Traffic Trace Info


DumpFile: 200703061400.dump
FileSize: 1221.13MB
Id: 200703061400
StartTime: Tue Mar 6 14:00:00 2007
EndTime: Tue Mar 6 14:15:00 2007
TotalTime: 899.76 seconds
TotalCapSize: 954.91MB CapLen: 96 bytes
# of packets: 17446713 (11478.21MB)
AvgRate: 107.01Mbps stddev:15.95M

IP flow (unique src/dst pair) Information

# of flows: 612252 (avg. 28.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 1.6% 1.5% 1.3% 1.2% 0.9% 0.8% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 349719
Top 10 bandwidth usage (bytes/total in %):
11.4% 7.1% 6.9% 6.4% 6.3% 3.6% 3.0% 2.8% 2.7% 2.7%
# of IPv6 addresses: 1463
Top 10 bandwidth usage (bytes/total in %):
34.5% 34.5% 9.4% 7.6% 6.9% 4.3% 4.3% 4.1% 3.7% 2.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4142900
 [   64-  127]:    4328045
 [  128-  255]:     646492
 [  256-  511]:     473814
 [  512- 1023]:     551470
 [ 1024- 2047]:    7303992


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         17446713 (100.00%)      12035778114 (100.00%)    689.86
 ip            17371149 ( 99.57%)      12018844687 ( 99.86%)    691.89
  tcp          15112290 ( 86.62%)      11680911821 ( 97.05%)    772.94
   http(s)      6114608 ( 35.05%)       7969929004 ( 66.22%)   1303.42
   http(c)      3828026 ( 21.94%)        496963497 (  4.13%)    129.82
   squid         359686 (  2.06%)        168057960 (  1.40%)    467.24
   smtp          391117 (  2.24%)         92646379 (  0.77%)    236.88
   nntp           12320 (  0.07%)          6774045 (  0.06%)    549.84
   ftp            35816 (  0.21%)          3597287 (  0.03%)    100.44
   pop3            9779 (  0.06%)          3836428 (  0.03%)    392.31
   imap            6588 (  0.04%)          2646515 (  0.02%)    401.72
   telnet          1728 (  0.01%)           308196 (  0.00%)    178.35
   ssh            20673 (  0.12%)         11454006 (  0.10%)    554.06
   dns             5837 (  0.03%)          3670588 (  0.03%)    628.85
   bgp             1004 (  0.01%)           129885 (  0.00%)    129.37
   napster         5960 (  0.03%)          4328883 (  0.04%)    726.32
   realaud           89 (  0.00%)            10753 (  0.00%)    120.82
   rtsp          316661 (  1.82%)        269997440 (  2.24%)    852.64
   icecast         4497 (  0.03%)           379548 (  0.00%)     84.40
   other        3997885 ( 22.91%)       2646180403 ( 21.99%)    661.90
  udp           1829963 ( 10.49%)        285766407 (  2.37%)    156.16
   dns          1373357 (  7.87%)        175439360 (  1.46%)    127.74
   realaud          395 (  0.00%)            25008 (  0.00%)     63.31
   halflif           26 (  0.00%)             3914 (  0.00%)    150.54
   starcra            8 (  0.00%)             1121 (  0.00%)    140.12
   everque           26 (  0.00%)             4388 (  0.00%)    168.77
   unreal             5 (  0.00%)              773 (  0.00%)    154.60
   quake          88111 (  0.51%)         17702313 (  0.15%)    200.91
   cuseeme            4 (  0.00%)              370 (  0.00%)     92.50
   other         367923 (  2.11%)         92566949 (  0.77%)    251.59
  icmp           257553 (  1.48%)         22250691 (  0.18%)     86.39
  ipip              347 (  0.00%)            42826 (  0.00%)    123.42
  ip6               743 (  0.00%)            89490 (  0.00%)    120.44
  other          170253 (  0.98%)         29783452 (  0.25%)    174.94
  frag             1690 (  0.01%)          1855554 (  0.02%)   1097.96
 ip6              75561 (  0.43%)         16933247 (  0.14%)    224.10
  tcp6            13571 (  0.08%)          7980628 (  0.07%)    588.06
   http(s)          541 (  0.00%)           436450 (  0.00%)    806.75
   http(c)         1655 (  0.01%)           236080 (  0.00%)    142.65
   squid             60 (  0.00%)             4440 (  0.00%)     74.00
   smtp             252 (  0.00%)            66654 (  0.00%)    264.50
   ftp               90 (  0.00%)            10875 (  0.00%)    120.83
   pop3              48 (  0.00%)             4356 (  0.00%)     90.75
   ssh              191 (  0.00%)            67209 (  0.00%)    351.88
   dns               28 (  0.00%)             2533 (  0.00%)     90.46
   bgp              120 (  0.00%)            12420 (  0.00%)    103.50
   icecast           28 (  0.00%)             2072 (  0.00%)     74.00
   other          10558 (  0.06%)          7137539 (  0.06%)    676.03
  udp6            49554 (  0.28%)          7279381 (  0.06%)    146.90
   dns            49359 (  0.28%)          7257911 (  0.06%)    147.04
   other            195 (  0.00%)            21470 (  0.00%)    110.10
  icmp6            8761 (  0.05%)          1167553 (  0.01%)    133.27
  ip6               286 (  0.00%)            48155 (  0.00%)    168.37
  ipsec6           3355 (  0.02%)           447878 (  0.00%)    133.50
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              4 (  0.00%)             5572 (  0.00%)   1393.00


tcpdump file: 200703061400.dump.gz (453.76 MB)