Traffic Trace Info


DumpFile: 200610111400.dump
FileSize: 1343.19MB
Id: 200610111400
StartTime: Wed Oct 11 14:00:00 2006
EndTime: Wed Oct 11 14:15:00 2006
TotalTime: 900.00 seconds
TotalCapSize: 1051.21MB CapLen: 96 bytes
# of packets: 19132993 (13479.70MB)
AvgRate: 125.65Mbps stddev:17.96M

IP flow (unique src/dst pair) Information

# of flows: 381198 (avg. 50.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.3% 1.6% 1.5% 1.4% 1.3% 1.2% 1.2% 1.2% 1.1%

IP address Information

# of IPv4 addresses: 194270
Top 10 bandwidth usage (bytes/total in %):
8.5% 5.7% 5.7% 5.6% 3.6% 3.6% 2.7% 2.4% 2.3% 2.0%
# of IPv6 addresses: 1445
Top 10 bandwidth usage (bytes/total in %):
35.6% 8.6% 7.2% 7.1% 6.7% 6.3% 5.7% 5.7% 4.8% 4.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4734945
 [   64-  127]:    4139007
 [  128-  255]:     442838
 [  256-  511]:     467380
 [  512- 1023]:     633327
 [ 1024- 2047]:    8715496


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         19132993 (100.00%)      14134493403 (100.00%)    738.75
 ip            19024362 ( 99.43%)      14118555991 ( 99.89%)    742.13
  tcp          17229726 ( 90.05%)      13803447844 ( 97.66%)    801.14
   http(s)      6405039 ( 33.48%)       8239383467 ( 58.29%)   1286.39
   http(c)      4831891 ( 25.25%)        661692550 (  4.68%)    136.94
   squid         517357 (  2.70%)        474891025 (  3.36%)    917.92
   smtp          310055 (  1.62%)         91055546 (  0.64%)    293.68
   nntp           18581 (  0.10%)         13711876 (  0.10%)    737.95
   ftp            63367 (  0.33%)         33546326 (  0.24%)    529.40
   pop3            9525 (  0.05%)          2210942 (  0.02%)    232.12
   imap            9574 (  0.05%)          5675975 (  0.04%)    592.85
   telnet         25040 (  0.13%)         11688653 (  0.08%)    466.80
   ssh            29057 (  0.15%)          7799973 (  0.06%)    268.44
   dns             1176 (  0.01%)            89641 (  0.00%)     76.23
   bgp             1016 (  0.01%)           120167 (  0.00%)    118.27
   napster         2261 (  0.01%)          1632088 (  0.01%)    721.84
   realaud          180 (  0.00%)            74274 (  0.00%)    412.63
   rtsp          168895 (  0.88%)        162719916 (  1.15%)    963.44
   icecast        31648 (  0.17%)         33480206 (  0.24%)   1057.89
   other        4805045 ( 25.11%)       4063674079 ( 28.75%)    845.71
  udp           1439015 (  7.52%)        250674155 (  1.77%)    174.20
   dns          1171213 (  6.12%)        146157464 (  1.03%)    124.79
   realaud         8925 (  0.05%)          5573887 (  0.04%)    624.53
   halflif            7 (  0.00%)              686 (  0.00%)     98.00
   starcra            8 (  0.00%)              964 (  0.00%)    120.50
   everque           19 (  0.00%)             2656 (  0.00%)    139.79
   unreal            17 (  0.00%)             2502 (  0.00%)    147.18
   quake             11 (  0.00%)              955 (  0.00%)     86.82
   cuseeme            5 (  0.00%)              904 (  0.00%)    180.80
   other         258807 (  1.35%)         98932816 (  0.70%)    382.26
  icmp           116090 (  0.61%)         10772158 (  0.08%)     92.79
  ipsec           37111 (  0.19%)          9475324 (  0.07%)    255.32
  ip6               372 (  0.00%)            49810 (  0.00%)    133.90
  sctp                8 (  0.00%)             1072 (  0.00%)    134.00
  other          202040 (  1.06%)         44135628 (  0.31%)    218.45
  frag              466 (  0.00%)           371008 (  0.00%)    796.15
 ip6             108631 (  0.57%)         15937412 (  0.11%)    146.71
  tcp6            56985 (  0.30%)          7798038 (  0.06%)    136.84
   http(s)          941 (  0.00%)          1058829 (  0.01%)   1125.22
   http(c)        50027 (  0.26%)          6020917 (  0.04%)    120.35
   squid              6 (  0.00%)              925 (  0.00%)    154.17
   smtp             133 (  0.00%)            58928 (  0.00%)    443.07
   ssh                1 (  0.00%)               86 (  0.00%)     86.00
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              120 (  0.00%)            12420 (  0.00%)    103.50
   other           5750 (  0.03%)           645298 (  0.00%)    112.23
  udp6            35298 (  0.18%)          5661696 (  0.04%)    160.40
   dns            34898 (  0.18%)          5587675 (  0.04%)    160.11
   other            400 (  0.00%)            74021 (  0.00%)    185.05
  icmp6           15816 (  0.08%)          2396068 (  0.02%)    151.50
  ip6               431 (  0.00%)            70067 (  0.00%)    162.57
  pim6               89 (  0.00%)            10134 (  0.00%)    113.87
  other6             12 (  0.00%)             1409 (  0.00%)    117.42


tcpdump file: 200610111400.dump.gz (476.97 MB)