Traffic Trace Info


DumpFile: 200610231400.dump
FileSize: 1195.23MB
Id: 200610231400
StartTime: Mon Oct 23 14:00:01 2006
EndTime: Mon Oct 23 14:15:01 2006
TotalTime: 900.06 seconds
TotalCapSize: 940.26MB CapLen: 96 bytes
# of packets: 16704315 (10428.69MB)
AvgRate: 97.19Mbps stddev:8.13M

IP flow (unique src/dst pair) Information

# of flows: 501924 (avg. 33.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.8% 3.2% 1.5% 1.3% 1.2% 1.1% 1.0% 0.7% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 271941
Top 10 bandwidth usage (bytes/total in %):
21.2% 15.3% 7.2% 6.5% 3.3% 3.3% 2.7% 2.2% 2.0% 1.6%
# of IPv6 addresses: 1108
Top 10 bandwidth usage (bytes/total in %):
32.9% 31.2% 27.4% 15.4% 10.5% 4.6% 4.4% 3.6% 2.8% 2.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3786252
 [   64-  127]:    4818054
 [  128-  255]:     493131
 [  256-  511]:     485980
 [  512- 1023]:     474945
 [ 1024- 2047]:    6645953


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         16704315 (100.00%)      10935273933 (100.00%)    654.64
 ip            16631636 ( 99.56%)      10923259546 ( 99.89%)    656.78
  tcp          14745734 ( 88.27%)      10612936256 ( 97.05%)    719.73
   http(s)      4786047 ( 28.65%)       6017244639 ( 55.03%)   1257.25
   http(c)      4372523 ( 26.18%)        563391540 (  5.15%)    128.85
   squid         209564 (  1.25%)        153928465 (  1.41%)    734.52
   smtp          290747 (  1.74%)        128608329 (  1.18%)    442.34
   nntp            7437 (  0.04%)          3495948 (  0.03%)    470.08
   ftp            67373 (  0.40%)         13527846 (  0.12%)    200.79
   pop3            8493 (  0.05%)          2732389 (  0.02%)    321.72
   imap            5729 (  0.03%)          2643700 (  0.02%)    461.46
   telnet         66097 (  0.40%)         35496505 (  0.32%)    537.04
   ssh            14492 (  0.09%)          4140158 (  0.04%)    285.69
   dns             1997 (  0.01%)           154940 (  0.00%)     77.59
   bgp              973 (  0.01%)           111011 (  0.00%)    114.09
   napster          102 (  0.00%)             6867 (  0.00%)     67.32
   realaud           90 (  0.00%)             8070 (  0.00%)     89.67
   rtsp          156637 (  0.94%)        139157853 (  1.27%)    888.41
   icecast        21139 (  0.13%)          1436734 (  0.01%)     67.97
   other        4736272 ( 28.35%)       3546849854 ( 32.43%)    748.87
  udp           1458453 (  8.73%)        251540148 (  2.30%)    172.47
   dns          1145068 (  6.85%)        146011157 (  1.34%)    127.51
   realaud          941 (  0.01%)            78556 (  0.00%)     83.48
   halflif           12 (  0.00%)             1029 (  0.00%)     85.75
   starcra            4 (  0.00%)              754 (  0.00%)    188.50
   everque           21 (  0.00%)             2516 (  0.00%)    119.81
   unreal            16 (  0.00%)             2264 (  0.00%)    141.50
   quake             15 (  0.00%)             1158 (  0.00%)     77.20
   cuseeme           85 (  0.00%)             5217 (  0.00%)     61.38
   other         312281 (  1.87%)        105427082 (  0.96%)    337.60
  icmp           125185 (  0.75%)         10753245 (  0.10%)     85.90
  ipsec              97 (  0.00%)            44310 (  0.00%)    456.80
  ip6               701 (  0.00%)            78838 (  0.00%)    112.47
  other          301466 (  1.80%)         47906749 (  0.44%)    158.91
  frag              453 (  0.00%)           384608 (  0.00%)    849.02
 ip6              72676 (  0.44%)         12014207 (  0.11%)    165.31
  tcp6            38127 (  0.23%)          3786356 (  0.03%)     99.31
   http(s)           22 (  0.00%)            10914 (  0.00%)    496.09
   http(c)        34966 (  0.21%)          3369626 (  0.03%)     96.37
   smtp             231 (  0.00%)           113376 (  0.00%)    490.81
   ftp               54 (  0.00%)             5241 (  0.00%)     97.06
   imap               2 (  0.00%)              172 (  0.00%)     86.00
   ssh              277 (  0.00%)            34574 (  0.00%)    124.82
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              199 (  0.00%)            21369 (  0.00%)    107.38
   other           2369 (  0.01%)           230449 (  0.00%)     97.28
  udp6            26081 (  0.16%)          3621685 (  0.03%)    138.86
   dns            26061 (  0.16%)          3619485 (  0.03%)    138.89
   other             20 (  0.00%)             2200 (  0.00%)    110.00
  icmp6            5647 (  0.03%)           832965 (  0.01%)    147.51
  ip6                82 (  0.00%)            16015 (  0.00%)    195.30
  pim6               56 (  0.00%)             6576 (  0.00%)    117.43
  other6           2683 (  0.02%)          3750610 (  0.03%)   1397.92


tcpdump file: 200610231400.dump.gz (426.13 MB)