Traffic Trace Info


DumpFile: 200610051400.dump
FileSize: 1475.03MB
Id: 200610051400
StartTime: Thu Oct 5 14:00:00 2006
EndTime: Thu Oct 5 14:15:00 2006
TotalTime: 899.88 seconds
TotalCapSize: 1161.40MB CapLen: 96 bytes
# of packets: 20551972 (14279.75MB)
AvgRate: 133.13Mbps stddev:16.00M

IP flow (unique src/dst pair) Information

# of flows: 492269 (avg. 41.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.4% 5.9% 4.0% 3.4% 2.8% 1.1% 1.1% 0.9% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 296628
Top 10 bandwidth usage (bytes/total in %):
26.7% 13.9% 10.7% 6.1% 4.0% 3.9% 3.4% 3.4% 3.4% 2.9%
# of IPv6 addresses: 1348
Top 10 bandwidth usage (bytes/total in %):
31.7% 20.4% 20.1% 17.2% 4.8% 4.8% 4.4% 4.4% 4.3% 3.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4413814
 [   64-  127]:    5322295
 [  128-  255]:     594421
 [  256-  511]:     512246
 [  512- 1023]:     464357
 [ 1024- 2047]:    9244839


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         20551972 (100.00%)      14973402822 (100.00%)    728.56
 ip            20438596 ( 99.45%)      14955017938 ( 99.88%)    731.70
  tcp          18897243 ( 91.95%)      14723609177 ( 98.33%)    779.14
   http(s)      6919916 ( 33.67%)       9096884621 ( 60.75%)   1314.59
   http(c)      4961737 ( 24.14%)        618806653 (  4.13%)    124.72
   squid         294860 (  1.43%)        150124049 (  1.00%)    509.14
   smtp          334813 (  1.63%)        124834951 (  0.83%)    372.85
   nntp           10019 (  0.05%)          3571514 (  0.02%)    356.47
   ftp           295594 (  1.44%)         65285460 (  0.44%)    220.86
   pop3           13638 (  0.07%)          2167378 (  0.01%)    158.92
   imap            3749 (  0.02%)           893835 (  0.01%)    238.42
   telnet         43329 (  0.21%)         16531777 (  0.11%)    381.54
   ssh           359421 (  1.75%)         45647400 (  0.30%)    127.00
   dns             2296 (  0.01%)           171719 (  0.00%)     74.79
   bgp             1231 (  0.01%)           154669 (  0.00%)    125.65
   napster           33 (  0.00%)             3443 (  0.00%)    104.33
   realaud          218 (  0.00%)            74552 (  0.00%)    341.98
   rtsp          163235 (  0.79%)        121345143 (  0.81%)    743.38
   icecast        13719 (  0.07%)          1187299 (  0.01%)     86.54
   hotline           12 (  0.00%)             1320 (  0.00%)    110.00
   other        5479409 ( 26.66%)       4475922554 ( 29.89%)    816.86
  udp           1255690 (  6.11%)        188795197 (  1.26%)    150.35
   dns          1086965 (  5.29%)        139964463 (  0.93%)    128.77
   realaud         8904 (  0.04%)          3469490 (  0.02%)    389.66
   halflif           11 (  0.00%)             1116 (  0.00%)    101.45
   starcra           12 (  0.00%)             1588 (  0.00%)    132.33
   everque           22 (  0.00%)             3236 (  0.00%)    147.09
   unreal            12 (  0.00%)             1278 (  0.00%)    106.50
   quake             10 (  0.00%)             1228 (  0.00%)    122.80
   cuseeme            4 (  0.00%)              336 (  0.00%)     84.00
   other         159749 (  0.78%)         45351853 (  0.30%)    283.89
  icmp           159976 (  0.78%)         24116956 (  0.16%)    150.75
  ip6               380 (  0.00%)            59529 (  0.00%)    156.66
  sctp              108 (  0.00%)            14472 (  0.00%)    134.00
  other          125199 (  0.61%)         18422607 (  0.12%)    147.15
  frag              442 (  0.00%)           389300 (  0.00%)    880.77
 ip6             113373 (  0.55%)         18384704 (  0.12%)    162.16
  tcp6            51642 (  0.25%)          8678879 (  0.06%)    168.06
   http(s)         1751 (  0.01%)          2280958 (  0.02%)   1302.66
   http(c)        44331 (  0.22%)          5772124 (  0.04%)    130.21
   squid              3 (  0.00%)              234 (  0.00%)     78.00
   smtp             135 (  0.00%)            53973 (  0.00%)    399.80
   ftp               25 (  0.00%)             2794 (  0.00%)    111.76
   ssh               15 (  0.00%)             1890 (  0.00%)    126.00
   dns                9 (  0.00%)              935 (  0.00%)    103.89
   bgp              196 (  0.00%)            26641 (  0.00%)    135.92
   other           5177 (  0.03%)           539330 (  0.00%)    104.18
  udp6            29789 (  0.14%)          4300253 (  0.03%)    144.36
   dns            29639 (  0.14%)          4278025 (  0.03%)    144.34
   other            150 (  0.00%)            22228 (  0.00%)    148.19
  icmp6           11368 (  0.06%)          1589809 (  0.01%)    139.85
  ip6             20424 (  0.10%)          3758571 (  0.03%)    184.03
  pim6               99 (  0.00%)            11204 (  0.00%)    113.17
  other6             51 (  0.00%)            45988 (  0.00%)    901.73


tcpdump file: 200610051400.dump.gz (532.46 MB)