Traffic Trace Info


DumpFile: 200704111400.dump
FileSize: 1489.01MB
Id: 200704111400
StartTime: Wed Apr 11 14:00:00 2007
EndTime: Wed Apr 11 14:15:00 2007
TotalTime: 900.27 seconds
TotalCapSize: 1166.96MB CapLen: 96 bytes
# of packets: 21104839 (14417.83MB)
AvgRate: 134.33Mbps stddev:21.07M

IP flow (unique src/dst pair) Information

# of flows: 651287 (avg. 32.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.2% 3.1% 1.7% 1.6% 0.9% 0.9% 0.7% 0.7% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 339978
Top 10 bandwidth usage (bytes/total in %):
12.2% 12.2% 9.4% 6.9% 5.6% 3.4% 3.2% 3.2% 1.8% 1.8%
# of IPv6 addresses: 1537
Top 10 bandwidth usage (bytes/total in %):
76.0% 63.4% 12.6% 3.6% 3.6% 3.6% 2.0% 1.6% 1.5% 1.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5140067
 [   64-  127]:    4945031
 [  128-  255]:     641734
 [  256-  511]:     539965
 [  512- 1023]:     504721
 [ 1024- 2047]:    9333321


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         21104839 (100.00%)      15118188248 (100.00%)    716.34
 ip            20967626 ( 99.35%)      15051593173 ( 99.56%)    717.85
  tcp          18321082 ( 86.81%)      14679769633 ( 97.10%)    801.25
   http(s)      7486022 ( 35.47%)       9972791505 ( 65.97%)   1332.19
   http(c)      5811801 ( 27.54%)        698943518 (  4.62%)    120.26
   squid         114096 (  0.54%)         46175206 (  0.31%)    404.70
   smtp          510143 (  2.42%)        110641785 (  0.73%)    216.88
   nntp             173 (  0.00%)            12622 (  0.00%)     72.96
   ftp            98375 (  0.47%)         71762318 (  0.47%)    729.48
   pop3            9780 (  0.05%)          3166266 (  0.02%)    323.75
   imap            6222 (  0.03%)          2620070 (  0.02%)    421.10
   telnet          2185 (  0.01%)           243149 (  0.00%)    111.28
   ssh            18987 (  0.09%)         23868646 (  0.16%)   1257.10
   dns             1943 (  0.01%)           145378 (  0.00%)     74.82
   bgp             1032 (  0.00%)           120369 (  0.00%)    116.64
   napster         1126 (  0.01%)           528424 (  0.00%)    469.29
   realaud          281 (  0.00%)           142182 (  0.00%)    505.99
   rtsp           98837 (  0.47%)        105304852 (  0.70%)   1065.44
   icecast        48103 (  0.23%)         53694103 (  0.36%)   1116.23
   hotline            1 (  0.00%)               62 (  0.00%)     62.00
   other        4111970 ( 19.48%)       3589608834 ( 23.74%)    872.97
  udp           2000707 (  9.48%)        301643373 (  2.00%)    150.77
   dns          1296837 (  6.14%)        175550158 (  1.16%)    135.37
   realaud        13141 (  0.06%)          6955990 (  0.05%)    529.33
   halflif            5 (  0.00%)             1170 (  0.00%)    234.00
   starcra            5 (  0.00%)             1214 (  0.00%)    242.80
   everque           15 (  0.00%)             1704 (  0.00%)    113.60
   unreal            23 (  0.00%)             3239 (  0.00%)    140.83
   quake          14470 (  0.07%)          3840746 (  0.03%)    265.43
   cuseeme            2 (  0.00%)              141 (  0.00%)     70.50
   other         676190 (  3.20%)        115284756 (  0.76%)    170.49
  icmp           428325 (  2.03%)         38884862 (  0.26%)     90.78
  ipip              357 (  0.00%)            41570 (  0.00%)    116.44
  ip6               841 (  0.00%)           114868 (  0.00%)    136.59
  other          216314 (  1.02%)         31138867 (  0.21%)    143.95
  frag             2129 (  0.01%)          2281970 (  0.02%)   1071.85
 ip6             137210 (  0.65%)         66594895 (  0.44%)    485.35
  tcp6            57643 (  0.27%)         53352707 (  0.35%)    925.57
   http(s)         6165 (  0.03%)          8412765 (  0.06%)   1364.60
   http(c)        12711 (  0.06%)          1450026 (  0.01%)    114.08
   squid              6 (  0.00%)              468 (  0.00%)     78.00
   smtp             479 (  0.00%)           117440 (  0.00%)    245.18
   nntp            4881 (  0.02%)           531291 (  0.00%)    108.85
   ftp               50 (  0.00%)             5018 (  0.00%)    100.36
   ssh               15 (  0.00%)             1110 (  0.00%)     74.00
   bgp              199 (  0.00%)            25718 (  0.00%)    129.24
   other          33137 (  0.16%)         42808871 (  0.28%)   1291.88
  udp6            49980 (  0.24%)          9065681 (  0.06%)    181.39
   dns            49886 (  0.24%)          9056621 (  0.06%)    181.55
   other             94 (  0.00%)             9060 (  0.00%)     96.38
  icmp6           13941 (  0.07%)          1762633 (  0.01%)    126.44
  ip6             15616 (  0.07%)          2409794 (  0.02%)    154.32
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200704111400.dump.gz (544.94 MB)