Traffic Trace Info


DumpFile: 200703181400.dump
FileSize: 791.99MB
Id: 200703181400
StartTime: Sun Mar 18 14:00:01 2007
EndTime: Sun Mar 18 14:15:00 2007
TotalTime: 899.70 seconds
TotalCapSize: 618.59MB CapLen: 96 bytes
# of packets: 11363505 (6323.24MB)
AvgRate: 58.96Mbps stddev:6.01M

IP flow (unique src/dst pair) Information

# of flows: 432040 (avg. 26.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.7% 1.4% 1.4% 1.3% 0.9% 0.8% 0.8% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 263103
Top 10 bandwidth usage (bytes/total in %):
16.5% 14.3% 9.4% 7.6% 5.9% 4.0% 3.0% 2.1% 2.0% 1.5%
# of IPv6 addresses: 1130
Top 10 bandwidth usage (bytes/total in %):
30.9% 30.7% 16.5% 9.6% 7.4% 6.7% 6.3% 6.1% 5.1% 4.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2256217
 [   64-  127]:    3977290
 [  128-  255]:     539024
 [  256-  511]:     385812
 [  512- 1023]:     315333
 [ 1024- 2047]:    3889829


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         11363505 (100.00%)       6630402499 (100.00%)    583.48
 ip            11315172 ( 99.57%)       6619561768 ( 99.84%)    585.02
  tcp           9278920 ( 81.66%)       6196695170 ( 93.46%)    667.83
   http(s)      2874311 ( 25.29%)       3846637978 ( 58.02%)   1338.28
   http(c)      1869021 ( 16.45%)        201270731 (  3.04%)    107.69
   squid         153842 (  1.35%)         26878971 (  0.41%)    174.72
   smtp          261370 (  2.30%)         52181025 (  0.79%)    199.64
   nntp           12368 (  0.11%)          3904113 (  0.06%)    315.66
   ftp           228841 (  2.01%)         28016270 (  0.42%)    122.43
   pop3            3477 (  0.03%)          1637174 (  0.02%)    470.86
   imap            3121 (  0.03%)          1319499 (  0.02%)    422.78
   telnet           585 (  0.01%)            37857 (  0.00%)     64.71
   ssh           551140 (  4.85%)        101928016 (  1.54%)    184.94
   dns             1835 (  0.02%)          1721572 (  0.03%)    938.19
   bgp             1068 (  0.01%)           133493 (  0.00%)    124.99
   napster         2783 (  0.02%)          1556929 (  0.02%)    559.44
   rtsp           75933 (  0.67%)         19316738 (  0.29%)    254.39
   icecast         1431 (  0.01%)          1943815 (  0.03%)   1358.36
   other        3237792 ( 28.49%)       1908210869 ( 28.78%)    589.36
  udp           1423550 ( 12.53%)        256953431 (  3.88%)    180.50
   dns           923831 (  8.13%)        110862572 (  1.67%)    120.00
   rip                3 (  0.00%)              294 (  0.00%)     98.00
   realaud         8458 (  0.07%)          3133950 (  0.05%)    370.53
   halflif            4 (  0.00%)              320 (  0.00%)     80.00
   starcra            7 (  0.00%)              938 (  0.00%)    134.00
   everque           13 (  0.00%)             1765 (  0.00%)    135.77
   unreal             7 (  0.00%)              910 (  0.00%)    130.00
   quake          53386 (  0.47%)          9712818 (  0.15%)    181.94
   cuseeme            6 (  0.00%)              576 (  0.00%)     96.00
   other         437833 (  3.85%)        133239026 (  2.01%)    304.31
  icmp           263715 (  2.32%)         63915044 (  0.96%)    242.36
  ipip              348 (  0.00%)            42136 (  0.00%)    121.08
  ip6               641 (  0.01%)            79722 (  0.00%)    124.37
  other          347998 (  3.06%)        101876265 (  1.54%)    292.75
  frag             1137 (  0.01%)           932806 (  0.01%)    820.41
 ip6              48330 (  0.43%)         10840551 (  0.16%)    224.30
  tcp6            11967 (  0.11%)          4582610 (  0.07%)    382.94
   http(c)         8656 (  0.08%)          1094939 (  0.02%)    126.49
   smtp             218 (  0.00%)            63379 (  0.00%)    290.73
   ftp               29 (  0.00%)             4469 (  0.00%)    154.10
   ssh                3 (  0.00%)              258 (  0.00%)     86.00
   bgp              120 (  0.00%)            12420 (  0.00%)    103.50
   other           2941 (  0.03%)          3407145 (  0.05%)   1158.50
  udp6            28711 (  0.25%)          5200667 (  0.08%)    181.14
   dns            28654 (  0.25%)          5194397 (  0.08%)    181.28
   other             57 (  0.00%)             6270 (  0.00%)    110.00
  icmp6            7432 (  0.07%)          1007094 (  0.02%)    135.51
  ip6               172 (  0.00%)            27787 (  0.00%)    161.55
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             18 (  0.00%)            18313 (  0.00%)   1017.39


tcpdump file: 200703181400.dump.gz (306.22 MB)