Traffic Trace Info


DumpFile: 200702271400.dump
FileSize: 1248.23MB
Id: 200702271400
StartTime: Tue Feb 27 14:00:00 2007
EndTime: Tue Feb 27 14:15:00 2007
TotalTime: 899.72 seconds
TotalCapSize: 976.52MB CapLen: 96 bytes
# of packets: 17805767 (11784.20MB)
AvgRate: 109.87Mbps stddev:13.51M

IP flow (unique src/dst pair) Information

# of flows: 623257 (avg. 28.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.3% 1.3% 1.2% 1.1% 1.0% 0.9% 0.6% 0.6% 0.5% 0.5%

IP address Information

# of IPv4 addresses: 374317
Top 10 bandwidth usage (bytes/total in %):
21.0% 8.6% 6.4% 3.8% 3.2% 2.9% 1.9% 1.7% 1.6% 1.5%
# of IPv6 addresses: 1725
Top 10 bandwidth usage (bytes/total in %):
50.4% 26.3% 23.4% 7.3% 7.1% 4.3% 4.3% 3.5% 3.5% 3.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4352915
 [   64-  127]:    4434725
 [  128-  255]:     490481
 [  256-  511]:     508672
 [  512- 1023]:     465558
 [ 1024- 2047]:    7553416


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         17805767 (100.00%)      12356632356 (100.00%)    693.97
 ip            17718499 ( 99.51%)      12327555374 ( 99.76%)    695.74
  tcp          15416141 ( 86.58%)      11802260612 ( 95.51%)    765.58
   http(s)      6337624 ( 35.59%)       8363707155 ( 67.69%)   1319.69
   http(c)      4249835 ( 23.87%)        528625457 (  4.28%)    124.39
   squid         405946 (  2.28%)        295622508 (  2.39%)    728.23
   smtp          398700 (  2.24%)         89065642 (  0.72%)    223.39
   nntp           15590 (  0.09%)          7813467 (  0.06%)    501.18
   ftp           103650 (  0.58%)         70982947 (  0.57%)    684.83
   pop3            9976 (  0.06%)          3701402 (  0.03%)    371.03
   imap            4786 (  0.03%)          1840453 (  0.01%)    384.55
   telnet           799 (  0.00%)            91876 (  0.00%)    114.99
   ssh            42340 (  0.24%)         25496910 (  0.21%)    602.19
   dns             1547 (  0.01%)           156816 (  0.00%)    101.37
   bgp             1245 (  0.01%)           159599 (  0.00%)    128.19
   napster          211 (  0.00%)            19567 (  0.00%)     92.73
   realaud          718 (  0.00%)           142752 (  0.00%)    198.82
   rtsp          106450 (  0.60%)         23007740 (  0.19%)    216.14
   icecast        21950 (  0.12%)         30053956 (  0.24%)   1369.20
   other        3714764 ( 20.86%)       2361771655 ( 19.11%)    635.78
  udp           1800910 ( 10.11%)        410629149 (  3.32%)    228.01
   dns          1350196 (  7.58%)        179145274 (  1.45%)    132.68
   rip                1 (  0.00%)               88 (  0.00%)     88.00
   realaud         5187 (  0.03%)          2825333 (  0.02%)    544.70
   halflif           20 (  0.00%)             2474 (  0.00%)    123.70
   starcra            3 (  0.00%)              249 (  0.00%)     83.00
   everque          127 (  0.00%)           119007 (  0.00%)    937.06
   unreal             9 (  0.00%)             1524 (  0.00%)    169.33
   quake             14 (  0.00%)             1110 (  0.00%)     79.29
   cuseeme            5 (  0.00%)              471 (  0.00%)     94.20
   other         443751 (  2.49%)        228417504 (  1.85%)    514.74
  icmp           271748 (  1.53%)         28954385 (  0.23%)    106.55
  ipip              330 (  0.00%)            39496 (  0.00%)    119.68
  ip6              6973 (  0.04%)          7143987 (  0.06%)   1024.52
  other          222397 (  1.25%)         78527745 (  0.64%)    353.10
  frag             6916 (  0.04%)          6145247 (  0.05%)    888.56
 ip6              87268 (  0.49%)         29076982 (  0.24%)    333.19
  tcp6            15456 (  0.09%)          3539762 (  0.03%)    229.02
   http(s)         1705 (  0.01%)          2144316 (  0.02%)   1257.66
   http(c)          959 (  0.01%)           100382 (  0.00%)    104.67
   squid             68 (  0.00%)             5032 (  0.00%)     74.00
   smtp             160 (  0.00%)            71118 (  0.00%)    444.49
   pop3               6 (  0.00%)              564 (  0.00%)     94.00
   telnet             4 (  0.00%)              320 (  0.00%)     80.00
   ssh               29 (  0.00%)             2494 (  0.00%)     86.00
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              120 (  0.00%)            12420 (  0.00%)    103.50
   icecast           30 (  0.00%)             2220 (  0.00%)     74.00
   other          12368 (  0.07%)          1200261 (  0.01%)     97.05
  udp6            49057 (  0.28%)          8581583 (  0.07%)    174.93
   dns            48594 (  0.27%)          8538865 (  0.07%)    175.72
   other            463 (  0.00%)            42718 (  0.00%)     92.26
  icmp6           15133 (  0.08%)          8053005 (  0.07%)    532.15
  ip6               831 (  0.00%)           127244 (  0.00%)    153.12
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           6761 (  0.04%)          8771308 (  0.07%)   1297.34


tcpdump file: 200702271400.dump.gz (471.92 MB)