% 0.9% 0.9% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 284228
Top 10 bandwidth usage (bytes/total in %):
15.2% 8.3% 6.7% 3.0% 2.8% 2.6% 2.2% 2.0% 1.9% 1.9%
# of IPv6 addresses: 1414
Top 10 bandwidth usage (bytes/total in %):
29.7% 29.3% 13.6% 8.8% 5.8% 5.5% 4.0% 3.7% 3.4% 3.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3461691
 [   64-  127]:    3918706
 [  128-  255]:     418597
 [  256-  511]:     449805
 [  512- 1023]:     534731
 [ 1024- 2047]:    5922052


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         14705582 (100.00%)       9883508621 (100.00%)    672.09
 ip            14615237 ( 99.39%)       9869687352 ( 99.86%)    675.30
  tcp          12941477 ( 88.00%)       9555958120 ( 96.69%)    738.40
   http(s)      4899702 ( 33.32%)       6384303745 ( 64.60%)   1303.00
   http(c)      3729902 ( 25.36%)        460922329 (  4.66%)    123.57
   squid         515712 (  3.51%)        261146241 (  2.64%)    506.38
   smtp          277739 (  1.89%)         78990273 (  0.80%)    284.40
   nntp           21512 (  0.15%)         10836185 (  0.11%)    503.73
   ftp           360630 (  2.45%)         64628700 (  0.65%)    179.21
   pop3           10669 (  0.07%)          2409641 (  0.02%)    225.85
   imap            3212 (  0.02%)           509044 (  0.01%)    158.48
   telnet           268 (  0.00%)            30201 (  0.00%)    112.69
   ssh            68951 (  0.47%)         39193474 (  0.40%)    568.43
   dns             2289 (  0.02%)           173760 (  0.00%)     75.91
   bgp             1082 (  0.01%)           126843 (  0.00%)    117.23
   napster          103 (  0.00%)            10440 (  0.00%)    101.36
   realaud          522 (  0.00%)            90985 (  0.00%)    174.30
   rtsp          118996 (  0.81%)         61721964 (  0.62%)    518.69
   icecast        69997 (  0.48%)         49933753 (  0.51%)    713.37
   hotline            5 (  0.00%)              733 (  0.00%)    146.60
   other        2860179 ( 19.45%)       2140929389 ( 21.66%)    748.53
  udp           1410172 (  9.59%)        259202710 (  2.62%)    183.81
   dns          1020615 (  6.94%)        129542250 (  1.31%)    126.93
   realaud        23773 (  0.16%)         10878539 (  0.11%)    457.60
   halflif            9 (  0.00%)              792 (  0.00%)     88.00
   starcra            4 (  0.00%)              341 (  0.00%)     85.25
   everque           27 (  0.00%)             3836 (  0.00%)    142.07
   unreal            24 (  0.00%)             3714 (  0.00%)    154.75
   quake              4 (  0.00%)              339 (  0.00%)     84.75
   cuseeme            5 (  0.00%)              431 (  0.00%)     86.20
   other         365708 (  2.49%)        118771172 (  1.20%)    324.77
  icmp           201056 (  1.37%)         23309571 (  0.24%)    115.94
  ipsec           60112 (  0.41%)         30911052 (  0.31%)    514.22
  ip6               100 (  0.00%)            39415 (  0.00%)    394.15
  other            2320 (  0.02%)           266484 (  0.00%)    114.86
  frag              399 (  0.00%)           323312 (  0.00%)    810.31
 ip6              90342 (  0.61%)         13821089 (  0.14%)    152.99
  tcp6            24309 (  0.17%)          3093041 (  0.03%)    127.24
   http(s)          254 (  0.00%)           201239 (  0.00%)    792.28
   http(c)        18820 (  0.13%)          2077115 (  0.02%)    110.37
   smtp              89 (  0.00%)            14621 (  0.00%)    164.28
   ftp               40 (  0.00%)             4093 (  0.00%)    102.33
   ssh               42 (  0.00%)             4928 (  0.00%)    117.33
   dns                6 (  0.00%)              834 (  0.00%)    139.00
   bgp              151 (  0.00%)            17239 (  0.00%)    114.17
   other           4907 (  0.03%)           772972 (  0.01%)    157.52
  udp6            31162 (  0.21%)          4689711 (  0.05%)    150.49
   dns            31093 (  0.21%)          4682153 (  0.05%)    150.59
   other             69 (  0.00%)             7558 (  0.00%)    109.54
  icmp6           12533 (  0.09%)          1903251 (  0.02%)    151.86
  ip6             22222 (  0.15%)          4119505 (  0.04%)    185.38
  pim6               99 (  0.00%)            11222 (  0.00%)    113.35
  other6             17 (  0.00%)             4359 (  0.00%)    256.41


tcpdump file: 200610041400.dump.gz (382.73 MB)