Traffic Trace Info


DumpFile: 200611281400.dump
FileSize: 1605.60MB
Id: 200611281400
StartTime: Tue Nov 28 14:00:01 2006
EndTime: Tue Nov 28 14:15:01 2006
TotalTime: 900.01 seconds
TotalCapSize: 1257.70MB CapLen: 96 bytes
# of packets: 22795731 (15881.94MB)
AvgRate: 148.04Mbps stddev:13.80M

IP flow (unique src/dst pair) Information

# of flows: 510986 (avg. 44.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.5% 1.6% 1.2% 1.1% 1.0% 0.9% 0.7% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 263542
Top 10 bandwidth usage (bytes/total in %):
8.7% 5.2% 5.1% 4.6% 3.7% 2.8% 2.8% 2.7% 2.6% 2.4%
# of IPv6 addresses: 1771
Top 10 bandwidth usage (bytes/total in %):
55.6% 55.6% 13.7% 3.9% 3.7% 3.4% 3.2% 3.2% 2.2% 2.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4872573
 [   64-  127]:    5692162
 [  128-  255]:     634493
 [  256-  511]:     672865
 [  512- 1023]:     803592
 [ 1024- 2047]:   10120046


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         22795731 (100.00%)      16653416276 (100.00%)    730.55
 ip            22691800 ( 99.54%)      16625340422 ( 99.83%)    732.66
  tcp          20223049 ( 88.71%)      16050548614 ( 96.38%)    793.68
   http(s)      7614714 ( 33.40%)       9866291173 ( 59.24%)   1295.69
   http(c)      5321793 ( 23.35%)        725598050 (  4.36%)    136.34
   squid         146566 (  0.64%)         83807031 (  0.50%)    571.80
   smtp          317076 (  1.39%)         78514610 (  0.47%)    247.62
   nntp           10070 (  0.04%)          6627773 (  0.04%)    658.17
   ftp           217111 (  0.95%)        277111563 (  1.66%)   1276.36
   pop3           30891 (  0.14%)         31170282 (  0.19%)   1009.04
   imap            5691 (  0.02%)          2150761 (  0.01%)    377.92
   telnet          1161 (  0.01%)           103601 (  0.00%)     89.23
   ssh            42684 (  0.19%)          5811222 (  0.03%)    136.15
   dns             2470 (  0.01%)          1752521 (  0.01%)    709.52
   bgp             1032 (  0.00%)           119644 (  0.00%)    115.93
   napster         1719 (  0.01%)          1066233 (  0.01%)    620.26
   realaud         2628 (  0.01%)           818101 (  0.00%)    311.30
   rtsp          192146 (  0.84%)        182766950 (  1.10%)    951.19
   icecast       160674 (  0.70%)        155397612 (  0.93%)    967.16
   hotline            2 (  0.00%)              124 (  0.00%)     62.00
   other        6154591 ( 27.00%)       4631439475 ( 27.81%)    752.52
  udp           2035651 (  8.93%)        508563279 (  3.05%)    249.83
   dns          1390016 (  6.10%)        179964235 (  1.08%)    129.47
   realaud        13733 (  0.06%)          5700434 (  0.03%)    415.09
   halflif           13 (  0.00%)             3124 (  0.00%)    240.31
   starcra           22 (  0.00%)             4863 (  0.00%)    221.05
   everque           22 (  0.00%)             2553 (  0.00%)    116.05
   unreal            11 (  0.00%)             1869 (  0.00%)    169.91
   quake             19 (  0.00%)             2788 (  0.00%)    146.74
   cuseeme            7 (  0.00%)             2079 (  0.00%)    297.00
   other         631494 (  2.77%)        322633479 (  1.94%)    510.91
  icmp           176943 (  0.78%)         20092160 (  0.12%)    113.55
  ip6              6839 (  0.03%)          8019071 (  0.05%)   1172.55
  other          249318 (  1.09%)         38117298 (  0.23%)    152.89
  frag             4664 (  0.02%)          4122286 (  0.02%)    883.85
 ip6             103928 (  0.46%)         28075674 (  0.17%)    270.15
  tcp6            41018 (  0.18%)          5424489 (  0.03%)    132.25
   http(s)          755 (  0.00%)           970009 (  0.01%)   1284.78
   http(c)        34320 (  0.15%)          3756824 (  0.02%)    109.46
   squid           2368 (  0.01%)           185348 (  0.00%)     78.27
   smtp             275 (  0.00%)           168643 (  0.00%)    613.25
   ftp                6 (  0.00%)              468 (  0.00%)     78.00
   ssh                5 (  0.00%)              470 (  0.00%)     94.00
   bgp              244 (  0.00%)            25540 (  0.00%)    104.67
   other           3045 (  0.01%)           317187 (  0.00%)    104.17
  udp6            43196 (  0.19%)          6099682 (  0.04%)    141.21
   dns            39404 (  0.17%)          5809846 (  0.03%)    147.44
   other           3792 (  0.02%)           289836 (  0.00%)     76.43
  icmp6            8379 (  0.04%)          1069601 (  0.01%)    127.65
  ip6               514 (  0.00%)            83505 (  0.00%)    162.46
  pim6               45 (  0.00%)             5580 (  0.00%)    124.00
  other6          10776 (  0.05%)         15392817 (  0.09%)   1428.44


tcpdump file: 200611281400.dump.gz (586.05 MB)