Traffic Trace Info


DumpFile: 200611101400.dump
FileSize: 1241.68MB
Id: 200611101400
StartTime: Fri Nov 10 14:00:01 2006
EndTime: Fri Nov 10 14:15:01 2006
TotalTime: 900.02 seconds
TotalCapSize: 975.53MB CapLen: 96 bytes
# of packets: 17440206 (11631.45MB)
AvgRate: 108.39Mbps stddev:17.59M

IP flow (unique src/dst pair) Information

# of flows: 446762 (avg. 39.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.8% 2.8% 1.7% 1.5% 1.3% 1.2% 1.0% 0.9% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 235189
Top 10 bandwidth usage (bytes/total in %):
13.3% 10.6% 8.0% 7.7% 5.7% 5.3% 3.0% 2.0% 1.8% 1.6%
# of IPv6 addresses: 1645
Top 10 bandwidth usage (bytes/total in %):
36.3% 36.3% 22.8% 15.3% 10.0% 3.9% 3.7% 3.6% 2.4% 2.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3965070
 [   64-  127]:    4420045
 [  128-  255]:     522987
 [  256-  511]:     596228
 [  512- 1023]:     553437
 [ 1024- 2047]:    7382439


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         17440206 (100.00%)      12196456008 (100.00%)    699.33
 ip            17247134 ( 98.89%)      12159874531 ( 99.70%)    705.04
  tcp          15313182 ( 87.80%)      11835757785 ( 97.04%)    772.91
   http(s)      6323614 ( 36.26%)       7941664127 ( 65.11%)   1255.87
   http(c)      4600414 ( 26.38%)        590597796 (  4.84%)    128.38
   squid         130186 (  0.75%)         52873187 (  0.43%)    406.14
   smtp          306183 (  1.76%)        105293609 (  0.86%)    343.89
   nntp            7086 (  0.04%)          3178803 (  0.03%)    448.60
   ftp            63853 (  0.37%)          6129035 (  0.05%)     95.99
   pop3           21063 (  0.12%)          3612580 (  0.03%)    171.51
   imap            4332 (  0.02%)           986990 (  0.01%)    227.84
   telnet         49105 (  0.28%)         22132751 (  0.18%)    450.72
   ssh             9726 (  0.06%)          3625261 (  0.03%)    372.74
   dns             2025 (  0.01%)          1663051 (  0.01%)    821.26
   bgp              928 (  0.01%)           123068 (  0.00%)    132.62
   napster           59 (  0.00%)             7069 (  0.00%)    119.81
   realaud          186 (  0.00%)           109834 (  0.00%)    590.51
   rtsp           51465 (  0.30%)         23370512 (  0.19%)    454.10
   icecast        35459 (  0.20%)         30890390 (  0.25%)    871.16
   other        3707485 ( 21.26%)       3049498832 ( 25.00%)    822.52
  udp           1613365 (  9.25%)        270848994 (  2.22%)    167.88
   dns          1303364 (  7.47%)        168202889 (  1.38%)    129.05
   realaud         5013 (  0.03%)          2623151 (  0.02%)    523.27
   halflif           19 (  0.00%)             2224 (  0.00%)    117.05
   starcra            7 (  0.00%)              953 (  0.00%)    136.14
   everque           16 (  0.00%)             1745 (  0.00%)    109.06
   unreal            18 (  0.00%)             2485 (  0.00%)    138.06
   quake              9 (  0.00%)              741 (  0.00%)     82.33
   cuseeme            8 (  0.00%)             1170 (  0.00%)    146.25
   other         304135 (  1.74%)         98847536 (  0.81%)    325.01
  icmp           141076 (  0.81%)         13416711 (  0.11%)     95.10
  ip6              4770 (  0.03%)          5622801 (  0.05%)   1178.78
  other          174741 (  1.00%)         34228240 (  0.28%)    195.88
  frag             7496 (  0.04%)         10340335 (  0.08%)   1379.45
 ip6             193072 (  1.11%)         36581477 (  0.30%)    189.47
  tcp6            85203 (  0.49%)         11534807 (  0.09%)    135.38
   http(s)         1817 (  0.01%)          2404781 (  0.02%)   1323.49
   http(c)        78805 (  0.45%)          8538062 (  0.07%)    108.34
   squid             44 (  0.00%)             4545 (  0.00%)    103.30
   smtp             348 (  0.00%)           121113 (  0.00%)    348.03
   nntp             317 (  0.00%)            39902 (  0.00%)    125.87
   ssh                4 (  0.00%)              320 (  0.00%)     80.00
   dns               35 (  0.00%)             3599 (  0.00%)    102.83
   bgp              255 (  0.00%)            33913 (  0.00%)    132.99
   other           3578 (  0.02%)           388572 (  0.00%)    108.60
  udp6            84078 (  0.48%)         10082138 (  0.08%)    119.91
   dns            81991 (  0.47%)          9916486 (  0.08%)    120.95
   other           2087 (  0.01%)           165652 (  0.00%)     79.37
  icmp6           14002 (  0.08%)          1684011 (  0.01%)    120.27
  ip6               428 (  0.00%)            83400 (  0.00%)    194.86
  pim6               44 (  0.00%)             5480 (  0.00%)    124.55
  other6           9317 (  0.05%)         13191641 (  0.11%)   1415.87


tcpdump file: 200611101400.dump.gz (451.07 MB)