Traffic Trace Info


DumpFile: 200705111400.dump
FileSize: 1646.14MB
Id: 200705111400
StartTime: Fri May 11 14:00:00 2007
EndTime: Fri May 11 14:15:00 2007
TotalTime: 899.93 seconds
TotalCapSize: 1290.87MB CapLen: 96 bytes
# of packets: 23281848 (15203.97MB)
AvgRate: 141.73Mbps stddev:14.52M

IP flow (unique src/dst pair) Information

# of flows: 572072 (avg. 40.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.9% 1.9% 1.8% 1.7% 1.2% 1.1% 1.1% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 326073
Top 10 bandwidth usage (bytes/total in %):
7.9% 7.2% 7.2% 6.2% 2.8% 2.6% 2.6% 2.3% 2.1% 2.0%
# of IPv6 addresses: 1426
Top 10 bandwidth usage (bytes/total in %):
61.3% 61.3% 22.5% 22.5% 6.4% 2.1% 1.2% 1.0% 1.0% 0.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5723329
 [   64-  127]:    5931565
 [  128-  255]:     607316
 [  256-  511]:     648830
 [  512- 1023]:     563472
 [ 1024- 2047]:    9807336


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         23281848 (100.00%)      15942515319 (100.00%)    684.76
 ip            23120650 ( 99.31%)      15865074472 ( 99.51%)    686.19
  tcp          20611187 ( 88.53%)      15267176052 ( 95.76%)    740.72
   http(s)      8814134 ( 37.86%)      11500427054 ( 72.14%)   1304.77
   http(c)      7083074 ( 30.42%)        881317713 (  5.53%)    124.43
   squid         302386 (  1.30%)        142500132 (  0.89%)    471.25
   smtp          296492 (  1.27%)         66819633 (  0.42%)    225.37
   nntp             214 (  0.00%)            15033 (  0.00%)     70.25
   ftp           120350 (  0.52%)         78729560 (  0.49%)    654.17
   pop3           16479 (  0.07%)          2665911 (  0.02%)    161.78
   imap            5067 (  0.02%)          1656986 (  0.01%)    327.02
   telnet           954 (  0.00%)            97999 (  0.00%)    102.72
   ssh            19693 (  0.08%)          3068175 (  0.02%)    155.80
   dns            44070 (  0.19%)          4331797 (  0.03%)     98.29
   bgp             1180 (  0.01%)           156325 (  0.00%)    132.48
   napster           92 (  0.00%)             5656 (  0.00%)     61.48
   realaud           10 (  0.00%)             1063 (  0.00%)    106.30
   rtsp          338309 (  1.45%)        254800513 (  1.60%)    753.16
   icecast        23548 (  0.10%)         19554478 (  0.12%)    830.41
   hotline            2 (  0.00%)              120 (  0.00%)     60.00
   other        3545125 ( 15.23%)       2311027424 ( 14.50%)    651.89
  udp           1926282 (  8.27%)        532114210 (  3.34%)    276.24
   dns          1173535 (  5.04%)        160366223 (  1.01%)    136.65
   realaud         9592 (  0.04%)          5496274 (  0.03%)    573.01
   halflif            8 (  0.00%)              629 (  0.00%)     78.62
   starcra            8 (  0.00%)             1672 (  0.00%)    209.00
   everque           52 (  0.00%)             5800 (  0.00%)    111.54
   unreal            20 (  0.00%)             2197 (  0.00%)    109.85
   quake             15 (  0.00%)             1526 (  0.00%)    101.73
   cuseeme            6 (  0.00%)              492 (  0.00%)     82.00
   other         742995 (  3.19%)        366225445 (  2.30%)    492.90
  icmp           404299 (  1.74%)         34739342 (  0.22%)     85.92
  ipip              349 (  0.00%)            43130 (  0.00%)    123.58
  ipsec             464 (  0.00%)           357256 (  0.00%)    769.95
  ip6              1018 (  0.00%)           126272 (  0.00%)    124.04
  other          177051 (  0.76%)         30518210 (  0.19%)    172.37
  frag             2120 (  0.01%)          2224387 (  0.01%)   1049.24
 ip6             161195 (  0.69%)         77440667 (  0.49%)    480.42
  tcp6           124030 (  0.53%)         71754943 (  0.45%)    578.53
   http(s)        11900 (  0.05%)         17604817 (  0.11%)   1479.40
   http(c)        52091 (  0.22%)          5755086 (  0.04%)    110.48
   smtp             465 (  0.00%)           195057 (  0.00%)    419.48
   ftp               19 (  0.00%)             1756 (  0.00%)     92.42
   pop3              46 (  0.00%)             4229 (  0.00%)     91.93
   ssh               15 (  0.00%)             5370 (  0.00%)    358.00
   dns              605 (  0.00%)            72086 (  0.00%)    119.15
   bgp              171 (  0.00%)            16638 (  0.00%)     97.30
   other          58718 (  0.25%)         48099904 (  0.30%)    819.17
  udp6            25915 (  0.11%)          4023180 (  0.03%)    155.25
   dns            25832 (  0.11%)          4014050 (  0.03%)    155.39
   other             83 (  0.00%)             9130 (  0.00%)    110.00
  icmp6           10938 (  0.05%)          1612625 (  0.01%)    147.43
  ip6               250 (  0.00%)            42767 (  0.00%)    171.07
  pim6               62 (  0.00%)             7152 (  0.00%)    115.35


tcpdump file: 200705111400.dump.gz (597.66 MB)