Traffic Trace Info


DumpFile: 200612131400.dump
FileSize: 1084.90MB
Id: 200612131400
StartTime: Wed Dec 13 14:00:01 2006
EndTime: Wed Dec 13 14:15:00 2006
TotalTime: 899.23 seconds
TotalCapSize: 845.52MB CapLen: 96 bytes
# of packets: 15684419 (10048.14MB)
AvgRate: 93.75Mbps stddev:15.30M

IP flow (unique src/dst pair) Information

# of flows: 546122 (avg. 28.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 4.2% 1.4% 1.3% 1.2% 0.9% 0.9% 0.7% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 311338
Top 10 bandwidth usage (bytes/total in %):
11.8% 6.9% 5.5% 5.2% 4.4% 4.3% 4.3% 2.7% 2.6% 2.0%
# of IPv6 addresses: 1726
Top 10 bandwidth usage (bytes/total in %):
33.3% 33.3% 27.2% 10.2% 7.1% 5.2% 3.4% 3.0% 3.0% 2.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3685904
 [   64-  127]:    4254144
 [  128-  255]:     456891
 [  256-  511]:     410668
 [  512- 1023]:     562678
 [ 1024- 2047]:    6314134


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         15684419 (100.00%)      10536236690 (100.00%)    671.76
 ip            15564982 ( 99.24%)      10511764112 ( 99.77%)    675.35
  tcp          12905924 ( 82.28%)       9701699205 ( 92.08%)    751.72
   http(s)      5414498 ( 34.52%)       6953503110 ( 66.00%)   1284.24
   http(c)      3269044 ( 20.84%)        504426637 (  4.79%)    154.30
   squid         293559 (  1.87%)        209208706 (  1.99%)    712.66
   smtp          291492 (  1.86%)         93266015 (  0.89%)    319.96
   nntp            6877 (  0.04%)          3496126 (  0.03%)    508.38
   ftp            14863 (  0.09%)          1649388 (  0.02%)    110.97
   pop3            8256 (  0.05%)          3187014 (  0.03%)    386.02
   imap            3725 (  0.02%)          1104257 (  0.01%)    296.44
   telnet           713 (  0.00%)            77701 (  0.00%)    108.98
   ssh           533101 (  3.40%)         81281087 (  0.77%)    152.47
   dns             2492 (  0.02%)          1711667 (  0.02%)    686.86
   bgp             1280 (  0.01%)           150076 (  0.00%)    117.25
   realaud            9 (  0.00%)              857 (  0.00%)     95.22
   rtsp          158797 (  1.01%)         61436597 (  0.58%)    386.89
   icecast        57989 (  0.37%)         46320981 (  0.44%)    798.79
   hotline            4 (  0.00%)              316 (  0.00%)     79.00
   other        2849209 ( 18.17%)       1740877688 ( 16.52%)    611.00
  udp           1472204 (  9.39%)        260097967 (  2.47%)    176.67
   dns          1199468 (  7.65%)        150097519 (  1.42%)    125.14
   realaud         7443 (  0.05%)          2756445 (  0.03%)    370.34
   halflif            9 (  0.00%)              950 (  0.00%)    105.56
   starcra           14 (  0.00%)             2042 (  0.00%)    145.86
   everque           25 (  0.00%)             3675 (  0.00%)    147.00
   unreal            12 (  0.00%)             1518 (  0.00%)    126.50
   quake             18 (  0.00%)             1686 (  0.00%)     93.67
   cuseeme            3 (  0.00%)              260 (  0.00%)     86.67
   other         263283 (  1.68%)        106085474 (  1.01%)    402.93
  icmp           210519 (  1.34%)         18286587 (  0.17%)     86.86
  ip6               557 (  0.00%)            88902 (  0.00%)    159.61
  other          975778 (  6.22%)        531591451 (  5.05%)    544.79
  frag             7581 (  0.05%)          7811076 (  0.07%)   1030.35
 ip6             119434 (  0.76%)         24472398 (  0.23%)    204.90
  tcp6            63152 (  0.40%)          9025620 (  0.09%)    142.92
   http(s)         1197 (  0.01%)          1481058 (  0.01%)   1237.31
   http(c)        56935 (  0.36%)          6802932 (  0.06%)    119.49
   smtp             683 (  0.00%)           271040 (  0.00%)    396.84
   ftp              105 (  0.00%)            10083 (  0.00%)     96.03
   ssh               15 (  0.00%)             1890 (  0.00%)    126.00
   bgp              246 (  0.00%)            28578 (  0.00%)    116.17
   other           3971 (  0.03%)           430039 (  0.00%)    108.29
  udp6            43102 (  0.27%)          6390789 (  0.06%)    148.27
   dns            39580 (  0.25%)          6126309 (  0.06%)    154.78
   other           3522 (  0.02%)           264480 (  0.00%)     75.09
  icmp6            7390 (  0.05%)          1278613 (  0.01%)    173.02
  ip6               339 (  0.00%)            53921 (  0.00%)    159.06
  pim6               46 (  0.00%)             5716 (  0.00%)    124.26
  other6           5405 (  0.03%)          7717739 (  0.07%)   1427.89


tcpdump file: 200612131400.dump.gz (402.42 MB)