Traffic Trace Info


DumpFile: 200705021400.dump
FileSize: 1366.92MB
Id: 200705021400
StartTime: Wed May 2 14:00:00 2007
EndTime: Wed May 2 14:15:01 2007
TotalTime: 900.44 seconds
TotalCapSize: 1070.18MB CapLen: 96 bytes
# of packets: 19445964 (12591.24MB)
AvgRate: 117.30Mbps stddev:13.12M

IP flow (unique src/dst pair) Information

# of flows: 508599 (avg. 38.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.7% 1.7% 1.5% 1.2% 1.0% 0.9% 0.9% 0.9% 0.8%

IP address Information

# of IPv4 addresses: 263239
Top 10 bandwidth usage (bytes/total in %):
10.0% 9.6% 8.9% 7.4% 5.2% 2.5% 2.5% 1.9% 1.7% 1.7%
# of IPv6 addresses: 1436
Top 10 bandwidth usage (bytes/total in %):
86.2% 59.3% 26.9% 2.8% 1.8% 1.2% 1.0% 0.8% 0.8% 0.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4521946
 [   64-  127]:    5163899
 [  128-  255]:     553434
 [  256-  511]:     560602
 [  512- 1023]:     616084
 [ 1024- 2047]:    8029999


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         19445964 (100.00%)      13202869046 (100.00%)    678.95
 ip            19296555 ( 99.23%)      13121719057 ( 99.39%)    680.00
  tcp          16740016 ( 86.08%)      12453944776 ( 94.33%)    743.96
   http(s)      6534337 ( 33.60%)       8409695653 ( 63.70%)   1287.00
   http(c)      4950995 ( 25.46%)        603981583 (  4.57%)    121.99
   squid         476654 (  2.45%)        242587870 (  1.84%)    508.94
   smtp          372811 (  1.92%)        108381322 (  0.82%)    290.71
   nntp             158 (  0.00%)            11582 (  0.00%)     73.30
   ftp           132672 (  0.68%)         71478410 (  0.54%)    538.76
   pop3           13247 (  0.07%)         11400297 (  0.09%)    860.59
   imap           10722 (  0.06%)          7565770 (  0.06%)    705.63
   telnet          1728 (  0.01%)           150845 (  0.00%)     87.29
   ssh            13160 (  0.07%)          1805378 (  0.01%)    137.19
   dns             3430 (  0.02%)          1864524 (  0.01%)    543.59
   bgp             1597 (  0.01%)           209287 (  0.00%)    131.05
   napster          153 (  0.00%)            21165 (  0.00%)    138.33
   realaud          616 (  0.00%)           355410 (  0.00%)    576.96
   rtsp          159278 (  0.82%)        157121255 (  1.19%)    986.46
   icecast        17031 (  0.09%)         12075043 (  0.09%)    709.00
   other        4051418 ( 20.83%)       2825238776 ( 21.40%)    697.35
  udp           1973715 ( 10.15%)        590503791 (  4.47%)    299.18
   dns          1327575 (  6.83%)        168230505 (  1.27%)    126.72
   realaud           90 (  0.00%)            33962 (  0.00%)    377.36
   halflif            4 (  0.00%)              325 (  0.00%)     81.25
   starcra            2 (  0.00%)              174 (  0.00%)     87.00
   everque           17 (  0.00%)             2027 (  0.00%)    119.24
   unreal             4 (  0.00%)              615 (  0.00%)    153.75
   quake             18 (  0.00%)             1523 (  0.00%)     84.61
   cuseeme            2 (  0.00%)              139 (  0.00%)     69.50
   other         645949 (  3.32%)        422229369 (  3.20%)    653.66
  icmp           442003 (  2.27%)         36015127 (  0.27%)     81.48
  ipip              342 (  0.00%)            42364 (  0.00%)    123.87
  ipsec             505 (  0.00%)           331198 (  0.00%)    655.84
  ip6               796 (  0.00%)            98274 (  0.00%)    123.46
  other          139178 (  0.72%)         40783527 (  0.31%)    293.03
  frag             2194 (  0.01%)          2320740 (  0.02%)   1057.77
 ip6             149406 (  0.77%)         81149809 (  0.61%)    543.15
  tcp6           105096 (  0.54%)         73024591 (  0.55%)    694.84
   http(s)            5 (  0.00%)             1022 (  0.00%)    204.40
   http(c)        17145 (  0.09%)          1879878 (  0.01%)    109.65
   smtp             490 (  0.00%)           116407 (  0.00%)    237.57
   nntp            4850 (  0.02%)           637677 (  0.00%)    131.48
   ftp               83 (  0.00%)             8335 (  0.00%)    100.42
   ssh                1 (  0.00%)               86 (  0.00%)     86.00
   bgp              143 (  0.00%)            15707 (  0.00%)    109.84
   other          82379 (  0.42%)         70365479 (  0.53%)    854.17
  udp6            36161 (  0.19%)          6845001 (  0.05%)    189.29
   dns            35957 (  0.18%)          6811357 (  0.05%)    189.43
   other            204 (  0.00%)            33644 (  0.00%)    164.92
  icmp6            7728 (  0.04%)          1211480 (  0.01%)    156.77
  ip6               374 (  0.00%)            62985 (  0.00%)    168.41
  pim6               47 (  0.00%)             5752 (  0.00%)    122.38


tcpdump file: 200705021400.dump.gz (506.64 MB)