Traffic Trace Info


DumpFile: 200704061400.dump
FileSize: 1170.86MB
Id: 200704061400
StartTime: Fri Apr 6 14:00:00 2007
EndTime: Fri Apr 6 14:15:00 2007
TotalTime: 899.87 seconds
TotalCapSize: 878.57MB CapLen: 96 bytes
# of packets: 16228107 (10358.80MB)
AvgRate: 96.58Mbps stddev:10.14M

IP flow (unique src/dst pair) Information

# of flows: 544772 (avg. 29.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.1% 3.7% 2.1% 1.0% 0.9% 0.8% 0.7% 0.6% 0.6% 0.5%

IP address Information

# of IPv4 addresses: 303198
Top 10 bandwidth usage (bytes/total in %):
12.3% 11.7% 10.4% 10.4% 5.9% 3.8% 3.8% 2.8% 2.4% 2.4%
# of IPv6 addresses: 3872
Top 10 bandwidth usage (bytes/total in %):
66.7% 66.7% 7.9% 4.6% 3.0% 1.8% 1.7% 1.5% 1.5% 1.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4376611
 [   64-  127]:    3916199
 [  128-  255]:     497697
 [  256-  511]:     415844
 [  512- 1023]:     467188
 [ 1024- 2047]:    6554568


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         16228107 (100.00%)      10861986357 (100.00%)    669.33
 ip            16102167 ( 99.22%)      10812762731 ( 99.55%)    671.51
  tcp          13645392 ( 84.08%)      10246009744 ( 94.33%)    750.88
   http(s)      6481251 ( 39.94%)       8509452656 ( 78.34%)   1312.93
   http(c)      4729021 ( 29.14%)        480640731 (  4.42%)    101.64
   squid         166283 (  1.02%)         42736757 (  0.39%)    257.01
   smtp          392628 (  2.42%)        104107565 (  0.96%)    265.16
   nntp             166 (  0.00%)            12266 (  0.00%)     73.89
   ftp           168425 (  1.04%)        106338495 (  0.98%)    631.37
   pop3            9793 (  0.06%)          4783640 (  0.04%)    488.48
   imap            5987 (  0.04%)          2640735 (  0.02%)    441.08
   telnet           906 (  0.01%)            73485 (  0.00%)     81.11
   ssh            25604 (  0.16%)          3122466 (  0.03%)    121.95
   dns             1163 (  0.01%)            97322 (  0.00%)     83.68
   bgp              857 (  0.01%)           104141 (  0.00%)    121.52
   napster           10 (  0.00%)              674 (  0.00%)     67.40
   realaud          115 (  0.00%)            19134 (  0.00%)    166.38
   rtsp           52319 (  0.32%)         59934782 (  0.55%)   1145.56
   icecast           59 (  0.00%)             6485 (  0.00%)    109.92
   hotline            2 (  0.00%)              355 (  0.00%)    177.50
   other        1610795 (  9.93%)        931937575 (  8.58%)    578.56
  udp           2182884 ( 13.45%)        527548863 (  4.86%)    241.68
   dns          1140434 (  7.03%)        147915049 (  1.36%)    129.70
   rip                1 (  0.00%)              105 (  0.00%)    105.00
   realaud        12185 (  0.08%)          7530336 (  0.07%)    618.00
   halflif           15 (  0.00%)             2032 (  0.00%)    135.47
   starcra           20 (  0.00%)             3265 (  0.00%)    163.25
   everque           17 (  0.00%)             2339 (  0.00%)    137.59
   unreal            17 (  0.00%)             2464 (  0.00%)    144.94
   quake             49 (  0.00%)             7080 (  0.00%)    144.49
   cuseeme            5 (  0.00%)              593 (  0.00%)    118.60
   other        1029736 (  6.35%)        372058872 (  3.43%)    361.31
  icmp           162079 (  1.00%)         15558531 (  0.14%)     95.99
  ipip              337 (  0.00%)            39986 (  0.00%)    118.65
  ip6               821 (  0.01%)           123143 (  0.00%)    149.99
  sctp               85 (  0.00%)            13900 (  0.00%)    163.53
  other          110569 (  0.68%)         23468564 (  0.22%)    212.25
  frag           179483 (  1.11%)        124241803 (  1.14%)    692.22
 ip6             125937 (  0.78%)         49223446 (  0.45%)    390.86
  tcp6            45932 (  0.28%)         36156610 (  0.33%)    787.18
   http(s)          775 (  0.00%)           618670 (  0.01%)    798.28
   http(c)        13909 (  0.09%)          1531031 (  0.01%)    110.07
   smtp             150 (  0.00%)            45742 (  0.00%)    304.95
   nntp            3059 (  0.02%)           452222 (  0.00%)    147.83
   ssh               16 (  0.00%)             1964 (  0.00%)    122.75
   bgp              208 (  0.00%)            40870 (  0.00%)    196.49
   other          27815 (  0.17%)         33466111 (  0.31%)   1203.17
  udp6            35839 (  0.22%)          7247171 (  0.07%)    202.21
   dns            35780 (  0.22%)          7240681 (  0.07%)    202.37
   other             59 (  0.00%)             6490 (  0.00%)    110.00
  icmp6           43823 (  0.27%)          5765465 (  0.05%)    131.56
  ip6               313 (  0.00%)            50120 (  0.00%)    160.13
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200704061400.dump.gz (411.10 MB)