Traffic Trace Info


DumpFile: 200701021400.dump
FileSize: 641.31MB
Id: 200701021400
StartTime: Tue Jan 2 14:00:00 2007
EndTime: Tue Jan 2 14:15:00 2007
TotalTime: 899.55 seconds
TotalCapSize: 503.42MB CapLen: 96 bytes
# of packets: 9034366 (5551.52MB)
AvgRate: 51.77Mbps stddev:9.21M

IP flow (unique src/dst pair) Information

# of flows: 398526 (avg. 22.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.7% 2.7% 1.9% 1.3% 1.1% 1.0% 1.0% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 206716
Top 10 bandwidth usage (bytes/total in %):
19.8% 17.6% 6.1% 5.6% 3.5% 3.5% 3.5% 3.2% 3.1% 2.8%
# of IPv6 addresses: 1242
Top 10 bandwidth usage (bytes/total in %):
44.3% 44.3% 14.1% 6.2% 5.3% 5.3% 4.7% 4.5% 4.5% 4.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    1975274
 [   64-  127]:    2863718
 [  128-  255]:     272304
 [  256-  511]:     196746
 [  512- 1023]:     172289
 [ 1024- 2047]:    3554035


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total          9034366 (100.00%)       5821186717 (100.00%)    644.34
 ip             8973354 ( 99.32%)       5803566800 ( 99.70%)    646.76
  tcp           7416748 ( 82.09%)       5561124501 ( 95.53%)    749.81
   http(s)      2630343 ( 29.11%)       3460356530 ( 59.44%)   1315.55
   http(c)      1692598 ( 18.74%)        197230992 (  3.39%)    116.53
   squid         237017 (  2.62%)        127447693 (  2.19%)    537.72
   smtp          271794 (  3.01%)         66480633 (  1.14%)    244.60
   nntp          110198 (  1.22%)        158905884 (  2.73%)   1442.00
   ftp            26853 (  0.30%)          2390037 (  0.04%)     89.00
   pop3            1249 (  0.01%)           190671 (  0.00%)    152.66
   imap             831 (  0.01%)            79041 (  0.00%)     95.12
   telnet          1368 (  0.02%)           124526 (  0.00%)     91.03
   ssh            12530 (  0.14%)         11422302 (  0.20%)    911.60
   dns             1184 (  0.01%)            80149 (  0.00%)     67.69
   bgp              900 (  0.01%)           102812 (  0.00%)    114.24
   napster          155 (  0.00%)           127723 (  0.00%)    824.02
   realaud         3245 (  0.04%)          2083654 (  0.04%)    642.11
   rtsp          145407 (  1.61%)        106100298 (  1.82%)    729.68
   icecast         2101 (  0.02%)           167959 (  0.00%)     79.94
   other        2278971 ( 25.23%)       1427833357 ( 24.53%)    626.53
  udp           1309398 ( 14.49%)        213264133 (  3.66%)    162.87
   dns          1131143 ( 12.52%)        127795128 (  2.20%)    112.98
   realaud          111 (  0.00%)            24463 (  0.00%)    220.39
   halflif            9 (  0.00%)              759 (  0.00%)     84.33
   starcra            1 (  0.00%)              105 (  0.00%)    105.00
   everque           13 (  0.00%)             1354 (  0.00%)    104.15
   unreal             1 (  0.00%)               86 (  0.00%)     86.00
   quake             13 (  0.00%)             1081 (  0.00%)     83.15
   cuseeme            3 (  0.00%)              251 (  0.00%)     83.67
   other         178099 (  1.97%)         85435868 (  1.47%)    479.71
  icmp           238700 (  2.64%)         20982893 (  0.36%)     87.90
  ip6              6582 (  0.07%)          7962780 (  0.14%)   1209.78
  other            1926 (  0.02%)           232493 (  0.00%)    120.71
  frag              261 (  0.00%)           220731 (  0.00%)    845.71
 ip6              61009 (  0.68%)         17619737 (  0.30%)    288.81
  tcp6            15622 (  0.17%)          2412515 (  0.04%)    154.43
   http(s)            6 (  0.00%)             1241 (  0.00%)    206.83
   http(c)          813 (  0.01%)           152749 (  0.00%)    187.88
   squid              2 (  0.00%)              148 (  0.00%)     74.00
   smtp             143 (  0.00%)            48651 (  0.00%)    340.22
   ftp               78 (  0.00%)             9659 (  0.00%)    123.83
   ssh             1578 (  0.02%)           941643 (  0.02%)    596.73
   dns                7 (  0.00%)              602 (  0.00%)     86.00
   bgp              152 (  0.00%)            17741 (  0.00%)    116.72
   icecast            1 (  0.00%)               74 (  0.00%)     74.00
   other          12842 (  0.14%)          1240007 (  0.02%)     96.56
  udp6            30263 (  0.33%)          6225485 (  0.11%)    205.71
   dns            29066 (  0.32%)          6092583 (  0.10%)    209.61
   other           1197 (  0.01%)           132902 (  0.00%)    111.03
  icmp6            7650 (  0.08%)          1017842 (  0.02%)    133.05
  ip6              2046 (  0.02%)           249431 (  0.00%)    121.91
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           5398 (  0.06%)          7710384 (  0.13%)   1428.38


tcpdump file: 200701021400.dump.gz (234.12 MB)