Traffic Trace Info


DumpFile: 200611241400.dump
FileSize: 1278.74MB
Id: 200611241400
StartTime: Fri Nov 24 14:00:00 2006
EndTime: Fri Nov 24 14:15:00 2006
TotalTime: 899.67 seconds
TotalCapSize: 1002.69MB CapLen: 96 bytes
# of packets: 18087200 (12529.87MB)
AvgRate: 116.84Mbps stddev:15.80M

IP flow (unique src/dst pair) Information

# of flows: 395261 (avg. 45.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 1.9% 1.7% 1.7% 1.4% 1.3% 1.2% 1.1% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 201747
Top 10 bandwidth usage (bytes/total in %):
8.6% 6.3% 6.3% 5.9% 5.6% 5.3% 3.4% 3.1% 3.0% 2.7%
# of IPv6 addresses: 1774
Top 10 bandwidth usage (bytes/total in %):
53.0% 53.0% 16.3% 3.6% 3.2% 2.5% 2.0% 1.9% 1.7% 1.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3628706
 [   64-  127]:    4830294
 [  128-  255]:     544675
 [  256-  511]:     511510
 [  512- 1023]:     564631
 [ 1024- 2047]:    8007384


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         18087200 (100.00%)      13138520129 (100.00%)    726.40
 ip            17970071 ( 99.35%)      13109013334 ( 99.78%)    729.49
  tcp          15796982 ( 87.34%)      12643975232 ( 96.24%)    800.40
   http(s)      5795617 ( 32.04%)       7288034772 ( 55.47%)   1257.51
   http(c)      3875747 ( 21.43%)        773749124 (  5.89%)    199.64
   squid          69315 (  0.38%)         21855617 (  0.17%)    315.31
   smtp          293477 (  1.62%)         88830448 (  0.68%)    302.68
   nntp            7900 (  0.04%)          4489966 (  0.03%)    568.35
   ftp            54758 (  0.30%)          4518708 (  0.03%)     82.52
   pop3            8317 (  0.05%)          1667485 (  0.01%)    200.49
   imap            6398 (  0.04%)          3088589 (  0.02%)    482.74
   telnet          1320 (  0.01%)           124337 (  0.00%)     94.19
   ssh            39418 (  0.22%)          6447253 (  0.05%)    163.56
   dns             2138 (  0.01%)          1676203 (  0.01%)    784.01
   bgp              931 (  0.01%)           110624 (  0.00%)    118.82
   napster          209 (  0.00%)            13367 (  0.00%)     63.96
   realaud         4049 (  0.02%)          2646301 (  0.02%)    653.57
   rtsp           37458 (  0.21%)         26978889 (  0.21%)    720.24
   icecast        38015 (  0.21%)         31363695 (  0.24%)    825.03
   other        5561909 ( 30.75%)       4388379472 ( 33.40%)    789.01
  udp           1703028 (  9.42%)        395251014 (  3.01%)    232.09
   dns          1302142 (  7.20%)        167116578 (  1.27%)    128.34
   realaud         9182 (  0.05%)          4705464 (  0.04%)    512.47
   halflif           17 (  0.00%)             1674 (  0.00%)     98.47
   starcra            7 (  0.00%)              641 (  0.00%)     91.57
   everque           19 (  0.00%)             2302 (  0.00%)    121.16
   unreal            20 (  0.00%)             3671 (  0.00%)    183.55
   quake             19 (  0.00%)             1640 (  0.00%)     86.32
   cuseeme            2 (  0.00%)              176 (  0.00%)     88.00
   other         391606 (  2.17%)        223409686 (  1.70%)    570.50
  icmp           190068 (  1.05%)         15901182 (  0.12%)     83.66
  ip6              6837 (  0.04%)          8024152 (  0.06%)   1173.64
  other          273156 (  1.51%)         45861754 (  0.35%)    167.90
  frag             1437 (  0.01%)          1682790 (  0.01%)   1171.04
 ip6             117126 (  0.65%)         29506615 (  0.22%)    251.92
  tcp6            51915 (  0.29%)          6557930 (  0.05%)    126.32
   http(s)          647 (  0.00%)           612940 (  0.00%)    947.36
   http(c)        44120 (  0.24%)          5100800 (  0.04%)    115.61
   squid             46 (  0.00%)             3870 (  0.00%)     84.13
   smtp             378 (  0.00%)           114256 (  0.00%)    302.26
   ftp               32 (  0.00%)             2994 (  0.00%)     93.56
   ssh              980 (  0.01%)           149688 (  0.00%)    152.74
   dns                9 (  0.00%)             1167 (  0.00%)    129.67
   bgp              216 (  0.00%)            22283 (  0.00%)    103.16
   other           5487 (  0.03%)           549932 (  0.00%)    100.22
  udp6            42622 (  0.24%)          6139008 (  0.05%)    144.03
   dns            38422 (  0.21%)          5819052 (  0.04%)    151.45
   other           4200 (  0.02%)           319956 (  0.00%)     76.18
  icmp6           11281 (  0.06%)          1302053 (  0.01%)    115.42
  ip6               463 (  0.00%)            76762 (  0.00%)    165.79
  pim6               45 (  0.00%)             5580 (  0.00%)    124.00
  other6          10800 (  0.06%)         15425282 (  0.12%)   1428.27


tcpdump file: 200611241400.dump.gz (463.74 MB)