Traffic Trace Info


DumpFile: 200704141400.dump
FileSize: 1125.94MB
Id: 200704141400
StartTime: Sat Apr 14 14:00:01 2007
EndTime: Sat Apr 14 14:15:01 2007
TotalTime: 900.13 seconds
TotalCapSize: 878.43MB CapLen: 96 bytes
# of packets: 16220089 (9633.10MB)
AvgRate: 89.77Mbps stddev:9.29M

IP flow (unique src/dst pair) Information

# of flows: 609913 (avg. 26.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.2% 1.2% 1.2% 1.0% 0.9% 0.9% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 358165
Top 10 bandwidth usage (bytes/total in %):
13.5% 13.1% 6.8% 5.1% 4.7% 3.3% 3.0% 2.3% 2.0% 1.8%
# of IPv6 addresses: 1287
Top 10 bandwidth usage (bytes/total in %):
75.7% 75.7% 4.8% 4.8% 3.5% 2.0% 1.9% 1.6% 1.6% 1.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4474405
 [   64-  127]:    4199534
 [  128-  255]:     562390
 [  256-  511]:     534534
 [  512- 1023]:     375622
 [ 1024- 2047]:    6073604


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         16220089 (100.00%)      10101042552 (100.00%)    622.75
 ip            16113287 ( 99.34%)      10054886811 ( 99.54%)    624.01
  tcp          13227697 ( 81.55%)       9386867012 ( 92.93%)    709.64
   http(s)      4590240 ( 28.30%)       6191708152 ( 61.30%)   1348.89
   http(c)      3336667 ( 20.57%)        354842696 (  3.51%)    106.35
   squid         495762 (  3.06%)        231329136 (  2.29%)    466.61
   smtp          259012 (  1.60%)         74769531 (  0.74%)    288.67
   nntp             150 (  0.00%)            11002 (  0.00%)     73.35
   ftp           149455 (  0.92%)         68436210 (  0.68%)    457.91
   pop3            5652 (  0.03%)          1712090 (  0.02%)    302.92
   imap            4174 (  0.03%)          2274316 (  0.02%)    544.88
   telnet           474 (  0.00%)            56165 (  0.00%)    118.49
   ssh             4638 (  0.03%)           512182 (  0.01%)    110.43
   dns              952 (  0.01%)            82251 (  0.00%)     86.40
   bgp              777 (  0.00%)            95617 (  0.00%)    123.06
   napster         1527 (  0.01%)           574789 (  0.01%)    376.42
   realaud            1 (  0.00%)               62 (  0.00%)     62.00
   rtsp          126522 (  0.78%)         91628520 (  0.91%)    724.21
   icecast          697 (  0.00%)           544220 (  0.01%)    780.80
   other        4250992 ( 26.21%)       2368289773 ( 23.45%)    557.11
  udp           2179075 ( 13.43%)        595149067 (  5.89%)    273.12
   dns          1052683 (  6.49%)        132118192 (  1.31%)    125.51
   realaud          954 (  0.01%)           873251 (  0.01%)    915.36
   halflif           14 (  0.00%)             2232 (  0.00%)    159.43
   starcra           23 (  0.00%)             3516 (  0.00%)    152.87
   everque           39 (  0.00%)             8581 (  0.00%)    220.03
   unreal            18 (  0.00%)             2652 (  0.00%)    147.33
   quake             42 (  0.00%)             8732 (  0.00%)    207.90
   cuseeme          169 (  0.00%)           100063 (  0.00%)    592.09
   other        1125037 (  6.94%)        462008926 (  4.57%)    410.66
  icmp           618953 (  3.82%)         54303179 (  0.54%)     87.73
  ipip              318 (  0.00%)            38384 (  0.00%)    120.70
  ip6               799 (  0.00%)            97802 (  0.00%)    122.41
  other           86445 (  0.53%)         18431367 (  0.18%)    213.21
  frag             2262 (  0.01%)          2298407 (  0.02%)   1016.10
 ip6             106799 (  0.66%)         46155561 (  0.46%)    432.17
  tcp6            57740 (  0.36%)         38571302 (  0.38%)    668.02
   http(s)           85 (  0.00%)            49082 (  0.00%)    577.44
   http(c)        16246 (  0.10%)          1709771 (  0.02%)    105.24
   squid              3 (  0.00%)              234 (  0.00%)     78.00
   smtp             632 (  0.00%)           198148 (  0.00%)    313.53
   nntp           10238 (  0.06%)           885791 (  0.01%)     86.52
   ftp               13 (  0.00%)             1191 (  0.00%)     91.62
   pop3              47 (  0.00%)             4306 (  0.00%)     91.62
   ssh               30 (  0.00%)             2336 (  0.00%)     77.87
   dns                7 (  0.00%)              634 (  0.00%)     90.57
   bgp              161 (  0.00%)            16240 (  0.00%)    100.87
   icecast            3 (  0.00%)              234 (  0.00%)     78.00
   other          30275 (  0.19%)         35703335 (  0.35%)   1179.30
  udp6            23399 (  0.14%)          4065318 (  0.04%)    173.74
   dns            23321 (  0.14%)          4056738 (  0.04%)    173.95
   other             78 (  0.00%)             8580 (  0.00%)    110.00
  icmp6           10849 (  0.07%)          1279712 (  0.01%)    117.96
  ip6             14777 (  0.09%)          2231425 (  0.02%)    151.01
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              4 (  0.00%)             3724 (  0.00%)    931.00


tcpdump file: 200704141400.dump.gz (419.40 MB)