Traffic Trace Info


DumpFile: 200704171400.dump
FileSize: 1845.34MB
Id: 200704171400
StartTime: Tue Apr 17 14:00:00 2007
EndTime: Tue Apr 17 14:15:01 2007
TotalTime: 900.36 seconds
TotalCapSize: 1446.15MB CapLen: 96 bytes
# of packets: 26160610 (16205.76MB)
AvgRate: 150.99Mbps stddev:6.10M

IP flow (unique src/dst pair) Information

# of flows: 644825 (avg. 40.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.6% 2.2% 1.3% 1.1% 1.1% 1.0% 1.0% 1.0% 0.7%

IP address Information

# of IPv4 addresses: 357498
Top 10 bandwidth usage (bytes/total in %):
9.6% 6.6% 4.3% 4.0% 3.6% 3.5% 3.1% 3.1% 3.1% 2.9%
# of IPv6 addresses: 1466
Top 10 bandwidth usage (bytes/total in %):
88.9% 88.9% 1.7% 1.7% 1.0% 0.7% 0.7% 0.6% 0.6% 0.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7006640
 [   64-  127]:    6773292
 [  128-  255]:     818976
 [  256-  511]:     700609
 [  512- 1023]:     707262
 [ 1024- 2047]:   10153831


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         26160610 (100.00%)      16992973731 (100.00%)    649.56
 ip            26023676 ( 99.48%)      16888831119 ( 99.39%)    648.98
  tcp          23306277 ( 89.09%)      16525319441 ( 97.25%)    709.05
   http(s)      9204785 ( 35.19%)      12293222441 ( 72.34%)   1335.53
   http(c)      7728054 ( 29.54%)        925766799 (  5.45%)    119.79
   squid         335776 (  1.28%)        195025745 (  1.15%)    580.82
   smtp          479763 (  1.83%)        130779906 (  0.77%)    272.59
   nntp             294 (  0.00%)            45380 (  0.00%)    154.35
   ftp            66020 (  0.25%)         33315735 (  0.20%)    504.63
   pop3           10621 (  0.04%)          4641231 (  0.03%)    436.99
   imap            5598 (  0.02%)          2836287 (  0.02%)    506.66
   telnet          2587 (  0.01%)           238764 (  0.00%)     92.29
   ssh           314796 (  1.20%)         35271448 (  0.21%)    112.05
   dns             3759 (  0.01%)           264816 (  0.00%)     70.45
   bgp             1110 (  0.00%)           137697 (  0.00%)    124.05
   napster         1601 (  0.01%)           854540 (  0.01%)    533.75
   realaud          647 (  0.00%)            54438 (  0.00%)     84.14
   rtsp           10410 (  0.04%)          4642302 (  0.03%)    445.95
   icecast        20548 (  0.08%)         14436822 (  0.08%)    702.59
   hotline            7 (  0.00%)              497 (  0.00%)     71.00
   other        5119884 ( 19.57%)       2883782205 ( 16.97%)    563.25
  udp           1991848 (  7.61%)        273851392 (  1.61%)    137.49
   dns          1211711 (  4.63%)        156778883 (  0.92%)    129.39
   realaud         3858 (  0.01%)          2024478 (  0.01%)    524.75
   halflif           15 (  0.00%)             2312 (  0.00%)    154.13
   starcra           12 (  0.00%)             1558 (  0.00%)    129.83
   everque           28 (  0.00%)             3440 (  0.00%)    122.86
   unreal            16 (  0.00%)             2662 (  0.00%)    166.38
   quake          34191 (  0.13%)          9481584 (  0.06%)    277.31
   cuseeme            8 (  0.00%)             1356 (  0.00%)    169.50
   other         741904 (  2.84%)        105542978 (  0.62%)    142.26
  icmp           562486 (  2.15%)         50566984 (  0.30%)     89.90
  ipip              372 (  0.00%)            44084 (  0.00%)    118.51
  ipsec            4821 (  0.02%)          5227374 (  0.03%)   1084.29
  ip6               795 (  0.00%)            96010 (  0.00%)    120.77
  other          157077 (  0.60%)         33725834 (  0.20%)    214.71
  frag             2244 (  0.01%)          2303975 (  0.01%)   1026.73
 ip6             136931 (  0.52%)        104142432 (  0.61%)    760.55
  tcp6            84404 (  0.32%)         95712068 (  0.56%)   1133.98
   http(s)          489 (  0.00%)           373477 (  0.00%)    763.76
   http(c)         9079 (  0.03%)          1206354 (  0.01%)    132.87
   smtp             350 (  0.00%)            96816 (  0.00%)    276.62
   nntp            5895 (  0.02%)           672359 (  0.00%)    114.06
   imap              15 (  0.00%)             3738 (  0.00%)    249.20
   ssh              988 (  0.00%)           189756 (  0.00%)    192.06
   dns              563 (  0.00%)            66916 (  0.00%)    118.86
   bgp              245 (  0.00%)            23503 (  0.00%)     95.93
   other          66780 (  0.26%)         93079149 (  0.55%)   1393.82
  udp6            31644 (  0.12%)          5422751 (  0.03%)    171.37
   dns            31553 (  0.12%)          5412741 (  0.03%)    171.54
   other             91 (  0.00%)            10010 (  0.00%)    110.00
  icmp6            9171 (  0.04%)          1175766 (  0.01%)    128.20
  ip6             11680 (  0.04%)          1825907 (  0.01%)    156.33
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              2 (  0.00%)             1860 (  0.00%)    930.00


tcpdump file: 200704171400.dump.gz (686.62 MB)