Traffic Trace Info


DumpFile: 200704151400.dump
FileSize: 867.57MB
Id: 200704151400
StartTime: Sun Apr 15 14:00:01 2007
EndTime: Sun Apr 15 14:15:01 2007
TotalTime: 899.71 seconds
TotalCapSize: 676.06MB CapLen: 96 bytes
# of packets: 12550521 (7251.16MB)
AvgRate: 67.62Mbps stddev:9.79M

IP flow (unique src/dst pair) Information

# of flows: 433770 (avg. 28.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.1% 1.2% 1.2% 1.1% 1.1% 0.9% 0.9% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 245430
Top 10 bandwidth usage (bytes/total in %):
15.9% 15.0% 11.1% 4.4% 3.7% 2.7% 2.7% 2.6% 2.3% 2.2%
# of IPv6 addresses: 1253
Top 10 bandwidth usage (bytes/total in %):
67.5% 67.5% 7.0% 6.6% 6.6% 3.3% 2.9% 2.2% 2.0% 1.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3283229
 [   64-  127]:    3407571
 [  128-  255]:     553563
 [  256-  511]:     475354
 [  512- 1023]:     349764
 [ 1024- 2047]:    4481040


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         12550521 (100.00%)       7603397216 (100.00%)    605.82
 ip            12462309 ( 99.30%)       7570558871 ( 99.57%)    607.48
  tcp           9835308 ( 78.37%)       7082667947 ( 93.15%)    720.13
   http(s)      3626748 ( 28.90%)       4936251992 ( 64.92%)   1361.07
   http(c)      2191739 ( 17.46%)        217117594 (  2.86%)     99.06
   squid         332748 (  2.65%)        208831693 (  2.75%)    627.60
   smtp          302750 (  2.41%)         51249440 (  0.67%)    169.28
   nntp             169 (  0.00%)            12706 (  0.00%)     75.18
   ftp            87621 (  0.70%)         58889433 (  0.77%)    672.09
   pop3            4316 (  0.03%)          2440619 (  0.03%)    565.48
   imap            1404 (  0.01%)           480698 (  0.01%)    342.38
   telnet           852 (  0.01%)            58798 (  0.00%)     69.01
   ssh             6120 (  0.05%)          1017998 (  0.01%)    166.34
   dns             8402 (  0.07%)           548375 (  0.01%)     65.27
   bgp              822 (  0.01%)           112043 (  0.00%)    136.31
   napster        25511 (  0.20%)         18352480 (  0.24%)    719.39
   rtsp          109152 (  0.87%)         50445011 (  0.66%)    462.15
   icecast          606 (  0.00%)           366364 (  0.00%)    604.56
   hotline          316 (  0.00%)            89776 (  0.00%)    284.10
   other        3135809 ( 24.99%)       1536389547 ( 20.21%)    489.95
  udp           1902649 ( 15.16%)        378897209 (  4.98%)    199.14
   dns           927392 (  7.39%)        115752271 (  1.52%)    124.81
   realaud         6656 (  0.05%)          2675941 (  0.04%)    402.03
   halflif           11 (  0.00%)             1999 (  0.00%)    181.73
   starcra            9 (  0.00%)             1552 (  0.00%)    172.44
   everque           26 (  0.00%)             3950 (  0.00%)    151.92
   unreal            20 (  0.00%)             2974 (  0.00%)    148.70
   quake             14 (  0.00%)             2552 (  0.00%)    182.29
   cuseeme            1 (  0.00%)               86 (  0.00%)     86.00
   other         968429 (  7.72%)        260434069 (  3.43%)    268.92
  icmp           469468 (  3.74%)         42449627 (  0.56%)     90.42
  ipip              338 (  0.00%)            40760 (  0.00%)    120.59
  ip6               820 (  0.01%)           107591 (  0.00%)    131.21
  other          253726 (  2.02%)         66395737 (  0.87%)    261.68
  frag             2518 (  0.02%)          2430823 (  0.03%)    965.38
 ip6              88209 (  0.70%)         32838165 (  0.43%)    372.28
  tcp6            42035 (  0.33%)         25598512 (  0.34%)    608.98
   http(s)          206 (  0.00%)            64617 (  0.00%)    313.67
   http(c)        17631 (  0.14%)          2314602 (  0.03%)    131.28
   squid              8 (  0.00%)              608 (  0.00%)     76.00
   smtp             278 (  0.00%)            76380 (  0.00%)    274.75
   nntp            1108 (  0.01%)           130760 (  0.00%)    118.01
   ftp               17 (  0.00%)             1314 (  0.00%)     77.29
   pop3              57 (  0.00%)             5060 (  0.00%)     88.77
   imap              12 (  0.00%)             1386 (  0.00%)    115.50
   telnet            20 (  0.00%)             1544 (  0.00%)     77.20
   ssh              100 (  0.00%)            11512 (  0.00%)    115.12
   dns              557 (  0.00%)            65863 (  0.00%)    118.25
   bgp              268 (  0.00%)            26218 (  0.00%)     97.83
   other          21773 (  0.17%)         22898648 (  0.30%)   1051.70
  udp6            21013 (  0.17%)          3826589 (  0.05%)    182.11
   dns            20930 (  0.17%)          3817891 (  0.05%)    182.41
   other             83 (  0.00%)             8698 (  0.00%)    104.80
  icmp6           10735 (  0.09%)          1212287 (  0.02%)    112.93
  ip6             14392 (  0.11%)          2196273 (  0.03%)    152.60
  pim6               34 (  0.00%)             4504 (  0.00%)    132.47


tcpdump file: 200704151400.dump.gz (318.54 MB)