Traffic Trace Info


DumpFile: 200704121400.dump
FileSize: 1634.54MB
Id: 200704121400
StartTime: Thu Apr 12 14:00:01 2007
EndTime: Thu Apr 12 14:15:01 2007
TotalTime: 899.99 seconds
TotalCapSize: 1276.23MB CapLen: 96 bytes
# of packets: 23481099 (14782.75MB)
AvgRate: 137.78Mbps stddev:13.09M

IP flow (unique src/dst pair) Information

# of flows: 695093 (avg. 33.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 4.3% 1.6% 1.3% 1.2% 1.2% 1.0% 0.9% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 400826
Top 10 bandwidth usage (bytes/total in %):
9.5% 7.5% 6.6% 6.3% 6.0% 4.8% 4.5% 2.6% 2.6% 2.2%
# of IPv6 addresses: 1429
Top 10 bandwidth usage (bytes/total in %):
81.5% 81.4% 4.5% 3.3% 3.0% 2.5% 2.5% 1.1% 1.0% 0.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6524590
 [   64-  127]:    5348696
 [  128-  255]:    1008590
 [  256-  511]:     643327
 [  512- 1023]:     560619
 [ 1024- 2047]:    9395277


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         23481099 (100.00%)      15500837150 (100.00%)    660.14
 ip            23300283 ( 99.23%)      15404374359 ( 99.38%)    661.12
  tcp          20414700 ( 86.94%)      14843353340 ( 95.76%)    727.09
   http(s)      7506543 ( 31.97%)       9830563065 ( 63.42%)   1309.60
   http(c)      5712240 ( 24.33%)        783990228 (  5.06%)    137.25
   squid         243285 (  1.04%)         81783355 (  0.53%)    336.16
   smtp          512021 (  2.18%)        137721572 (  0.89%)    268.98
   nntp             189 (  0.00%)            14107 (  0.00%)     74.64
   ftp           307164 (  1.31%)        238216939 (  1.54%)    775.54
   pop3           11194 (  0.05%)          5415635 (  0.03%)    483.80
   imap            6789 (  0.03%)          2954346 (  0.02%)    435.17
   telnet           993 (  0.00%)           115088 (  0.00%)    115.90
   ssh             3165 (  0.01%)           586429 (  0.00%)    185.29
   dns            21500 (  0.09%)          1382414 (  0.01%)     64.30
   bgp             1049 (  0.00%)           133701 (  0.00%)    127.46
   napster          150 (  0.00%)            19660 (  0.00%)    131.07
   realaud          383 (  0.00%)           102378 (  0.00%)    267.31
   rtsp          107395 (  0.46%)         45067616 (  0.29%)    419.64
   icecast        33494 (  0.14%)         39992889 (  0.26%)   1194.03
   hotline            5 (  0.00%)              507 (  0.00%)    101.40
   other        5946915 ( 25.33%)       3675279851 ( 23.71%)    618.01
  udp           2169587 (  9.24%)        417281523 (  2.69%)    192.33
   dns          1181402 (  5.03%)        162181593 (  1.05%)    137.28
   realaud         6298 (  0.03%)          1619545 (  0.01%)    257.15
   halflif           28 (  0.00%)             3718 (  0.00%)    132.79
   starcra           11 (  0.00%)             1503 (  0.00%)    136.64
   everque           37 (  0.00%)             4829 (  0.00%)    130.51
   unreal            94 (  0.00%)             8199 (  0.00%)     87.22
   quake          11980 (  0.05%)          2084995 (  0.01%)    174.04
   cuseeme           10 (  0.00%)              913 (  0.00%)     91.30
   other         969713 (  4.13%)        251369326 (  1.62%)    259.22
  icmp           323504 (  1.38%)         30232381 (  0.20%)     93.45
  ipip              345 (  0.00%)            41110 (  0.00%)    119.16
  ip6               820 (  0.00%)           103755 (  0.00%)    126.53
  other          391327 (  1.67%)        113362250 (  0.73%)    289.69
  frag             2489 (  0.01%)          2489585 (  0.02%)   1000.24
 ip6             180816 (  0.77%)         96462791 (  0.62%)    533.49
  tcp6           111079 (  0.47%)         84495616 (  0.55%)    760.68
   http(s)          182 (  0.00%)           152205 (  0.00%)    836.29
   http(c)        43595 (  0.19%)          4285011 (  0.03%)     98.29
   smtp             559 (  0.00%)           191424 (  0.00%)    342.44
   nntp            6581 (  0.03%)           622183 (  0.00%)     94.54
   ftp               16 (  0.00%)             1545 (  0.00%)     96.56
   ssh               60 (  0.00%)             4560 (  0.00%)     76.00
   bgp              155 (  0.00%)            15150 (  0.00%)     97.74
   other          59931 (  0.26%)         79223538 (  0.51%)   1321.91
  udp6            41432 (  0.18%)          8140613 (  0.05%)    196.48
   dns            41365 (  0.18%)          8133243 (  0.05%)    196.62
   other             67 (  0.00%)             7370 (  0.00%)    110.00
  icmp6           11534 (  0.05%)          1357717 (  0.01%)    117.71
  ip6             16739 (  0.07%)          2464436 (  0.02%)    147.23
  pim6               31 (  0.00%)             4176 (  0.00%)    134.71
  other6              1 (  0.00%)              233 (  0.00%)    233.00


tcpdump file: 200704121400.dump.gz (598.38 MB)