Traffic Trace Info


DumpFile: 200612111400.dump
FileSize: 1268.91MB
Id: 200612111400
StartTime: Mon Dec 11 14:00:01 2006
EndTime: Mon Dec 11 14:15:00 2006
TotalTime: 899.22 seconds
TotalCapSize: 993.28MB CapLen: 96 bytes
# of packets: 18061333 (12788.51MB)
AvgRate: 119.31Mbps stddev:20.71M

IP flow (unique src/dst pair) Information

# of flows: 506118 (avg. 35.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.2% 4.1% 2.8% 1.6% 1.5% 1.4% 1.2% 1.2% 1.0%

IP address Information

# of IPv4 addresses: 255521
Top 10 bandwidth usage (bytes/total in %):
11.6% 5.4% 5.2% 4.8% 4.8% 4.2% 4.2% 4.2% 3.6% 3.0%
# of IPv6 addresses: 1668
Top 10 bandwidth usage (bytes/total in %):
41.2% 41.2% 16.1% 6.4% 4.8% 4.6% 4.5% 3.9% 2.6% 2.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4064405
 [   64-  127]:    4289896
 [  128-  255]:     417877
 [  256-  511]:     488546
 [  512- 1023]:     551016
 [ 1024- 2047]:    8249593


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         18061333 (100.00%)      13409720884 (100.00%)    742.45
 ip            17967321 ( 99.48%)      13389892052 ( 99.85%)    745.24
  tcp          15541728 ( 86.05%)      12907691130 ( 96.26%)    830.52
   http(s)      7745095 ( 42.88%)      10266637066 ( 76.56%)   1325.57
   http(c)      4418968 ( 24.47%)        630632001 (  4.70%)    142.71
   squid         267881 (  1.48%)        112519537 (  0.84%)    420.04
   smtp          337748 (  1.87%)         96713638 (  0.72%)    286.35
   nntp           11834 (  0.07%)          6129306 (  0.05%)    517.94
   ftp            45367 (  0.25%)         40406788 (  0.30%)    890.66
   pop3            9997 (  0.06%)          4478922 (  0.03%)    448.03
   imap            6210 (  0.03%)          2523606 (  0.02%)    406.38
   telnet           909 (  0.01%)            77051 (  0.00%)     84.76
   ssh            46182 (  0.26%)          8521309 (  0.06%)    184.52
   dns             2294 (  0.01%)          1688477 (  0.01%)    736.04
   bgp              897 (  0.00%)           100609 (  0.00%)    112.16
   napster          220 (  0.00%)            17379 (  0.00%)     79.00
   realaud           67 (  0.00%)             8281 (  0.00%)    123.60
   rtsp          104136 (  0.58%)        107677345 (  0.80%)   1034.01
   icecast        10277 (  0.06%)          1712165 (  0.01%)    166.60
   hotline           10 (  0.00%)              673 (  0.00%)     67.30
   other        2533625 ( 14.03%)       1627846295 ( 12.14%)    642.50
  udp           1880837 ( 10.41%)        378662715 (  2.82%)    201.33
   dns          1395672 (  7.73%)        171697016 (  1.28%)    123.02
   realaud         9884 (  0.05%)          7293626 (  0.05%)    737.92
   halflif           24 (  0.00%)             4059 (  0.00%)    169.12
   starcra           19 (  0.00%)             3201 (  0.00%)    168.47
   everque           41 (  0.00%)             5821 (  0.00%)    141.98
   unreal            16 (  0.00%)             2584 (  0.00%)    161.50
   quake             16 (  0.00%)             2500 (  0.00%)    156.25
   cuseeme            4 (  0.00%)              330 (  0.00%)     82.50
   other         475158 (  2.63%)        199653356 (  1.49%)    420.18
  icmp           258222 (  1.43%)         22324083 (  0.17%)     86.45
  ip6               530 (  0.00%)            74314 (  0.00%)    140.22
  other          286004 (  1.58%)         81139810 (  0.61%)    283.70
  frag              192 (  0.00%)           163424 (  0.00%)    851.17
 ip6              94009 (  0.52%)         19828652 (  0.15%)    210.92
  tcp6            37715 (  0.21%)          4384214 (  0.03%)    116.25
   http(s)          162 (  0.00%)           125783 (  0.00%)    776.44
   http(c)        30572 (  0.17%)          3442473 (  0.03%)    112.60
   squid              4 (  0.00%)              336 (  0.00%)     84.00
   smtp             258 (  0.00%)           121523 (  0.00%)    471.02
   ftp              197 (  0.00%)            18705 (  0.00%)     94.95
   ssh              319 (  0.00%)            31728 (  0.00%)     99.46
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              193 (  0.00%)            19477 (  0.00%)    100.92
   icecast            2 (  0.00%)              168 (  0.00%)     84.00
   other           6001 (  0.03%)           623386 (  0.00%)    103.88
  udp6            43727 (  0.24%)          6439734 (  0.05%)    147.27
   dns            40216 (  0.22%)          6177436 (  0.05%)    153.61
   other           3511 (  0.02%)           262298 (  0.00%)     74.71
  icmp6            6787 (  0.04%)          1248048 (  0.01%)    183.89
  ip6               346 (  0.00%)            54730 (  0.00%)    158.18
  pim6               45 (  0.00%)             5580 (  0.00%)    124.00
  other6           5389 (  0.03%)          7696346 (  0.06%)   1428.16


tcpdump file: 200612111400.dump.gz (452.88 MB)