Traffic Trace Info


DumpFile: 200704191400.dump
FileSize: 1925.91MB
Id: 200704191400
StartTime: Thu Apr 19 14:00:00 2007
EndTime: Thu Apr 19 14:15:01 2007
TotalTime: 900.29 seconds
TotalCapSize: 1507.74MB CapLen: 96 bytes
# of packets: 27404285 (18624.59MB)
AvgRate: 173.54Mbps stddev:9.39M

IP flow (unique src/dst pair) Information

# of flows: 733091 (avg. 37.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.9% 2.6% 1.7% 1.6% 1.3% 1.3% 1.1% 1.1% 1.0%

IP address Information

# of IPv4 addresses: 417308
Top 10 bandwidth usage (bytes/total in %):
8.9% 8.0% 5.3% 4.2% 4.2% 3.7% 3.1% 3.0% 2.9% 2.8%
# of IPv6 addresses: 1509
Top 10 bandwidth usage (bytes/total in %):
73.5% 73.5% 4.3% 4.1% 4.1% 1.9% 1.8% 1.8% 1.8% 1.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6595123
 [   64-  127]:    6683977
 [  128-  255]:     750418
 [  256-  511]:     647532
 [  512- 1023]:     774817
 [ 1024- 2047]:   11952418


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         27404285 (100.00%)      19529297808 (100.00%)    712.64
 ip            27280605 ( 99.55%)      19478205046 ( 99.74%)    713.99
  tcp          24175860 ( 88.22%)      18918302453 ( 96.87%)    782.53
   http(s)     11041431 ( 40.29%)      14941318237 ( 76.51%)   1353.20
   http(c)      7931006 ( 28.94%)        982160683 (  5.03%)    123.84
   squid         385252 (  1.41%)        279588946 (  1.43%)    725.73
   smtp          415169 (  1.51%)        120507854 (  0.62%)    290.26
   nntp             180 (  0.00%)            13372 (  0.00%)     74.29
   ftp           140868 (  0.51%)        134676527 (  0.69%)    956.05
   pop3            9757 (  0.04%)          3864944 (  0.02%)    396.12
   imap            6230 (  0.02%)          1997096 (  0.01%)    320.56
   telnet          3103 (  0.01%)           267034 (  0.00%)     86.06
   ssh           213491 (  0.78%)         21594827 (  0.11%)    101.15
   dns             2040 (  0.01%)           167047 (  0.00%)     81.89
   bgp             1044 (  0.00%)           134980 (  0.00%)    129.29
   napster        14319 (  0.05%)          7396889 (  0.04%)    516.58
   realaud           26 (  0.00%)             2025 (  0.00%)     77.88
   rtsp          110571 (  0.40%)         58827897 (  0.30%)    532.04
   icecast        15464 (  0.06%)          8247885 (  0.04%)    533.36
   hotline          286 (  0.00%)            31472 (  0.00%)    110.04
   other        3885623 ( 14.18%)       2357504738 ( 12.07%)    606.73
  udp           2427509 (  8.86%)        479303146 (  2.45%)    197.45
   dns          1307667 (  4.77%)        177696086 (  0.91%)    135.89
   realaud        19144 (  0.07%)         10638957 (  0.05%)    555.73
   halflif           14 (  0.00%)             1981 (  0.00%)    141.50
   starcra            2 (  0.00%)              191 (  0.00%)     95.50
   everque           34 (  0.00%)             3624 (  0.00%)    106.59
   unreal            10 (  0.00%)              919 (  0.00%)     91.90
   quake             29 (  0.00%)             5059 (  0.00%)    174.45
   cuseeme            4 (  0.00%)              978 (  0.00%)    244.50
   other        1100379 (  4.02%)        290932903 (  1.49%)    264.39
  icmp           421621 (  1.54%)         38715024 (  0.20%)     91.82
  ipip              342 (  0.00%)            41644 (  0.00%)    121.77
  ipsec            3348 (  0.01%)          3870256 (  0.02%)   1155.99
  ip6               864 (  0.00%)           127023 (  0.00%)    147.02
  other          251061 (  0.92%)         37845500 (  0.19%)    150.74
  frag             2553 (  0.01%)          2563135 (  0.01%)   1003.97
 ip6             123680 (  0.45%)         51092762 (  0.26%)    413.10
  tcp6            64997 (  0.24%)         41820306 (  0.21%)    643.42
   http(s)          168 (  0.00%)            70227 (  0.00%)    418.02
   http(c)        21998 (  0.08%)          2316237 (  0.01%)    105.29
   smtp             721 (  0.00%)           236038 (  0.00%)    327.38
   nntp           10310 (  0.04%)           897602 (  0.00%)     87.06
   ftp               54 (  0.00%)             5442 (  0.00%)    100.78
   pop3              46 (  0.00%)             4230 (  0.00%)     91.96
   ssh               60 (  0.00%)             4680 (  0.00%)     78.00
   dns              498 (  0.00%)            59303 (  0.00%)    119.08
   bgp              233 (  0.00%)            22745 (  0.00%)     97.62
   other          30909 (  0.11%)         38203802 (  0.20%)   1236.01
  udp6            33005 (  0.12%)          5672121 (  0.03%)    171.86
   dns            32945 (  0.12%)          5665521 (  0.03%)    171.97
   other             60 (  0.00%)             6600 (  0.00%)    110.00
  icmp6           11191 (  0.04%)          1354167 (  0.01%)    121.01
  ip4               301 (  0.00%)            75658 (  0.00%)    251.36
  ip6             14134 (  0.05%)          2151494 (  0.01%)    152.22
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             22 (  0.00%)            14936 (  0.00%)    678.91


tcpdump file: 200704191400.dump.gz (710.94 MB)