Traffic Trace Info


DumpFile: 200610101400.dump
FileSize: 1367.26MB
Id: 200610101400
StartTime: Tue Oct 10 14:00:00 2006
EndTime: Tue Oct 10 14:15:01 2006
TotalTime: 900.43 seconds
TotalCapSize: 1073.33MB CapLen: 96 bytes
# of packets: 19260879 (13358.84MB)
AvgRate: 124.45Mbps stddev:11.63M

IP flow (unique src/dst pair) Information

# of flows: 426977 (avg. 45.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 2.9% 1.6% 1.4% 1.1% 1.1% 1.0% 1.0% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 233298
Top 10 bandwidth usage (bytes/total in %):
20.4% 7.7% 4.0% 3.1% 3.0% 3.0% 2.8% 2.5% 2.2% 1.8%
# of IPv6 addresses: 1450
Top 10 bandwidth usage (bytes/total in %):
26.9% 25.7% 25.5% 7.6% 6.4% 6.4% 6.1% 4.7% 3.2% 2.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4174310
 [   64-  127]:    5008502
 [  128-  255]:     408374
 [  256-  511]:     476514
 [  512- 1023]:     557216
 [ 1024- 2047]:    8635963


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         19260879 (100.00%)      14007761692 (100.00%)    727.26
 ip            19154575 ( 99.45%)      13986621606 ( 99.85%)    730.20
  tcp          17278247 ( 89.71%)      13651891983 ( 97.46%)    790.12
   http(s)      6471360 ( 33.60%)       8315208663 ( 59.36%)   1284.92
   http(c)      4538038 ( 23.56%)        666351204 (  4.76%)    146.84
   squid         400368 (  2.08%)        326049680 (  2.33%)    814.37
   smtp          262306 (  1.36%)         91781290 (  0.66%)    349.90
   nntp            9986 (  0.05%)          3168837 (  0.02%)    317.33
   ftp            38538 (  0.20%)         30126100 (  0.22%)    781.72
   pop3           11574 (  0.06%)          3067390 (  0.02%)    265.02
   imap            7174 (  0.04%)          3221674 (  0.02%)    449.08
   telnet          5958 (  0.03%)          1050389 (  0.01%)    176.30
   ssh            20721 (  0.11%)          6143881 (  0.04%)    296.51
   dns             2729 (  0.01%)           211683 (  0.00%)     77.57
   bgp              992 (  0.01%)           115451 (  0.00%)    116.38
   napster         5269 (  0.03%)           340112 (  0.00%)     64.55
   realaud          190 (  0.00%)            74173 (  0.00%)    390.38
   rtsp          241655 (  1.25%)        208346003 (  1.49%)    862.16
   icecast         7516 (  0.04%)           903552 (  0.01%)    120.22
   other        5253861 ( 27.28%)       3995731181 ( 28.53%)    760.53
  udp           1322797 (  6.87%)        259092331 (  1.85%)    195.87
   dns          1030712 (  5.35%)        134294726 (  0.96%)    130.29
   rip               27 (  0.00%)             1782 (  0.00%)     66.00
   realaud         2595 (  0.01%)           895875 (  0.01%)    345.23
   halflif           10 (  0.00%)             1484 (  0.00%)    148.40
   starcra           13 (  0.00%)             1620 (  0.00%)    124.62
   everque           34 (  0.00%)             4495 (  0.00%)    132.21
   unreal            27 (  0.00%)             3254 (  0.00%)    120.52
   quake             18 (  0.00%)             1406 (  0.00%)     78.11
   cuseeme            6 (  0.00%)              518 (  0.00%)     86.33
   other         289354 (  1.50%)        123885657 (  0.88%)    428.15
  icmp           186830 (  0.97%)         15536217 (  0.11%)     83.16
  ip6               430 (  0.00%)            48168 (  0.00%)    112.02
  other          366271 (  1.90%)         60052907 (  0.43%)    163.96
  frag             1035 (  0.01%)           877094 (  0.01%)    847.43
 ip6             106304 (  0.55%)         21140086 (  0.15%)    198.86
  tcp6            52197 (  0.27%)          8553064 (  0.06%)    163.86
   http(s)         2116 (  0.01%)          2403751 (  0.02%)   1135.99
   http(c)        44221 (  0.23%)          5438837 (  0.04%)    122.99
   squid            205 (  0.00%)            15990 (  0.00%)     78.00
   smtp             254 (  0.00%)            73814 (  0.00%)    290.61
   ftp               14 (  0.00%)             1642 (  0.00%)    117.29
   ssh                7 (  0.00%)              674 (  0.00%)     96.29
   bgp              138 (  0.00%)            15730 (  0.00%)    113.99
   other           5242 (  0.03%)           602626 (  0.00%)    114.96
  udp6            32571 (  0.17%)          4500619 (  0.03%)    138.18
   dns            32432 (  0.17%)          4482650 (  0.03%)    138.22
   other            139 (  0.00%)            17969 (  0.00%)    129.27
  icmp6           17065 (  0.09%)          2580012 (  0.02%)    151.19
  ip6               519 (  0.00%)            97345 (  0.00%)    187.56
  pim6               79 (  0.00%)             9212 (  0.00%)    116.61
  other6           3873 (  0.02%)          5399834 (  0.04%)   1394.23


tcpdump file: 200610101400.dump.gz (486.45 MB)