Traffic Trace Info


DumpFile: 200704221400.dump
FileSize: 879.29MB
Id: 200704221400
StartTime: Sun Apr 22 14:00:00 2007
EndTime: Sun Apr 22 14:15:00 2007
TotalTime: 900.03 seconds
TotalCapSize: 686.09MB CapLen: 96 bytes
# of packets: 12661244 (7950.98MB)
AvgRate: 74.10Mbps stddev:7.37M

IP flow (unique src/dst pair) Information

# of flows: 462038 (avg. 27.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.1% 1.8% 1.7% 1.3% 1.2% 1.1% 0.9% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 256335
Top 10 bandwidth usage (bytes/total in %):
16.1% 13.2% 10.0% 7.2% 6.2% 5.1% 2.5% 2.4% 2.3% 2.1%
# of IPv6 addresses: 1376
Top 10 bandwidth usage (bytes/total in %):
69.8% 69.8% 6.0% 6.0% 3.6% 3.2% 1.9% 1.9% 1.7% 1.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3333540
 [   64-  127]:    3124568
 [  128-  255]:     468595
 [  256-  511]:     364462
 [  512- 1023]:     280684
 [ 1024- 2047]:    5089395


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         12661244 (100.00%)       8337206657 (100.00%)    658.48
 ip            12569879 ( 99.28%)       8299707874 ( 99.55%)    660.29
  tcp          10425741 ( 82.34%)       7938000746 ( 95.21%)    761.38
   http(s)      3793755 ( 29.96%)       5139366751 ( 61.64%)   1354.69
   http(c)      2083791 ( 16.46%)        238163022 (  2.86%)    114.29
   squid         324146 (  2.56%)        237271296 (  2.85%)    731.99
   smtp          275329 (  2.17%)         51716409 (  0.62%)    187.83
   nntp             148 (  0.00%)            10952 (  0.00%)     74.00
   ftp           221250 (  1.75%)        160861228 (  1.93%)    727.06
   pop3           47633 (  0.38%)          5784662 (  0.07%)    121.44
   imap            1228 (  0.01%)           264306 (  0.00%)    215.23
   telnet           558 (  0.00%)            42510 (  0.00%)     76.18
   ssh            20088 (  0.16%)          7341179 (  0.09%)    365.45
   dns             1769 (  0.01%)           152390 (  0.00%)     86.14
   bgp              760 (  0.01%)            87454 (  0.00%)    115.07
   napster           87 (  0.00%)            14060 (  0.00%)    161.61
   realaud         3168 (  0.03%)          2228545 (  0.03%)    703.45
   rtsp          186617 (  1.47%)         52238286 (  0.63%)    279.92
   icecast        16332 (  0.13%)          9039974 (  0.11%)    553.51
   other        3449016 ( 27.24%)       2033413762 ( 24.39%)    589.56
  udp           1735410 ( 13.71%)        323009581 (  3.87%)    186.13
   dns          1026745 (  8.11%)        124566955 (  1.49%)    121.32
   realaud         1636 (  0.01%)           163027 (  0.00%)     99.65
   halflif          237 (  0.00%)           229359 (  0.00%)    967.76
   starcra            9 (  0.00%)             1913 (  0.00%)    212.56
   everque           66 (  0.00%)            11467 (  0.00%)    173.74
   unreal            14 (  0.00%)             2585 (  0.00%)    184.64
   quake          17694 (  0.14%)          1637718 (  0.02%)     92.56
   cuseeme            2 (  0.00%)              174 (  0.00%)     87.00
   other         688889 (  5.44%)        196300513 (  2.35%)    284.95
  icmp           401864 (  3.17%)         36683644 (  0.44%)     91.28
  ipip              368 (  0.00%)            44469 (  0.00%)    120.84
  ipsec            1190 (  0.01%)          1184532 (  0.01%)    995.41
  ip6               443 (  0.00%)            58561 (  0.00%)    132.19
  other            4863 (  0.04%)           726341 (  0.01%)    149.36
  frag            41445 (  0.33%)         56064240 (  0.67%)   1352.74
 ip6              91365 (  0.72%)         37498783 (  0.45%)    410.43
  tcp6            39323 (  0.31%)         28773546 (  0.35%)    731.72
   http(s)          141 (  0.00%)            59571 (  0.00%)    422.49
   http(c)        12830 (  0.10%)          1512700 (  0.02%)    117.90
   smtp             286 (  0.00%)           121079 (  0.00%)    423.35
   nntp            2847 (  0.02%)           309890 (  0.00%)    108.85
   ftp                3 (  0.00%)              282 (  0.00%)     94.00
   pop3              67 (  0.00%)             6014 (  0.00%)     89.76
   ssh               60 (  0.00%)             4680 (  0.00%)     78.00
   dns              450 (  0.00%)            53424 (  0.00%)    118.72
   bgp              172 (  0.00%)            17213 (  0.00%)    100.08
   other          22467 (  0.18%)         26688693 (  0.32%)   1187.91
  udp6            29566 (  0.23%)          5477331 (  0.07%)    185.26
   dns            29422 (  0.23%)          5460699 (  0.07%)    185.60
   other            144 (  0.00%)            16632 (  0.00%)    115.50
  icmp6            7977 (  0.06%)           974595 (  0.01%)    122.18
  ip6             14466 (  0.11%)          2268943 (  0.03%)    156.85
  pim6               33 (  0.00%)             4368 (  0.00%)    132.36


tcpdump file: 200704221400.dump.gz (318.99 MB)