Traffic Trace Info


DumpFile: 200703311400.dump
FileSize: 1042.72MB
Id: 200703311400
StartTime: Sat Mar 31 14:00:00 2007
EndTime: Sat Mar 31 14:15:00 2007
TotalTime: 900.30 seconds
TotalCapSize: 808.74MB CapLen: 96 bytes
# of packets: 15333287 (8263.57MB)
AvgRate: 76.97Mbps stddev:9.57M

IP flow (unique src/dst pair) Information

# of flows: 490521 (avg. 31.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.6% 1.6% 1.5% 1.4% 1.1% 0.8% 0.7% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 298011
Top 10 bandwidth usage (bytes/total in %):
15.2% 12.3% 9.0% 6.3% 5.2% 4.5% 3.8% 3.8% 3.8% 2.5%
# of IPv6 addresses: 1360
Top 10 bandwidth usage (bytes/total in %):
76.4% 76.4% 3.5% 2.7% 1.5% 1.5% 1.4% 1.0% 0.9% 0.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5052064
 [   64-  127]:    3879411
 [  128-  255]:     529551
 [  256-  511]:     361182
 [  512- 1023]:     325255
 [ 1024- 2047]:    5185824


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         15333287 (100.00%)       8664980165 (100.00%)    565.11
 ip            15252101 ( 99.47%)       8628718605 ( 99.58%)    565.74
  tcp          10848332 ( 70.75%)       7845403768 ( 90.54%)    723.19
   http(s)      3648503 ( 23.79%)       4898139634 ( 56.53%)   1342.51
   http(c)      2687386 ( 17.53%)        282217262 (  3.26%)    105.02
   squid         607556 (  3.96%)        377209531 (  4.35%)    620.86
   smtp          248728 (  1.62%)         48755058 (  0.56%)    196.02
   nntp             150 (  0.00%)            11087 (  0.00%)     73.91
   ftp            40415 (  0.26%)          3300638 (  0.04%)     81.67
   pop3            3838 (  0.03%)          1885103 (  0.02%)    491.17
   imap            2508 (  0.02%)          1164278 (  0.01%)    464.23
   telnet           426 (  0.00%)            41607 (  0.00%)     97.67
   ssh           441186 (  2.88%)         48598900 (  0.56%)    110.16
   dns             1254 (  0.01%)           103758 (  0.00%)     82.74
   bgp              923 (  0.01%)           108484 (  0.00%)    117.53
   napster          155 (  0.00%)            72276 (  0.00%)    466.30
   realaud          571 (  0.00%)            67693 (  0.00%)    118.55
   rtsp           60785 (  0.40%)         43613995 (  0.50%)    717.51
   icecast         2315 (  0.02%)           398478 (  0.00%)    172.13
   other        3101606 ( 20.23%)       2139714232 ( 24.69%)    689.87
  udp           3956098 ( 25.80%)        729460330 (  8.42%)    184.39
   dns          1054515 (  6.88%)        135818805 (  1.57%)    128.80
   realaud          952 (  0.01%)            60527 (  0.00%)     63.58
   halflif           28 (  0.00%)             3276 (  0.00%)    117.00
   starcra            4 (  0.00%)              376 (  0.00%)     94.00
   everque            8 (  0.00%)             1204 (  0.00%)    150.50
   unreal             4 (  0.00%)              351 (  0.00%)     87.75
   quake             55 (  0.00%)            12531 (  0.00%)    227.84
   cuseeme            1 (  0.00%)               71 (  0.00%)     71.00
   other        2900341 ( 18.92%)        593287906 (  6.85%)    204.56
  icmp           228863 (  1.49%)         18904787 (  0.22%)     82.60
  ipip              360 (  0.00%)            42304 (  0.00%)    117.51
  ip6               927 (  0.01%)           122525 (  0.00%)    132.17
  other          217521 (  1.42%)         34784891 (  0.40%)    159.92
  frag             4237 (  0.03%)          4422380 (  0.05%)   1043.75
 ip6              81183 (  0.53%)         36261380 (  0.42%)    446.66
  tcp6            32476 (  0.21%)         29574766 (  0.34%)    910.67
   http(s)          507 (  0.00%)           361058 (  0.00%)    712.15
   http(c)         1957 (  0.01%)           263737 (  0.00%)    134.77
   smtp             323 (  0.00%)            77898 (  0.00%)    241.17
   ftp               38 (  0.00%)             4209 (  0.00%)    110.76
   telnet          4619 (  0.03%)           341820 (  0.00%)     74.00
   ssh             1300 (  0.01%)           239160 (  0.00%)    183.97
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              162 (  0.00%)            16862 (  0.00%)    104.09
   other          23563 (  0.15%)         28269387 (  0.33%)   1199.74
  udp6            37689 (  0.25%)          5235269 (  0.06%)    138.91
   dns            37613 (  0.25%)          5226857 (  0.06%)    138.96
   other             76 (  0.00%)             8412 (  0.00%)    110.68
  icmp6           10928 (  0.07%)          1432869 (  0.02%)    131.12
  ip6                53 (  0.00%)             7790 (  0.00%)    146.98
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              7 (  0.00%)             6606 (  0.00%)    943.71


tcpdump file: 200703311400.dump.gz (359.71 MB)