Traffic Trace Info


DumpFile: 200703011400.dump
FileSize: 1329.58MB
Id: 200703011400
StartTime: Thu Mar 1 14:00:00 2007
EndTime: Thu Mar 1 14:15:00 2007
TotalTime: 899.67 seconds
TotalCapSize: 1043.62MB CapLen: 96 bytes
# of packets: 18740333 (12764.17MB)
AvgRate: 119.02Mbps stddev:19.70M

IP flow (unique src/dst pair) Information

# of flows: 591880 (avg. 31.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.6% 1.5% 1.4% 1.4% 1.1% 1.0% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 358145
Top 10 bandwidth usage (bytes/total in %):
16.5% 7.8% 7.1% 3.6% 3.3% 2.2% 2.1% 1.8% 1.7% 1.6%
# of IPv6 addresses: 1685
Top 10 bandwidth usage (bytes/total in %):
37.2% 28.2% 28.2% 19.4% 17.3% 5.6% 5.6% 4.7% 2.5% 2.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4393950
 [   64-  127]:    4736440
 [  128-  255]:     506392
 [  256-  511]:     422370
 [  512- 1023]:     437775
 [ 1024- 2047]:    8243406


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         18740333 (100.00%)      13384205370 (100.00%)    714.19
 ip            18533976 ( 98.90%)      13344623255 ( 99.70%)    720.01
  tcp          16217936 ( 86.54%)      12985379630 ( 97.02%)    800.68
   http(s)      7331463 ( 39.12%)       9778990862 ( 73.06%)   1333.84
   http(c)      4501579 ( 24.02%)        543129064 (  4.06%)    120.65
   squid         402585 (  2.15%)        279165620 (  2.09%)    693.43
   smtp          415673 (  2.22%)         93571871 (  0.70%)    225.11
   nntp           69861 (  0.37%)         74029077 (  0.55%)   1059.66
   ftp            69244 (  0.37%)         56344334 (  0.42%)    813.71
   pop3            7221 (  0.04%)          2044657 (  0.02%)    283.15
   imap            4760 (  0.03%)          1196639 (  0.01%)    251.39
   telnet           402 (  0.00%)            37884 (  0.00%)     94.24
   ssh            49319 (  0.26%)         27983716 (  0.21%)    567.40
   dns             6124 (  0.03%)          7137935 (  0.05%)   1165.57
   bgp             1246 (  0.01%)           157933 (  0.00%)    126.75
   napster           59 (  0.00%)             3658 (  0.00%)     62.00
   realaud         1331 (  0.01%)           343531 (  0.00%)    258.10
   rtsp          112286 (  0.60%)         70228170 (  0.52%)    625.44
   icecast         4085 (  0.02%)           252070 (  0.00%)     61.71
   other        3240691 ( 17.29%)       2050762189 ( 15.32%)    632.82
  udp           1609097 (  8.59%)        274516122 (  2.05%)    170.60
   dns          1183917 (  6.32%)        162964707 (  1.22%)    137.65
   realaud         5539 (  0.03%)          2207618 (  0.02%)    398.56
   halflif            9 (  0.00%)             1101 (  0.00%)    122.33
   starcra            5 (  0.00%)              495 (  0.00%)     99.00
   everque          232 (  0.00%)           241532 (  0.00%)   1041.09
   unreal             4 (  0.00%)              343 (  0.00%)     85.75
   quake             17 (  0.00%)             1710 (  0.00%)    100.59
   cuseeme            2 (  0.00%)              175 (  0.00%)     87.50
   other         418506 (  2.23%)        108672579 (  0.81%)    259.67
  icmp           465948 (  2.49%)         37431714 (  0.28%)     80.33
  ipip              351 (  0.00%)            42914 (  0.00%)    122.26
  ip6              6959 (  0.04%)          7133282 (  0.05%)   1025.04
  other          233685 (  1.25%)         40119593 (  0.30%)    171.68
  frag             6776 (  0.04%)          7138132 (  0.05%)   1053.44
 ip6             206354 (  1.10%)         39581935 (  0.30%)    191.82
  tcp6           140393 (  0.75%)         16187172 (  0.12%)    115.30
   http(s)         2662 (  0.01%)          3229112 (  0.02%)   1213.04
   http(c)         2209 (  0.01%)           230710 (  0.00%)    104.44
   squid             68 (  0.00%)             5032 (  0.00%)     74.00
   smtp             575 (  0.00%)           150711 (  0.00%)    262.11
   nntp          121109 (  0.65%)         11152135 (  0.08%)     92.08
   pop3               6 (  0.00%)              564 (  0.00%)     94.00
   imap              22 (  0.00%)             2581 (  0.00%)    117.32
   ssh              928 (  0.00%)           181499 (  0.00%)    195.58
   dns               11 (  0.00%)             1244 (  0.00%)    113.09
   bgp              133 (  0.00%)            14700 (  0.00%)    110.53
   icecast           33 (  0.00%)             2442 (  0.00%)     74.00
   other          12637 (  0.07%)          1216442 (  0.01%)     96.26
  udp6            43616 (  0.23%)          7337400 (  0.05%)    168.23
   dns            43256 (  0.23%)          7303240 (  0.05%)    168.84
   other            360 (  0.00%)            34160 (  0.00%)     94.89
  icmp6           16415 (  0.09%)          8277474 (  0.06%)    504.26
  ip6               510 (  0.00%)            80689 (  0.00%)    158.21
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           5390 (  0.03%)          7695120 (  0.06%)   1427.67


tcpdump file: 200703011400.dump.gz (489.76 MB)