Traffic Trace Info


DumpFile: 200702161400.dump
FileSize: 1140.91MB
Id: 200702161400
StartTime: Fri Feb 16 14:00:00 2007
EndTime: Fri Feb 16 14:15:00 2007
TotalTime: 899.98 seconds
TotalCapSize: 896.41MB CapLen: 96 bytes
# of packets: 16022892 (11861.24MB)
AvgRate: 110.55Mbps stddev:12.32M

IP flow (unique src/dst pair) Information

# of flows: 422854 (avg. 37.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
22.3% 1.8% 1.4% 1.3% 1.0% 1.0% 1.0% 0.7% 0.7% 0.6%

IP address Information

# of IPv4 addresses: 213217
Top 10 bandwidth usage (bytes/total in %):
30.8% 22.3% 7.5% 6.1% 4.2% 2.0% 1.8% 1.7% 1.5% 1.5%
# of IPv6 addresses: 1844
Top 10 bandwidth usage (bytes/total in %):
31.8% 31.4% 27.2% 27.2% 3.5% 2.8% 2.6% 2.5% 2.1% 2.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2932659
 [   64-  127]:    4270396
 [  128-  255]:     407613
 [  256-  511]:     373108
 [  512- 1023]:     320088
 [ 1024- 2047]:    7719028


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         16022892 (100.00%)      12437408536 (100.00%)    776.23
 ip            15880832 ( 99.11%)      12412872018 ( 99.80%)    781.63
  tcp          13438572 ( 83.87%)      12033266495 ( 96.75%)    895.43
   http(s)      5229796 ( 32.64%)       6917675671 ( 55.62%)   1322.74
   http(c)      3165895 ( 19.76%)        420554192 (  3.38%)    132.84
   squid         364765 (  2.28%)        240645016 (  1.93%)    659.73
   smtp          476949 (  2.98%)        121650044 (  0.98%)    255.06
   nntp            6841 (  0.04%)          3823581 (  0.03%)    558.92
   ftp            17241 (  0.11%)          1516409 (  0.01%)     87.95
   pop3            9507 (  0.06%)          3190957 (  0.03%)    335.64
   imap            8024 (  0.05%)          4353984 (  0.04%)    542.62
   telnet           482 (  0.00%)            72647 (  0.00%)    150.72
   ssh             4464 (  0.03%)          1081239 (  0.01%)    242.21
   dns             1416 (  0.01%)           114259 (  0.00%)     80.69
   bgp             1376 (  0.01%)           166296 (  0.00%)    120.85
   napster         8843 (  0.06%)           563361 (  0.00%)     63.71
   realaud           96 (  0.00%)             8272 (  0.00%)     86.17
   rtsp          115263 (  0.72%)         62685273 (  0.50%)    543.85
   icecast        20610 (  0.13%)         15595300 (  0.13%)    756.69
   other        4006996 ( 25.01%)       4239569426 ( 34.09%)   1058.04
  udp           1460772 (  9.12%)        274897583 (  2.21%)    188.19
   dns          1116057 (  6.97%)        152249508 (  1.22%)    136.42
   realaud         2047 (  0.01%)           145671 (  0.00%)     71.16
   halflif           11 (  0.00%)             1117 (  0.00%)    101.55
   starcra            9 (  0.00%)             1452 (  0.00%)    161.33
   everque           33 (  0.00%)             4808 (  0.00%)    145.70
   unreal             7 (  0.00%)              772 (  0.00%)    110.29
   quake          12143 (  0.08%)          1640716 (  0.01%)    135.12
   cuseeme            1 (  0.00%)               86 (  0.00%)     86.00
   other         330391 (  2.06%)        120842042 (  0.97%)    365.75
  icmp           831678 (  5.19%)         73523552 (  0.59%)     88.40
  ipip              324 (  0.00%)            39832 (  0.00%)    122.94
  ip6               551 (  0.00%)            68415 (  0.00%)    124.17
  other          148935 (  0.93%)         31076141 (  0.25%)    208.66
  frag             1828 (  0.01%)          2070693 (  0.02%)   1132.76
 ip6             142057 (  0.89%)         24536338 (  0.20%)    172.72
  tcp6            83374 (  0.52%)          8553498 (  0.07%)    102.59
   http(s)          896 (  0.01%)           456030 (  0.00%)    508.96
   http(c)         1055 (  0.01%)           170762 (  0.00%)    161.86
   squid              8 (  0.00%)              672 (  0.00%)     84.00
   smtp             789 (  0.00%)           268783 (  0.00%)    340.66
   nntp            2808 (  0.02%)           377874 (  0.00%)    134.57
   ssh               15 (  0.00%)             1890 (  0.00%)    126.00
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              162 (  0.00%)            20701 (  0.00%)    127.78
   icecast            4 (  0.00%)              336 (  0.00%)     84.00
   other          77630 (  0.48%)          7255815 (  0.06%)     93.47
  udp6            39341 (  0.25%)          6173034 (  0.05%)    156.91
   dns            35753 (  0.22%)          5835494 (  0.05%)    163.22
   other           3588 (  0.02%)           337540 (  0.00%)     94.07
  icmp6            9315 (  0.06%)          1300556 (  0.01%)    139.62
  ip6              4548 (  0.03%)           793293 (  0.01%)    174.43
  pim6               46 (  0.00%)             5712 (  0.00%)    124.17
  other6           5433 (  0.03%)          7710245 (  0.06%)   1419.15


tcpdump file: 200702161400.dump.gz (398.99 MB)