Traffic Trace Info


DumpFile: 200612171400.dump
FileSize: 713.83MB
Id: 200612171400
StartTime: Sun Dec 17 14:00:00 2006
EndTime: Sun Dec 17 14:15:01 2006
TotalTime: 900.56 seconds
TotalCapSize: 560.38MB CapLen: 96 bytes
# of packets: 10052625 (5536.88MB)
AvgRate: 51.57Mbps stddev:9.00M

IP flow (unique src/dst pair) Information

# of flows: 451938 (avg. 22.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.7% 3.4% 2.6% 1.9% 1.7% 1.6% 1.5% 1.4% 1.3% 1.0%

IP address Information

# of IPv4 addresses: 284055
Top 10 bandwidth usage (bytes/total in %):
14.2% 11.8% 10.1% 8.9% 7.3% 4.5% 3.5% 3.5% 2.6% 2.3%
# of IPv6 addresses: 1573
Top 10 bandwidth usage (bytes/total in %):
42.3% 42.3% 20.4% 7.3% 5.9% 3.8% 3.3% 3.2% 2.4% 2.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    1776674
 [   64-  127]:    3796854
 [  128-  255]:     511674
 [  256-  511]:     196593
 [  512- 1023]:     407808
 [ 1024- 2047]:    3363022


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         10052625 (100.00%)       5805836435 (100.00%)    577.54
 ip             9963615 ( 99.11%)       5786261306 ( 99.66%)    580.74
  tcp           8031396 ( 79.89%)       5407309113 ( 93.14%)    673.27
   http(s)      2170480 ( 21.59%)       2863105453 ( 49.31%)   1319.11
   http(c)      1160368 ( 11.54%)        160027731 (  2.76%)    137.91
   squid         160845 (  1.60%)         90405175 (  1.56%)    562.06
   smtp          249162 (  2.48%)         52629794 (  0.91%)    211.23
   nntp            5390 (  0.05%)          3142496 (  0.05%)    583.02
   ftp            24121 (  0.24%)          2558757 (  0.04%)    106.08
   pop3            4088 (  0.04%)          2816150 (  0.05%)    688.88
   imap            1016 (  0.01%)           190933 (  0.00%)    187.93
   telnet            84 (  0.00%)             8800 (  0.00%)    104.76
   ssh          1746168 ( 17.37%)        259631037 (  4.47%)    148.69
   dns             4123 (  0.04%)           278958 (  0.00%)     67.66
   bgp              788 (  0.01%)            85273 (  0.00%)    108.21
   napster            6 (  0.00%)              510 (  0.00%)     85.00
   rtsp          128383 (  1.28%)         41674033 (  0.72%)    324.61
   icecast           58 (  0.00%)             4993 (  0.00%)     86.09
   other        2376305 ( 23.64%)       1930748360 ( 33.26%)    812.50
  udp           1577392 ( 15.69%)        280281043 (  4.83%)    177.69
   dns          1223677 ( 12.17%)        133549149 (  2.30%)    109.14
   realaud         5196 (  0.05%)          1761481 (  0.03%)    339.01
   halflif            9 (  0.00%)              730 (  0.00%)     81.11
   starcra            6 (  0.00%)              509 (  0.00%)     84.83
   everque           21 (  0.00%)             2407 (  0.00%)    114.62
   unreal             7 (  0.00%)              598 (  0.00%)     85.43
   quake             21 (  0.00%)             1832 (  0.00%)     87.24
   cuseeme            5 (  0.00%)              412 (  0.00%)     82.40
   other         348439 (  3.47%)        144963111 (  2.50%)    416.04
  icmp           241463 (  2.40%)         21232803 (  0.37%)     87.93
  ip6              6827 (  0.07%)          7998074 (  0.14%)   1171.54
  other          106537 (  1.06%)         69440273 (  1.20%)    651.79
  frag              169 (  0.00%)           129280 (  0.00%)    764.97
 ip6              89007 (  0.89%)         19574949 (  0.34%)    219.93
  tcp6            34850 (  0.35%)          4953873 (  0.09%)    142.15
   http(s)          281 (  0.00%)           408198 (  0.01%)   1452.66
   http(c)        32966 (  0.33%)          4355640 (  0.08%)    132.13
   smtp             147 (  0.00%)            33027 (  0.00%)    224.67
   ftp               54 (  0.00%)             5053 (  0.00%)     93.57
   dns                5 (  0.00%)              705 (  0.00%)    141.00
   bgp              124 (  0.00%)            13049 (  0.00%)    105.23
   other           1273 (  0.01%)           138201 (  0.00%)    108.56
  udp6            40106 (  0.40%)          5340370 (  0.09%)    133.16
   dns            36629 (  0.36%)          5081092 (  0.09%)    138.72
   other           3477 (  0.03%)           259278 (  0.00%)     74.57
  icmp6            8194 (  0.08%)          1487120 (  0.03%)    181.49
  ip6               404 (  0.00%)            63684 (  0.00%)    157.63
  pim6               46 (  0.00%)             5716 (  0.00%)    124.26
  other6           5407 (  0.05%)          7724186 (  0.13%)   1428.55


tcpdump file: 200612171400.dump.gz (271.25 MB)