Traffic Trace Info


DumpFile: 200611181400.dump
FileSize: 4604.33MB
Id: 200611181400
StartTime: Sat Nov 18 14:00:01 2006
EndTime: Sat Nov 18 14:15:01 2006
TotalTime: 899.86 seconds
TotalCapSize: -533.49MB CapLen: 96 bytes
# of packets: 68273382 (11164.48MB)
AvgRate: 104.07Mbps stddev:11.84M

IP flow (unique src/dst pair) Information

# of flows: 410694 (avg. 166.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.6% 14.5% 2.5% 1.9% 1.4% 1.3% 0.9% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 236295
Top 10 bandwidth usage (bytes/total in %):
29.1% 14.6% 14.5% 7.8% 7.6% 6.0% 3.7% 2.6% 2.5% 2.4%
# of IPv6 addresses: 1659
Top 10 bandwidth usage (bytes/total in %):
48.9% 48.9% 23.8% 11.2% 5.0% 3.5% 3.1% 2.3% 1.6% 1.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   58895839
 [   64-  127]:    3384618
 [  128-  255]:     331336
 [  256-  511]:     310545
 [  512- 1023]:     251819
 [ 1024- 2047]:    5099225


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         68273382 (100.00%)      11706803261 (100.00%)    171.47
 ip            68127682 ( 99.79%)      11675029498 ( 99.73%)    171.37
  tcp           9599966 ( 14.06%)       7967000642 ( 68.05%)    829.90
   http(s)      4333193 (  6.35%)       5850180891 ( 49.97%)   1350.09
   http(c)      2517162 (  3.69%)        280984251 (  2.40%)    111.63
   squid         121635 (  0.18%)         34275181 (  0.29%)    281.79
   smtp          346005 (  0.51%)         90547814 (  0.77%)    261.70
   nntp           13556 (  0.02%)         11271870 (  0.10%)    831.50
   ftp            96834 (  0.14%)         59998859 (  0.51%)    619.61
   pop3            4299 (  0.01%)          2084167 (  0.02%)    484.80
   imap           18223 (  0.03%)          9920537 (  0.08%)    544.40
   telnet          2042 (  0.00%)           139713 (  0.00%)     68.42
   ssh            14157 (  0.02%)          3894205 (  0.03%)    275.07
   dns             3312 (  0.00%)          1737251 (  0.01%)    524.53
   bgp             1170 (  0.00%)           170201 (  0.00%)    145.47
   napster          141 (  0.00%)             9641 (  0.00%)     68.38
   realaud           51 (  0.00%)             6565 (  0.00%)    128.73
   rtsp           95770 (  0.14%)        102015301 (  0.87%)   1065.21
   icecast        19010 (  0.03%)         27644130 (  0.24%)   1454.19
   other        2013364 (  2.95%)       1492116819 ( 12.75%)    741.11
  udp          58142738 ( 85.16%)       3652304757 ( 31.20%)     62.82
   dns         57933696 ( 84.86%)       3549224759 ( 30.32%)     61.26
   realaud         8015 (  0.01%)          5189833 (  0.04%)    647.52
   halflif           11 (  0.00%)              936 (  0.00%)     85.09
   starcra            4 (  0.00%)              531 (  0.00%)    132.75
   everque           26 (  0.00%)             3024 (  0.00%)    116.31
   unreal            15 (  0.00%)             2678 (  0.00%)    178.53
   quake             17 (  0.00%)             1880 (  0.00%)    110.59
   cuseeme            5 (  0.00%)              434 (  0.00%)     86.80
   other         200946 (  0.29%)         97880440 (  0.84%)    487.10
  icmp           165382 (  0.24%)         14226670 (  0.12%)     86.02
  ipsec              25 (  0.00%)             3438 (  0.00%)    137.52
  ip6              6779 (  0.01%)          7930957 (  0.07%)   1169.93
  other          212792 (  0.31%)         33563034 (  0.29%)    157.73
  frag              477 (  0.00%)           381654 (  0.00%)    800.11
 ip6             145697 (  0.21%)         31773583 (  0.27%)    218.08
  tcp6            81993 (  0.12%)          8985619 (  0.08%)    109.59
   http(s)           92 (  0.00%)            51539 (  0.00%)    560.21
   http(c)        71554 (  0.10%)          7879646 (  0.07%)    110.12
   squid            751 (  0.00%)            58743 (  0.00%)     78.22
   smtp             177 (  0.00%)            69487 (  0.00%)    392.58
   nntp             464 (  0.00%)            57852 (  0.00%)    124.68
   ftp               56 (  0.00%)             5616 (  0.00%)    100.29
   ssh               15 (  0.00%)             1890 (  0.00%)    126.00
   bgp              307 (  0.00%)            37876 (  0.00%)    123.37
   other           8577 (  0.01%)           822970 (  0.01%)     95.95
  udp6            39929 (  0.06%)          5837891 (  0.05%)    146.21
   dns            37165 (  0.05%)          5626111 (  0.05%)    151.38
   other           2764 (  0.00%)           211780 (  0.00%)     76.62
  icmp6           12515 (  0.02%)          1525596 (  0.01%)    121.90
  ip6               478 (  0.00%)            79958 (  0.00%)    167.28
  pim6               45 (  0.00%)             5580 (  0.00%)    124.00
  other6          10737 (  0.02%)         15338939 (  0.13%)   1428.61


tcpdump file: 200611181400.dump.gz (796.12 MB)