Traffic Trace Info


DumpFile: 200704291400.dump
FileSize: 840.23MB
Id: 200704291400
StartTime: Sun Apr 29 14:00:00 2007
EndTime: Sun Apr 29 14:15:00 2007
TotalTime: 899.95 seconds
TotalCapSize: 658.36MB CapLen: 96 bytes
# of packets: 11918679 (7343.37MB)
AvgRate: 68.46Mbps stddev:11.32M

IP flow (unique src/dst pair) Information

# of flows: 422550 (avg. 28.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 3.8% 3.5% 1.6% 1.5% 1.4% 1.4% 1.2% 1.0% 0.9%

IP address Information

# of IPv4 addresses: 239816
Top 10 bandwidth usage (bytes/total in %):
16.0% 13.4% 11.0% 7.1% 5.4% 5.2% 4.0% 3.7% 3.7% 2.4%
# of IPv6 addresses: 1359
Top 10 bandwidth usage (bytes/total in %):
81.3% 81.3% 5.6% 4.4% 3.2% 1.4% 1.1% 1.0% 0.9% 0.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2719340
 [   64-  127]:    3493842
 [  128-  255]:     435001
 [  256-  511]:     336723
 [  512- 1023]:     249543
 [ 1024- 2047]:    4684230


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         11918679 (100.00%)       7700079424 (100.00%)    646.05
 ip            11794346 ( 98.96%)       7642168380 ( 99.25%)    647.95
  tcp          10028033 ( 84.14%)       7383197696 ( 95.88%)    736.26
   http(s)      4085731 ( 34.28%)       5506919087 ( 71.52%)   1347.84
   http(c)      2817774 ( 23.64%)        269356710 (  3.50%)     95.59
   squid         381114 (  3.20%)        291979487 (  3.79%)    766.12
   smtp          279819 (  2.35%)         48449232 (  0.63%)    173.14
   nntp             151 (  0.00%)            11174 (  0.00%)     74.00
   ftp            37660 (  0.32%)          3444982 (  0.04%)     91.48
   pop3           47882 (  0.40%)          4996741 (  0.06%)    104.36
   imap            1744 (  0.01%)           611629 (  0.01%)    350.70
   telnet           633 (  0.01%)            44792 (  0.00%)     70.76
   ssh           272215 (  2.28%)         36823167 (  0.48%)    135.27
   dns             2264 (  0.02%)           182352 (  0.00%)     80.54
   bgp              746 (  0.01%)            86652 (  0.00%)    116.16
   napster           27 (  0.00%)             1973 (  0.00%)     73.07
   realaud           21 (  0.00%)             2084 (  0.00%)     99.24
   rtsp           11850 (  0.10%)           829731 (  0.01%)     70.02
   icecast          442 (  0.00%)            47940 (  0.00%)    108.46
   other        2087959 ( 17.52%)       1219409903 ( 15.84%)    584.02
  udp           1406392 ( 11.80%)        220709981 (  2.87%)    156.93
   dns          1014398 (  8.51%)        130752625 (  1.70%)    128.90
   realaud          929 (  0.01%)            56935 (  0.00%)     61.29
   halflif           16 (  0.00%)             2203 (  0.00%)    137.69
   starcra           14 (  0.00%)             2057 (  0.00%)    146.93
   everque           29 (  0.00%)             4316 (  0.00%)    148.83
   unreal            14 (  0.00%)             2639 (  0.00%)    188.50
   quake             18 (  0.00%)             1967 (  0.00%)    109.28
   cuseeme           10 (  0.00%)             1961 (  0.00%)    196.10
   other         390943 (  3.28%)         89881480 (  1.17%)    229.91
  icmp           310555 (  2.61%)         25695852 (  0.33%)     82.74
  ipip              358 (  0.00%)            42260 (  0.00%)    118.04
  ipsec            5300 (  0.04%)          6509728 (  0.08%)   1228.25
  ip6               815 (  0.01%)           100822 (  0.00%)    123.71
  other           42893 (  0.36%)          5912041 (  0.08%)    137.83
  frag             1613 (  0.01%)          1722180 (  0.02%)   1067.69
 ip6             124330 (  1.04%)         57910864 (  0.75%)    465.78
  tcp6            94343 (  0.79%)         52162295 (  0.68%)    552.90
   http(s)          341 (  0.00%)           396057 (  0.01%)   1161.46
   http(c)        26467 (  0.22%)          3309616 (  0.04%)    125.05
   squid              6 (  0.00%)              468 (  0.00%)     78.00
   smtp             384 (  0.00%)            62943 (  0.00%)    163.91
   nntp            8352 (  0.07%)           784131 (  0.01%)     93.89
   pop3              46 (  0.00%)             4222 (  0.00%)     91.78
   ssh               52 (  0.00%)             6333 (  0.00%)    121.79
   dns                7 (  0.00%)              634 (  0.00%)     90.57
   bgp              129 (  0.00%)            13122 (  0.00%)    101.72
   other          58559 (  0.49%)         47584769 (  0.62%)    812.60
  udp6            22224 (  0.19%)          4744992 (  0.06%)    213.51
   dns            22089 (  0.19%)          4721236 (  0.06%)    213.74
   other            135 (  0.00%)            23756 (  0.00%)    175.97
  icmp6            7354 (  0.06%)           938051 (  0.01%)    127.56
  ip6               361 (  0.00%)            58050 (  0.00%)    160.80
  pim6               46 (  0.00%)             5616 (  0.00%)    122.09
  other6              2 (  0.00%)             1860 (  0.00%)    930.00


tcpdump file: 200704291400.dump.gz (303.81 MB)