Traffic Trace Info


DumpFile: 200704101400.dump
FileSize: 1181.11MB
Id: 200704101400
StartTime: Tue Apr 10 14:00:01 2007
EndTime: Tue Apr 10 14:15:01 2007
TotalTime: 899.60 seconds
TotalCapSize: 923.92MB CapLen: 96 bytes
# of packets: 16854264 (10257.55MB)
AvgRate: 95.67Mbps stddev:16.81M

IP flow (unique src/dst pair) Information

# of flows: 580098 (avg. 29.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.8% 1.1% 1.1% 0.9% 0.9% 0.9% 0.9% 0.9% 0.8%

IP address Information

# of IPv4 addresses: 324808
Top 10 bandwidth usage (bytes/total in %):
13.6% 5.6% 3.2% 3.0% 2.2% 2.2% 2.1% 1.9% 1.9% 1.9%
# of IPv6 addresses: 1451
Top 10 bandwidth usage (bytes/total in %):
74.0% 74.0% 5.7% 4.3% 2.4% 1.7% 1.5% 1.4% 1.4% 1.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4505071
 [   64-  127]:    4456137
 [  128-  255]:     505909
 [  256-  511]:     498134
 [  512- 1023]:     448051
 [ 1024- 2047]:    6440962


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         16854264 (100.00%)      10755824329 (100.00%)    638.17
 ip            16752447 ( 99.40%)      10709063140 ( 99.57%)    639.25
  tcp          14214507 ( 84.34%)      10342814615 ( 96.16%)    727.62
   http(s)      6580228 ( 39.04%)       8535593887 ( 79.36%)   1297.16
   http(c)      4829923 ( 28.66%)        595599202 (  5.54%)    123.31
   squid         151162 (  0.90%)         29968456 (  0.28%)    198.25
   smtp          442752 (  2.63%)        115085744 (  1.07%)    259.93
   nntp             157 (  0.00%)            11520 (  0.00%)     73.38
   ftp            64116 (  0.38%)         35211928 (  0.33%)    549.19
   pop3           12337 (  0.07%)          3466903 (  0.03%)    281.02
   imap            6753 (  0.04%)          3030996 (  0.03%)    448.84
   telnet          1831 (  0.01%)           198866 (  0.00%)    108.61
   ssh             2003 (  0.01%)           514766 (  0.00%)    257.00
   dns             1848 (  0.01%)           149601 (  0.00%)     80.95
   bgp             1010 (  0.01%)           125515 (  0.00%)    124.27
   napster           75 (  0.00%)             9346 (  0.00%)    124.61
   realaud          400 (  0.00%)           152619 (  0.00%)    381.55
   rtsp          263593 (  1.56%)        166936049 (  1.55%)    633.31
   icecast        76302 (  0.45%)         74971496 (  0.70%)    982.56
   hotline            3 (  0.00%)              180 (  0.00%)     60.00
   other        1780007 ( 10.56%)        781787121 (  7.27%)    439.20
  udp           1893431 ( 11.23%)        285493479 (  2.65%)    150.78
   dns          1220652 (  7.24%)        160071412 (  1.49%)    131.14
   realaud         5688 (  0.03%)          2662579 (  0.02%)    468.10
   halflif           13 (  0.00%)             1827 (  0.00%)    140.54
   starcra            8 (  0.00%)             1360 (  0.00%)    170.00
   everque           29 (  0.00%)             5250 (  0.00%)    181.03
   unreal            10 (  0.00%)             1867 (  0.00%)    186.70
   quake             26 (  0.00%)             5117 (  0.00%)    196.81
   cuseeme            4 (  0.00%)              344 (  0.00%)     86.00
   other         666979 (  3.96%)        122739338 (  1.14%)    184.02
  icmp           367683 (  2.18%)         33502557 (  0.31%)     91.12
  ipip              348 (  0.00%)            41824 (  0.00%)    120.18
  ipsec              67 (  0.00%)            12210 (  0.00%)    182.24
  ip6               887 (  0.01%)           168458 (  0.00%)    189.92
  other          275524 (  1.63%)         47029997 (  0.44%)    170.69
  frag             2239 (  0.01%)          2342872 (  0.02%)   1046.39
 ip6             101814 (  0.60%)         46761009 (  0.43%)    459.28
  tcp6            55374 (  0.33%)         38684865 (  0.36%)    698.61
   http(s)          300 (  0.00%)           186654 (  0.00%)    622.18
   http(c)        25274 (  0.15%)          2936388 (  0.03%)    116.18
   squid             56 (  0.00%)             5040 (  0.00%)     90.00
   smtp             773 (  0.00%)           297083 (  0.00%)    384.32
   nntp               4 (  0.00%)              296 (  0.00%)     74.00
   ftp               30 (  0.00%)             2558 (  0.00%)     85.27
   ssh                2 (  0.00%)              160 (  0.00%)     80.00
   bgp              165 (  0.00%)            16586 (  0.00%)    100.52
   icecast           28 (  0.00%)             2520 (  0.00%)     90.00
   other          28742 (  0.17%)         35237580 (  0.33%)   1226.00
  udp6            33142 (  0.20%)          6381879 (  0.06%)    192.56
   dns            33079 (  0.20%)          6374949 (  0.06%)    192.72
   other             63 (  0.00%)             6930 (  0.00%)    110.00
  icmp6           12954 (  0.08%)          1638436 (  0.02%)    126.48
  ip6               312 (  0.00%)            49889 (  0.00%)    159.90
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              2 (  0.00%)             1860 (  0.00%)    930.00


tcpdump file: 200704101400.dump.gz (431.23 MB)