Traffic Trace Info


DumpFile: 200704251400.dump
FileSize: 1712.79MB
Id: 200704251400
StartTime: Wed Apr 25 14:00:00 2007
EndTime: Wed Apr 25 14:15:01 2007
TotalTime: 900.61 seconds
TotalCapSize: 1343.63MB CapLen: 96 bytes
# of packets: 24192927 (16106.02MB)
AvgRate: 150.02Mbps stddev:17.65M

IP flow (unique src/dst pair) Information

# of flows: 690629 (avg. 35.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 1.8% 1.7% 1.1% 1.0% 1.0% 0.9% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 398482
Top 10 bandwidth usage (bytes/total in %):
8.0% 7.7% 5.6% 4.6% 4.5% 4.4% 4.3% 3.5% 3.4% 2.5%
# of IPv6 addresses: 1474
Top 10 bandwidth usage (bytes/total in %):
58.9% 58.8% 23.1% 22.4% 5.3% 5.3% 4.4% 1.5% 1.5% 1.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5731431
 [   64-  127]:    6294613
 [  128-  255]:     589047
 [  256-  511]:     590945
 [  512- 1023]:     711671
 [ 1024- 2047]:   10275220


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         24192927 (100.00%)      16888381767 (100.00%)    698.07
 ip            24051384 ( 99.41%)      16793878273 ( 99.44%)    698.25
  tcp          21529440 ( 88.99%)      16395441206 ( 97.08%)    761.54
   http(s)      9914002 ( 40.98%)      13151198323 ( 77.87%)   1326.53
   http(c)      7457399 ( 30.82%)        947100531 (  5.61%)    127.00
   squid         626794 (  2.59%)        507190533 (  3.00%)    809.18
   smtp          366039 (  1.51%)         75230642 (  0.45%)    205.53
   nntp             363 (  0.00%)            32545 (  0.00%)     89.66
   ftp           166429 (  0.69%)        137292336 (  0.81%)    824.93
   pop3           10931 (  0.05%)          2947270 (  0.02%)    269.62
   imap            4319 (  0.02%)          1089349 (  0.01%)    252.22
   telnet          3032 (  0.01%)           404162 (  0.00%)    133.30
   ssh            31355 (  0.13%)          3530096 (  0.02%)    112.58
   dns             6691 (  0.03%)          2072601 (  0.01%)    309.76
   bgp             1177 (  0.00%)           179989 (  0.00%)    152.92
   napster         3867 (  0.02%)          3102758 (  0.02%)    802.37
   realaud            7 (  0.00%)             1098 (  0.00%)    156.86
   rtsp           29988 (  0.12%)         16527385 (  0.10%)    551.13
   icecast        31098 (  0.13%)         45027530 (  0.27%)   1447.92
   hotline            2 (  0.00%)              124 (  0.00%)     62.00
   other        2875944 ( 11.89%)       1502513754 (  8.90%)    522.44
  udp           1684357 (  6.96%)        252409771 (  1.49%)    149.86
   dns          1224092 (  5.06%)        163734277 (  0.97%)    133.76
   realaud        17202 (  0.07%)          7151669 (  0.04%)    415.75
   halflif           16 (  0.00%)             1829 (  0.00%)    114.31
   starcra            8 (  0.00%)              818 (  0.00%)    102.25
   everque           24 (  0.00%)             2818 (  0.00%)    117.42
   unreal            23 (  0.00%)             4629 (  0.00%)    201.26
   quake             10 (  0.00%)              846 (  0.00%)     84.60
   cuseeme            7 (  0.00%)             1030 (  0.00%)    147.14
   other         442905 (  1.83%)         81497142 (  0.48%)    184.01
  icmp           534228 (  2.21%)         46043109 (  0.27%)     86.19
  ipip              368 (  0.00%)            43880 (  0.00%)    119.24
  ipsec            6301 (  0.03%)          7369406 (  0.04%)   1169.56
  ip6              6843 (  0.03%)          5031243 (  0.03%)    735.24
  other          289847 (  1.20%)         87539658 (  0.52%)    302.02
  frag             2109 (  0.01%)          2189699 (  0.01%)   1038.26
 ip6             141543 (  0.59%)         94503494 (  0.56%)    667.67
  tcp6           104705 (  0.43%)         88769281 (  0.53%)    847.80
   http(s)         1425 (  0.01%)          1653409 (  0.01%)   1160.29
   http(c)        40052 (  0.17%)          4317037 (  0.03%)    107.79
   smtp             314 (  0.00%)            83378 (  0.00%)    265.54
   nntp            7902 (  0.03%)          4979403 (  0.03%)    630.14
   ftp               78 (  0.00%)            14072 (  0.00%)    180.41
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              161 (  0.00%)            15618 (  0.00%)     97.01
   other          54766 (  0.23%)         77705729 (  0.46%)   1418.87
  udp6            24795 (  0.10%)          4189682 (  0.02%)    168.97
   dns            24665 (  0.10%)          4167419 (  0.02%)    168.96
   other            130 (  0.00%)            22263 (  0.00%)    171.25
  icmp6           11650 (  0.05%)          1478948 (  0.01%)    126.95
  ip6               357 (  0.00%)            57175 (  0.00%)    160.15
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6              5 (  0.00%)             4192 (  0.00%)    838.40


tcpdump file: 200704251400.dump.gz (627.34 MB)