Traffic Trace Info


DumpFile: 200703231400.dump
FileSize: 1161.54MB
Id: 200703231400
StartTime: Fri Mar 23 14:00:00 2007
EndTime: Fri Mar 23 14:15:01 2007
TotalTime: 900.66 seconds
TotalCapSize: 908.31MB CapLen: 96 bytes
# of packets: 16594956 (10783.88MB)
AvgRate: 100.44Mbps stddev:15.59M

IP flow (unique src/dst pair) Information

# of flows: 481765 (avg. 34.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 1.7% 1.6% 1.3% 1.1% 1.0% 0.8% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 230621
Top 10 bandwidth usage (bytes/total in %):
17.1% 9.7% 5.7% 4.8% 4.6% 4.6% 3.1% 2.5% 1.8% 1.8%
# of IPv6 addresses: 1384
Top 10 bandwidth usage (bytes/total in %):
31.7% 31.6% 11.6% 8.2% 6.5% 5.4% 5.2% 4.6% 4.5% 4.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3736203
 [   64-  127]:    4561641
 [  128-  255]:     601199
 [  256-  511]:     431798
 [  512- 1023]:     387448
 [ 1024- 2047]:    6876667


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         16594956 (100.00%)      11307721376 (100.00%)    681.40
 ip            16493778 ( 99.39%)      11286755773 ( 99.81%)    684.30
  tcp          14133907 ( 85.17%)      10894937299 ( 96.35%)    770.84
   http(s)      5546407 ( 33.42%)       7313749578 ( 64.68%)   1318.65
   http(c)      4364353 ( 26.30%)        494969468 (  4.38%)    113.41
   squid         705107 (  4.25%)        642603625 (  5.68%)    911.36
   smtp          489779 (  2.95%)        149529558 (  1.32%)    305.30
   nntp            2377 (  0.01%)           325316 (  0.00%)    136.86
   ftp            51837 (  0.31%)         38828617 (  0.34%)    749.05
   pop3           12002 (  0.07%)          6356956 (  0.06%)    529.66
   imap           27570 (  0.17%)         24022767 (  0.21%)    871.34
   telnet           996 (  0.01%)           103700 (  0.00%)    104.12
   ssh            35125 (  0.21%)          6300084 (  0.06%)    179.36
   dns             8162 (  0.05%)           509059 (  0.00%)     62.37
   bgp             1320 (  0.01%)           162733 (  0.00%)    123.28
   napster           26 (  0.00%)             1608 (  0.00%)     61.85
   rtsp          154634 (  0.93%)        213610125 (  1.89%)   1381.39
   icecast        23165 (  0.14%)         16087330 (  0.14%)    694.47
   hotline            2 (  0.00%)              120 (  0.00%)     60.00
   other        2711034 ( 16.34%)       1987775951 ( 17.58%)    733.22
  udp           1665270 ( 10.03%)        250500362 (  2.22%)    150.43
   dns          1197601 (  7.22%)        157559237 (  1.39%)    131.56
   realaud        33535 (  0.20%)         16903259 (  0.15%)    504.05
   halflif           13 (  0.00%)             1539 (  0.00%)    118.38
   starcra            7 (  0.00%)              881 (  0.00%)    125.86
   everque           34 (  0.00%)             4716 (  0.00%)    138.71
   unreal             6 (  0.00%)             1113 (  0.00%)    185.50
   quake              6 (  0.00%)              472 (  0.00%)     78.67
   cuseeme            6 (  0.00%)              545 (  0.00%)     90.83
   other         434017 (  2.62%)         76023418 (  0.67%)    175.16
  icmp           243514 (  1.47%)         21506399 (  0.19%)     88.32
  ipip              337 (  0.00%)            40750 (  0.00%)    120.92
  ip6               658 (  0.00%)            98392 (  0.00%)    149.53
  other          450092 (  2.71%)        119672571 (  1.06%)    265.88
  frag              806 (  0.00%)           657136 (  0.01%)    815.31
 ip6             101175 (  0.61%)         20965423 (  0.19%)    207.22
  tcp6            25821 (  0.16%)          8989452 (  0.08%)    348.14
   http(s)            6 (  0.00%)             1111 (  0.00%)    185.17
   http(c)        11496 (  0.07%)          1379240 (  0.01%)    119.98
   squid              5 (  0.00%)              705 (  0.00%)    141.00
   smtp             344 (  0.00%)           110494 (  0.00%)    321.20
   ftp               18 (  0.00%)             1670 (  0.00%)     92.78
   pop3              37 (  0.00%)             3330 (  0.00%)     90.00
   ssh             1484 (  0.01%)           276552 (  0.00%)    186.36
   bgp              120 (  0.00%)            12420 (  0.00%)    103.50
   other          12311 (  0.07%)          7203930 (  0.06%)    585.16
  udp6            60266 (  0.36%)          9896843 (  0.09%)    164.22
   dns            60159 (  0.36%)          9879411 (  0.09%)    164.22
   other            107 (  0.00%)            17432 (  0.00%)    162.92
  icmp6           10531 (  0.06%)          1454213 (  0.01%)    138.09
  ipsec6           4498 (  0.03%)           594268 (  0.01%)    132.12
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6             28 (  0.00%)            26431 (  0.00%)    943.96


tcpdump file: 200703231400.dump.gz (445.88 MB)