Traffic Trace Info


DumpFile: 200704131400.dump
FileSize: 1625.21MB
Id: 200704131400
StartTime: Fri Apr 13 14:00:00 2007
EndTime: Fri Apr 13 14:15:00 2007
TotalTime: 899.91 seconds
TotalCapSize: 1272.55MB CapLen: 96 bytes
# of packets: 23099769 (15212.44MB)
AvgRate: 141.79Mbps stddev:12.44M

IP flow (unique src/dst pair) Information

# of flows: 743709 (avg. 31.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 4.8% 3.0% 1.2% 0.9% 0.9% 0.7% 0.7% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 429112
Top 10 bandwidth usage (bytes/total in %):
10.9% 9.9% 7.0% 5.9% 5.6% 4.9% 3.1% 2.6% 2.4% 2.1%
# of IPv6 addresses: 1452
Top 10 bandwidth usage (bytes/total in %):
42.0% 24.5% 17.5% 12.5% 10.8% 8.0% 6.5% 6.5% 4.6% 4.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5432722
 [   64-  127]:    5773797
 [  128-  255]:     834548
 [  256-  511]:     717742
 [  512- 1023]:     709900
 [ 1024- 2047]:    9631060


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         23099769 (100.00%)      15951397296 (100.00%)    690.54
 ip            22983446 ( 99.50%)      15918104904 ( 99.79%)    692.59
  tcp          20021522 ( 86.67%)      15375095779 ( 96.39%)    767.93
   http(s)      8760955 ( 37.93%)      11810065692 ( 74.04%)   1348.03
   http(c)      5854855 ( 25.35%)        688225871 (  4.31%)    117.55
   squid         446941 (  1.93%)        383446163 (  2.40%)    857.93
   smtp          345136 (  1.49%)         86553616 (  0.54%)    250.78
   nntp             181 (  0.00%)            13517 (  0.00%)     74.68
   ftp            25182 (  0.11%)          2576352 (  0.02%)    102.31
   pop3           17509 (  0.08%)         10549199 (  0.07%)    602.50
   imap            7335 (  0.03%)          3146747 (  0.02%)    429.00
   telnet          1377 (  0.01%)           130362 (  0.00%)     94.67
   ssh            52183 (  0.23%)         20787969 (  0.13%)    398.37
   dns             2541 (  0.01%)           183281 (  0.00%)     72.13
   bgp             2088 (  0.01%)           301600 (  0.00%)    144.44
   napster          925 (  0.00%)           615062 (  0.00%)    664.93
   rtsp          127748 (  0.55%)         36438084 (  0.23%)    285.23
   icecast        17575 (  0.08%)         15609856 (  0.10%)    888.19
   other        4358981 ( 18.87%)       2316451742 ( 14.52%)    531.42
  udp           2200613 (  9.53%)        401770535 (  2.52%)    182.57
   dns          1198552 (  5.19%)        160624752 (  1.01%)    134.02
   realaud         7662 (  0.03%)          1701578 (  0.01%)    222.08
   halflif           14 (  0.00%)             3202 (  0.00%)    228.71
   starcra         2644 (  0.01%)           242239 (  0.00%)     91.62
   everque           31 (  0.00%)             4125 (  0.00%)    133.06
   unreal            12 (  0.00%)             1740 (  0.00%)    145.00
   quake          15681 (  0.07%)          3036598 (  0.02%)    193.65
   cuseeme           11 (  0.00%)             1239 (  0.00%)    112.64
   other         975969 (  4.23%)        236146524 (  1.48%)    241.96
  icmp           552679 (  2.39%)         49552328 (  0.31%)     89.66
  ipip              332 (  0.00%)            40400 (  0.00%)    121.69
  ip6               815 (  0.00%)           109148 (  0.00%)    133.92
  other          207485 (  0.90%)         91536714 (  0.57%)    441.17
  frag             2000 (  0.01%)          2102206 (  0.01%)   1051.10
 ip6             116320 (  0.50%)         33292212 (  0.21%)    286.21
  tcp6            52825 (  0.23%)         22166835 (  0.14%)    419.63
   http(s)         6124 (  0.03%)          8425954 (  0.05%)   1375.89
   http(c)        24261 (  0.11%)          2746509 (  0.02%)    113.21
   squid             10 (  0.00%)             1472 (  0.00%)    147.20
   smtp             523 (  0.00%)           168564 (  0.00%)    322.30
   nntp           10700 (  0.05%)          4170386 (  0.03%)    389.76
   ftp               31 (  0.00%)             4359 (  0.00%)    140.61
   pop3              72 (  0.00%)             6482 (  0.00%)     90.03
   ssh               31 (  0.00%)             2426 (  0.00%)     78.26
   bgp              199 (  0.00%)            22822 (  0.00%)    114.68
   other          10874 (  0.05%)          6617861 (  0.04%)    608.59
  udp6            32641 (  0.14%)          6012159 (  0.04%)    184.19
   dns            32627 (  0.14%)          6010619 (  0.04%)    184.22
   other             14 (  0.00%)             1540 (  0.00%)    110.00
  icmp6           10815 (  0.05%)          1362084 (  0.01%)    125.94
  ip6             20000 (  0.09%)          3742575 (  0.02%)    187.13
  pim6               32 (  0.00%)             4312 (  0.00%)    134.75
  other6              7 (  0.00%)             4247 (  0.00%)    606.71


tcpdump file: 200704131400.dump.gz (594.49 MB)