Traffic Trace Info


DumpFile: 200704181400.dump
FileSize: 1528.39MB
Id: 200704181400
StartTime: Wed Apr 18 14:00:01 2007
EndTime: Wed Apr 18 14:15:01 2007
TotalTime: 900.12 seconds
TotalCapSize: 1200.38MB CapLen: 96 bytes
# of packets: 21496048 (13348.15MB)
AvgRate: 124.42Mbps stddev:18.16M

IP flow (unique src/dst pair) Information

# of flows: 626903 (avg. 34.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 1.8% 1.7% 1.4% 1.2% 1.0% 1.0% 0.9% 0.9% 0.6%

IP address Information

# of IPv4 addresses: 351852
Top 10 bandwidth usage (bytes/total in %):
10.6% 8.6% 7.9% 7.7% 5.7% 3.3% 2.8% 2.8% 2.2% 2.1%
# of IPv6 addresses: 1488
Top 10 bandwidth usage (bytes/total in %):
65.8% 58.5% 7.7% 7.7% 7.3% 3.5% 3.5% 3.4% 3.4% 2.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5166936
 [   64-  127]:    5979562
 [  128-  255]:     636886
 [  256-  511]:     699526
 [  512- 1023]:     708863
 [ 1024- 2047]:    8304275


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         21496048 (100.00%)      13996548536 (100.00%)    651.12
 ip            21353220 ( 99.34%)      13946399128 ( 99.64%)    653.13
  tcp          18697218 ( 86.98%)      13563820564 ( 96.91%)    725.45
   http(s)      7436728 ( 34.60%)       9759269386 ( 69.73%)   1312.31
   http(c)      5631811 ( 26.20%)        740877418 (  5.29%)    131.55
   squid         297850 (  1.39%)        113423386 (  0.81%)    380.81
   smtp          426528 (  1.98%)         99574820 (  0.71%)    233.45
   nntp             234 (  0.00%)            18356 (  0.00%)     78.44
   ftp            68150 (  0.32%)         21233338 (  0.15%)    311.57
   pop3           12728 (  0.06%)          4503843 (  0.03%)    353.85
   imap            3494 (  0.02%)           878108 (  0.01%)    251.32
   telnet          2759 (  0.01%)           325277 (  0.00%)    117.90
   ssh             5009 (  0.02%)           835813 (  0.01%)    166.86
   dns             1650 (  0.01%)           120194 (  0.00%)     72.84
   bgp             1235 (  0.01%)           169224 (  0.00%)    137.02
   napster         9096 (  0.04%)          3829836 (  0.03%)    421.05
   realaud          149 (  0.00%)            72248 (  0.00%)    484.89
   rtsp          210839 (  0.98%)         90789217 (  0.65%)    430.61
   icecast        34396 (  0.16%)         38035487 (  0.27%)   1105.81
   other        4554543 ( 21.19%)       2689863319 ( 19.22%)    590.59
  udp           2099171 (  9.77%)        307355047 (  2.20%)    146.42
   dns          1344806 (  6.26%)        181001322 (  1.29%)    134.59
   realaud         9817 (  0.05%)          5519616 (  0.04%)    562.25
   halflif           15 (  0.00%)             1158 (  0.00%)     77.20
   starcra            4 (  0.00%)              344 (  0.00%)     86.00
   everque           57 (  0.00%)             8439 (  0.00%)    148.05
   unreal             5 (  0.00%)              704 (  0.00%)    140.80
   quake             28 (  0.00%)             5006 (  0.00%)    178.79
   cuseeme            4 (  0.00%)              337 (  0.00%)     84.25
   other         744269 (  3.46%)        120801551 (  0.86%)    162.31
  icmp           438343 (  2.04%)         46841841 (  0.33%)    106.86
  ipip              353 (  0.00%)            43282 (  0.00%)    122.61
  ipsec            6867 (  0.03%)          7459370 (  0.05%)   1086.26
  ip6               812 (  0.00%)           102039 (  0.00%)    125.66
  other          110456 (  0.51%)         20776985 (  0.15%)    188.10
  frag             2426 (  0.01%)          2476340 (  0.02%)   1020.75
 ip6             142825 (  0.66%)         50149228 (  0.36%)    351.12
  tcp6            91221 (  0.42%)         42027009 (  0.30%)    460.72
   http(s)          799 (  0.00%)           856038 (  0.01%)   1071.39
   http(c)        55021 (  0.26%)          5238579 (  0.04%)     95.21
   smtp            2234 (  0.01%)          1744275 (  0.01%)    780.79
   nntp            4807 (  0.02%)           509973 (  0.00%)    106.09
   ssh              119 (  0.00%)            13238 (  0.00%)    111.24
   dns              530 (  0.00%)            63470 (  0.00%)    119.75
   bgp              231 (  0.00%)            22573 (  0.00%)     97.72
   other          27480 (  0.13%)         33578863 (  0.24%)   1221.94
  udp6            32021 (  0.15%)          5324980 (  0.04%)    166.30
   dns            31931 (  0.15%)          5315080 (  0.04%)    166.46
   other             90 (  0.00%)             9900 (  0.00%)    110.00
  icmp6            8085 (  0.04%)           996680 (  0.01%)    123.28
  ip6             11468 (  0.05%)          1796479 (  0.01%)    156.65
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200704181400.dump.gz (564.89 MB)