Traffic Trace Info


DumpFile: 200612011400.dump
FileSize: 1347.20MB
Id: 200612011400
StartTime: Fri Dec 1 14:00:01 2006
EndTime: Fri Dec 1 14:15:00 2006
TotalTime: 899.43 seconds
TotalCapSize: 1054.90MB CapLen: 96 bytes
# of packets: 19154302 (13227.42MB)
AvgRate: 123.40Mbps stddev:12.34M

IP flow (unique src/dst pair) Information

# of flows: 499800 (avg. 38.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 1.7% 1.3% 1.3% 1.3% 1.0% 0.9% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 257253
Top 10 bandwidth usage (bytes/total in %):
6.9% 6.3% 6.3% 5.8% 3.3% 3.0% 2.7% 2.2% 1.9% 1.7%
# of IPv6 addresses: 1855
Top 10 bandwidth usage (bytes/total in %):
40.9% 40.9% 35.8% 8.6% 4.3% 3.2% 3.1% 3.0% 2.7% 2.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4269223
 [   64-  127]:    4822877
 [  128-  255]:     475570
 [  256-  511]:     545977
 [  512- 1023]:     560189
 [ 1024- 2047]:    8480466


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         19154302 (100.00%)      13869955000 (100.00%)    724.12
 ip            18953804 ( 98.95%)      13831858252 ( 99.73%)    729.77
  tcp          16430104 ( 85.78%)      13261135009 ( 95.61%)    807.12
   http(s)      7217886 ( 37.68%)       9545715994 ( 68.82%)   1322.51
   http(c)      4663907 ( 24.35%)        601194552 (  4.33%)    128.90
   squid         207980 (  1.09%)        164930723 (  1.19%)    793.01
   smtp          280644 (  1.47%)         75194375 (  0.54%)    267.94
   nntp           13334 (  0.07%)         10392278 (  0.07%)    779.38
   ftp           171125 (  0.89%)        158409286 (  1.14%)    925.69
   pop3            9244 (  0.05%)          1861215 (  0.01%)    201.34
   imap            2967 (  0.02%)          1041935 (  0.01%)    351.17
   telnet          1040 (  0.01%)            95234 (  0.00%)     91.57
   ssh            89392 (  0.47%)         16857895 (  0.12%)    188.58
   dns             2504 (  0.01%)          1711584 (  0.01%)    683.54
   bgp             1192 (  0.01%)           144015 (  0.00%)    120.82
   napster          112 (  0.00%)             9184 (  0.00%)     82.00
   realaud         2753 (  0.01%)          1437039 (  0.01%)    521.99
   rtsp          226487 (  1.18%)        190109855 (  1.37%)    839.39
   icecast        40964 (  0.21%)         31186031 (  0.22%)    761.30
   hotline           14 (  0.00%)             2062 (  0.00%)    147.29
   other        3498510 ( 18.26%)       2460838812 ( 17.74%)    703.40
  udp           2013077 ( 10.51%)        506458562 (  3.65%)    251.58
   dns          1297042 (  6.77%)        167557816 (  1.21%)    129.18
   realaud         2798 (  0.01%)          1236683 (  0.01%)    441.99
   halflif           11 (  0.00%)             1554 (  0.00%)    141.27
   starcra            6 (  0.00%)             1170 (  0.00%)    195.00
   everque           19 (  0.00%)             3032 (  0.00%)    159.58
   unreal            19 (  0.00%)             3462 (  0.00%)    182.21
   quake             16 (  0.00%)             1513 (  0.00%)     94.56
   cuseeme            8 (  0.00%)              802 (  0.00%)    100.25
   other         706898 (  3.69%)        328787851 (  2.37%)    465.11
  icmp           206167 (  1.08%)         17696649 (  0.13%)     85.84
  ip6              6780 (  0.04%)          7979898 (  0.06%)   1176.98
  other          297676 (  1.55%)         38588134 (  0.28%)    129.63
  frag            19777 (  0.10%)         26656779 (  0.19%)   1347.87
 ip6             200495 (  1.05%)         38096568 (  0.27%)    190.01
  tcp6           132214 (  0.69%)         14534502 (  0.10%)    109.93
   http(s)          345 (  0.00%)           243413 (  0.00%)    705.54
   http(c)       125668 (  0.66%)         13557563 (  0.10%)    107.88
   squid           1417 (  0.01%)           110953 (  0.00%)     78.30
   smtp             467 (  0.00%)           198834 (  0.00%)    425.77
   ftp              375 (  0.00%)            34732 (  0.00%)     92.62
   telnet           355 (  0.00%)            26274 (  0.00%)     74.01
   ssh               15 (  0.00%)             1890 (  0.00%)    126.00
   bgp              372 (  0.00%)            41482 (  0.00%)    111.51
   icecast           57 (  0.00%)             4446 (  0.00%)     78.00
   other           3143 (  0.02%)           314915 (  0.00%)    100.20
  udp6            47246 (  0.25%)          6882121 (  0.05%)    145.67
   dns            43047 (  0.22%)          6562023 (  0.05%)    152.44
   other           4199 (  0.02%)           320098 (  0.00%)     76.23
  icmp6            9828 (  0.05%)          1217348 (  0.01%)    123.87
  ip6               386 (  0.00%)            64035 (  0.00%)    165.89
  pim6               44 (  0.00%)             5480 (  0.00%)    124.55
  other6          10777 (  0.06%)         15393082 (  0.11%)   1428.33


tcpdump file: 200612011400.dump.gz (484.46 MB)