Traffic Trace Info


DumpFile: 200704211400.dump
FileSize: 1135.03MB
Id: 200704211400
StartTime: Sat Apr 21 14:00:01 2007
EndTime: Sat Apr 21 14:15:00 2007
TotalTime: 899.28 seconds
TotalCapSize: 885.83MB CapLen: 96 bytes
# of packets: 16331177 (10084.36MB)
AvgRate: 94.07Mbps stddev:12.31M

IP flow (unique src/dst pair) Information

# of flows: 585782 (avg. 27.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.2% 2.9% 1.4% 1.1% 0.9% 0.8% 0.7% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 356475
Top 10 bandwidth usage (bytes/total in %):
11.1% 9.3% 6.5% 6.1% 5.9% 5.1% 4.3% 4.1% 4.0% 3.9%
# of IPv6 addresses: 1401
Top 10 bandwidth usage (bytes/total in %):
20.6% 20.6% 15.7% 15.7% 12.8% 11.1% 7.1% 4.8% 4.2% 3.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4333722
 [   64-  127]:    4099589
 [  128-  255]:     607079
 [  256-  511]:     438707
 [  512- 1023]:     416657
 [ 1024- 2047]:    6435423


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         16331177 (100.00%)      10574213243 (100.00%)    647.49
 ip            16244141 ( 99.47%)      10557381310 ( 99.84%)    649.92
  tcp          13436125 ( 82.27%)      10016456372 ( 94.73%)    745.49
   http(s)      5208417 ( 31.89%)       6954115971 ( 65.76%)   1335.17
   http(c)      3172299 ( 19.42%)        351592053 (  3.32%)    110.83
   squid         523415 (  3.21%)        376790396 (  3.56%)    719.87
   smtp          278515 (  1.71%)         53287720 (  0.50%)    191.33
   nntp             158 (  0.00%)            12279 (  0.00%)     77.72
   ftp           234851 (  1.44%)        160858786 (  1.52%)    684.94
   pop3           48449 (  0.30%)          6951849 (  0.07%)    143.49
   imap            2958 (  0.02%)          1431335 (  0.01%)    483.89
   telnet           721 (  0.00%)            58476 (  0.00%)     81.10
   ssh           285493 (  1.75%)         58254570 (  0.55%)    204.05
   dns             1019 (  0.01%)            77033 (  0.00%)     75.60
   bgp              854 (  0.01%)           101032 (  0.00%)    118.30
   napster        11173 (  0.07%)           727504 (  0.01%)     65.11
   realaud           47 (  0.00%)             5872 (  0.00%)    124.94
   rtsp          107762 (  0.66%)         78964001 (  0.75%)    732.76
   icecast         5559 (  0.03%)           378757 (  0.00%)     68.13
   other        3554429 ( 21.76%)       1972848360 ( 18.66%)    555.04
  udp           2105748 ( 12.89%)        463947710 (  4.39%)    220.32
   dns          1019681 (  6.24%)        127862132 (  1.21%)    125.39
   realaud          926 (  0.01%)            58068 (  0.00%)     62.71
   halflif           16 (  0.00%)             2507 (  0.00%)    156.69
   starcra           19 (  0.00%)             1640 (  0.00%)     86.32
   everque           56 (  0.00%)             9123 (  0.00%)    162.91
   unreal             7 (  0.00%)             1174 (  0.00%)    167.71
   quake             91 (  0.00%)            60822 (  0.00%)    668.37
   cuseeme            4 (  0.00%)              375 (  0.00%)     93.75
   other        1084901 (  6.64%)        335947402 (  3.18%)    309.66
  icmp           569936 (  3.49%)         48127310 (  0.46%)     84.44
  ipip              340 (  0.00%)            38964 (  0.00%)    114.60
  ipsec            2086 (  0.01%)          2428620 (  0.02%)   1164.25
  ip6               418 (  0.00%)            53988 (  0.00%)    129.16
  other          129488 (  0.79%)         26328346 (  0.25%)    203.33
  frag             1734 (  0.01%)          1833068 (  0.02%)   1057.13
 ip6              87033 (  0.53%)         16831753 (  0.16%)    193.40
  tcp6            29527 (  0.18%)          6649892 (  0.06%)    225.21
   http(s)          397 (  0.00%)           324082 (  0.00%)    816.33
   http(c)        19511 (  0.12%)          1883535 (  0.02%)     96.54
   squid              5 (  0.00%)              430 (  0.00%)     86.00
   smtp            1039 (  0.01%)           296615 (  0.00%)    285.48
   nntp               8 (  0.00%)              592 (  0.00%)     74.00
   ftp                3 (  0.00%)              282 (  0.00%)     94.00
   pop3              82 (  0.00%)             7416 (  0.00%)     90.44
   imap              15 (  0.00%)             3738 (  0.00%)    249.20
   ssh               60 (  0.00%)             4680 (  0.00%)     78.00
   dns              556 (  0.00%)            66267 (  0.00%)    119.19
   bgp              203 (  0.00%)            22022 (  0.00%)    108.48
   icecast            2 (  0.00%)              168 (  0.00%)     84.00
   other           7646 (  0.05%)          4040065 (  0.04%)    528.39
  udp6            31027 (  0.19%)          6397703 (  0.06%)    206.20
   dns            30915 (  0.19%)          6383967 (  0.06%)    206.50
   other            112 (  0.00%)            13736 (  0.00%)    122.64
  icmp6            8792 (  0.05%)          1104852 (  0.01%)    125.67
  ip6             17655 (  0.11%)          2673362 (  0.03%)    151.42
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              2 (  0.00%)             1864 (  0.00%)    932.00


tcpdump file: 200704211400.dump.gz (422.69 MB)