Traffic Trace Info


DumpFile: 200701011400.dump
FileSize: 479.70MB
Id: 200701011400
StartTime: Mon Jan 1 14:00:00 2007
EndTime: Mon Jan 1 14:15:00 2007
TotalTime: 899.63 seconds
TotalCapSize: 373.64MB CapLen: 96 bytes
# of packets: 6948502 (3882.97MB)
AvgRate: 36.21Mbps stddev:3.91M

IP flow (unique src/dst pair) Information

# of flows: 353384 (avg. 19.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.8% 2.4% 2.3% 1.7% 1.5% 1.5% 1.3% 1.2% 1.1%

IP address Information

# of IPv4 addresses: 196506
Top 10 bandwidth usage (bytes/total in %):
17.8% 6.9% 6.5% 6.0% 5.9% 5.2% 4.4% 3.9% 3.7% 3.3%
# of IPv6 addresses: 1159
Top 10 bandwidth usage (bytes/total in %):
52.7% 52.7% 14.6% 6.6% 5.2% 5.0% 3.6% 2.8% 2.5% 2.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    1525236
 [   64-  127]:    2350173
 [  128-  255]:     259578
 [  256-  511]:     176853
 [  512- 1023]:     256857
 [ 1024- 2047]:    2379805


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total          6948502 (100.00%)       4071586314 (100.00%)    585.97
 ip             6901513 ( 99.32%)       4055921176 ( 99.62%)    587.69
  tcp           5190569 ( 74.70%)       3678614451 ( 90.35%)    708.71
   http(s)      1452835 ( 20.91%)       1854148368 ( 45.54%)   1276.23
   http(c)       918789 ( 13.22%)        139115073 (  3.42%)    151.41
   squid         130933 (  1.88%)         47400050 (  1.16%)    362.02
   smtp          170599 (  2.46%)         43854392 (  1.08%)    257.06
   nntp            4943 (  0.07%)          2229876 (  0.05%)    451.12
   ftp            19677 (  0.28%)          1539651 (  0.04%)     78.25
   pop3             817 (  0.01%)           104115 (  0.00%)    127.44
   imap             638 (  0.01%)            66109 (  0.00%)    103.62
   telnet           810 (  0.01%)           121667 (  0.00%)    150.21
   ssh            17819 (  0.26%)          4546915 (  0.11%)    255.17
   dns             2394 (  0.03%)          1699339 (  0.04%)    709.83
   bgp              701 (  0.01%)            74823 (  0.00%)    106.74
   napster          152 (  0.00%)            11063 (  0.00%)     72.78
   realaud          193 (  0.00%)            23874 (  0.00%)    123.70
   rtsp           10655 (  0.15%)          8265725 (  0.20%)    775.76
   icecast         1979 (  0.03%)           158161 (  0.00%)     79.92
   other        2456624 ( 35.35%)       1575254590 ( 38.69%)    641.23
  udp           1248025 ( 17.96%)        230815332 (  5.67%)    184.94
   dns           987813 ( 14.22%)        110607477 (  2.72%)    111.97
   realaud         1856 (  0.03%)           113018 (  0.00%)     60.89
   halflif           15 (  0.00%)             1241 (  0.00%)     82.73
   starcra            3 (  0.00%)              466 (  0.00%)    155.33
   everque           24 (  0.00%)             3442 (  0.00%)    143.42
   unreal             2 (  0.00%)              195 (  0.00%)     97.50
   quake              9 (  0.00%)              754 (  0.00%)     83.78
   cuseeme            5 (  0.00%)              496 (  0.00%)     99.20
   other         258298 (  3.72%)        120088243 (  2.95%)    464.92
  icmp           290812 (  4.19%)         25161896 (  0.62%)     86.52
  ip6              6689 (  0.10%)          7958546 (  0.20%)   1189.80
  other          165418 (  2.38%)        113370951 (  2.78%)    685.36
  frag             4896 (  0.07%)          5829704 (  0.14%)   1190.71
 ip6              46989 (  0.68%)         15665138 (  0.38%)    333.38
  tcp6             4641 (  0.07%)           552699 (  0.01%)    119.09
   http(c)           26 (  0.00%)             2784 (  0.00%)    107.08
   smtp             166 (  0.00%)            60856 (  0.00%)    366.60
   dns                7 (  0.00%)              602 (  0.00%)     86.00
   bgp              120 (  0.00%)            12420 (  0.00%)    103.50
   other           4322 (  0.06%)           476037 (  0.01%)    110.14
  udp6            27389 (  0.39%)          5666168 (  0.14%)    206.88
   dns            26191 (  0.38%)          5533144 (  0.14%)    211.26
   other           1198 (  0.02%)           133024 (  0.00%)    111.04
  icmp6            7514 (  0.11%)          1514480 (  0.04%)    201.55
  ip6              2038 (  0.03%)           247623 (  0.01%)    121.50
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           5377 (  0.08%)          7680088 (  0.19%)   1428.32


tcpdump file: 200701011400.dump.gz (179.40 MB)