Traffic Trace Info


DumpFile: 200612231400.dump
FileSize: 494.75MB
Id: 200612231400
StartTime: Sat Dec 23 14:00:01 2006
EndTime: Sat Dec 23 14:15:00 2006
TotalTime: 899.25 seconds
TotalCapSize: 387.28MB CapLen: 96 bytes
# of packets: 7039091 (3531.38MB)
AvgRate: 32.93Mbps stddev:4.89M

IP flow (unique src/dst pair) Information

# of flows: 361956 (avg. 19.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.3% 1.7% 1.6% 1.3% 1.3% 1.3% 1.2% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 217248
Top 10 bandwidth usage (bytes/total in %):
19.4% 9.0% 8.5% 5.4% 3.4% 2.8% 2.5% 2.4% 2.1% 1.7%
# of IPv6 addresses: 1656
Top 10 bandwidth usage (bytes/total in %):
33.9% 33.9% 28.7% 8.6% 4.8% 3.6% 3.5% 3.3% 3.0% 2.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    1211961
 [   64-  127]:    3067712
 [  128-  255]:     266348
 [  256-  511]:     201014
 [  512- 1023]:     169920
 [ 1024- 2047]:    2122136


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total          7039091 (100.00%)       3702925446 (100.00%)    526.05
 ip             6911740 ( 98.19%)       3678712946 ( 99.35%)    532.24
  tcp           5159648 ( 73.30%)       3428956081 ( 92.60%)    664.57
   http(s)      1386614 ( 19.70%)       1699591353 ( 45.90%)   1225.71
   http(c)      1159913 ( 16.48%)        155241660 (  4.19%)    133.84
   squid         113872 (  1.62%)         63568389 (  1.72%)    558.24
   smtp          282890 (  4.02%)         60025710 (  1.62%)    212.19
   nntp            6997 (  0.10%)          4083491 (  0.11%)    583.61
   ftp            16536 (  0.23%)          1277007 (  0.03%)     77.23
   pop3            3621 (  0.05%)          1820297 (  0.05%)    502.71
   imap             362 (  0.01%)            51450 (  0.00%)    142.13
   telnet            48 (  0.00%)             4239 (  0.00%)     88.31
   ssh            55872 (  0.79%)         38642622 (  1.04%)    691.63
   dns             1783 (  0.03%)           121783 (  0.00%)     68.30
   bgp              871 (  0.01%)            97994 (  0.00%)    112.51
   napster          130 (  0.00%)            24651 (  0.00%)    189.62
   realaud           13 (  0.00%)             1242 (  0.00%)     95.54
   rtsp            6780 (  0.10%)           429559 (  0.01%)     63.36
   icecast          196 (  0.00%)            18594 (  0.00%)     94.87
   hotline            5 (  0.00%)              316 (  0.00%)     63.20
   other        2123135 ( 30.16%)       1403955124 ( 37.91%)    661.27
  udp           1489126 ( 21.16%)        211357566 (  5.71%)    141.93
   dns          1333294 ( 18.94%)        143833532 (  3.88%)    107.88
   realaud         2349 (  0.03%)           226260 (  0.01%)     96.32
   halflif           17 (  0.00%)             1765 (  0.00%)    103.82
   starcra           14 (  0.00%)             1838 (  0.00%)    131.29
   everque           24 (  0.00%)             2838 (  0.00%)    118.25
   unreal            16 (  0.00%)             2430 (  0.00%)    151.88
   quake             16 (  0.00%)             3038 (  0.00%)    189.88
   cuseeme            5 (  0.00%)              488 (  0.00%)     97.60
   other         153369 (  2.18%)         67265319 (  1.82%)    438.58
  icmp           204645 (  2.91%)         16964222 (  0.46%)     82.90
  ip6              6838 (  0.10%)          7993759 (  0.22%)   1169.02
  other           51483 (  0.73%)         13441318 (  0.36%)    261.08
  frag              457 (  0.01%)           466872 (  0.01%)   1021.60
 ip6             127348 (  1.81%)         24212320 (  0.65%)    190.13
  tcp6            59798 (  0.85%)          7499324 (  0.20%)    125.41
   http(s)            9 (  0.00%)             1700 (  0.00%)    188.89
   http(c)        56997 (  0.81%)          7179245 (  0.19%)    125.96
   squid              6 (  0.00%)             1193 (  0.00%)    198.83
   smtp             191 (  0.00%)            38246 (  0.00%)    200.24
   ftp               13 (  0.00%)             1268 (  0.00%)     97.54
   dns               27 (  0.00%)             3555 (  0.00%)    131.67
   bgp              209 (  0.00%)            21692 (  0.00%)    103.79
   other           2346 (  0.03%)           252425 (  0.01%)    107.60
  udp6            50659 (  0.72%)          6799100 (  0.18%)    134.21
   dns            45813 (  0.65%)          6392742 (  0.17%)    139.54
   other           4846 (  0.07%)           406358 (  0.01%)     83.85
  icmp6            9844 (  0.14%)          1917411 (  0.05%)    194.78
  ip6              1575 (  0.02%)           283391 (  0.01%)    179.93
  pim6               79 (  0.00%)             9456 (  0.00%)    119.70
  other6           5393 (  0.08%)          7703638 (  0.21%)   1428.45


tcpdump file: 200612231400.dump.gz (183.27 MB)