Traffic Trace Info


DumpFile: 200705131400.dump
FileSize: 968.28MB
Id: 200705131400
StartTime: Sun May 13 14:00:01 2007
EndTime: Sun May 13 14:15:00 2007
TotalTime: 899.49 seconds
TotalCapSize: 754.41MB CapLen: 96 bytes
# of packets: 14015547 (9470.34MB)
AvgRate: 88.33Mbps stddev:8.01M

IP flow (unique src/dst pair) Information

# of flows: 370662 (avg. 37.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.6% 2.6% 2.0% 1.9% 1.9% 1.4% 1.3% 1.3% 1.2% 0.8%

IP address Information

# of IPv4 addresses: 209926
Top 10 bandwidth usage (bytes/total in %):
14.7% 11.3% 10.3% 8.8% 7.2% 5.8% 5.2% 3.7% 3.1% 3.0%
# of IPv6 addresses: 1381
Top 10 bandwidth usage (bytes/total in %):
81.2% 81.1% 5.9% 5.5% 2.1% 1.4% 1.4% 0.9% 0.8% 0.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2888728
 [   64-  127]:    3568684
 [  128-  255]:     527580
 [  256-  511]:     350170
 [  512- 1023]:     350333
 [ 1024- 2047]:    6330052


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         14015547 (100.00%)       9930373783 (100.00%)    708.53
 ip            13914373 ( 99.28%)       9876649463 ( 99.46%)    709.82
  tcp          10918790 ( 77.90%)       8605333719 ( 86.66%)    788.12
   http(s)      3749068 ( 26.75%)       5140213007 ( 51.76%)   1371.06
   http(c)      2259657 ( 16.12%)        232399128 (  2.34%)    102.85
   squid         588274 (  4.20%)        415947613 (  4.19%)    707.06
   smtp          234522 (  1.67%)         47353570 (  0.48%)    201.92
   nntp             145 (  0.00%)            10730 (  0.00%)     74.00
   ftp            62778 (  0.45%)          4351432 (  0.04%)     69.31
   pop3            4120 (  0.03%)          1543857 (  0.02%)    374.72
   imap            4161 (  0.03%)          3866415 (  0.04%)    929.20
   telnet           725 (  0.01%)            46926 (  0.00%)     64.73
   ssh           157257 (  1.12%)         34488273 (  0.35%)    219.31
   dns             2279 (  0.02%)          1782400 (  0.02%)    782.10
   bgp              725 (  0.01%)            94314 (  0.00%)    130.09
   napster         5910 (  0.04%)          3934805 (  0.04%)    665.79
   realaud           70 (  0.00%)             5534 (  0.00%)     79.06
   rtsp          299117 (  2.13%)        146042846 (  1.47%)    488.25
   icecast          203 (  0.00%)            21402 (  0.00%)    105.43
   other        3549774 ( 25.33%)       2573231167 ( 25.91%)    724.90
  udp           2714000 ( 19.36%)       1237574462 ( 12.46%)    456.00
   dns          1146575 (  8.18%)        137703906 (  1.39%)    120.10
   realaud         4013 (  0.03%)          3399155 (  0.03%)    847.04
   halflif           21 (  0.00%)             3112 (  0.00%)    148.19
   starcra         1441 (  0.01%)            99916 (  0.00%)     69.34
   everque           53 (  0.00%)             6798 (  0.00%)    128.26
   unreal           651 (  0.00%)           619095 (  0.01%)    950.99
   quake             19 (  0.00%)             2626 (  0.00%)    138.21
   cuseeme            2 (  0.00%)              145 (  0.00%)     72.50
   other        1561183 ( 11.14%)       1095692090 ( 11.03%)    701.83
  icmp           216963 (  1.55%)         20649964 (  0.21%)     95.18
  ipip              351 (  0.00%)            42694 (  0.00%)    121.64
  ipsec            1973 (  0.01%)          2171334 (  0.02%)   1100.52
  ip6              1186 (  0.01%)           141738 (  0.00%)    119.51
  other           61110 (  0.44%)         10735552 (  0.11%)    175.68
  frag             4219 (  0.03%)          4608842 (  0.05%)   1092.40
 ip6             101171 (  0.72%)         53724140 (  0.54%)    531.02
  tcp6            69468 (  0.50%)         48760479 (  0.49%)    701.91
   http(s)           80 (  0.00%)            53042 (  0.00%)    663.02
   http(c)         8935 (  0.06%)          1149279 (  0.01%)    128.63
   smtp             498 (  0.00%)           167484 (  0.00%)    336.31
   nntp            5798 (  0.04%)          3184929 (  0.03%)    549.32
   ftp               82 (  0.00%)            12149 (  0.00%)    148.16
   pop3             132 (  0.00%)            11661 (  0.00%)     88.34
   imap              15 (  0.00%)             3738 (  0.00%)    249.20
   ssh                1 (  0.00%)               86 (  0.00%)     86.00
   dns              490 (  0.00%)            58435 (  0.00%)    119.26
   bgp              147 (  0.00%)            14904 (  0.00%)    101.39
   other          53290 (  0.38%)         44104772 (  0.44%)    827.64
  udp6            21017 (  0.15%)          3460098 (  0.03%)    164.63
   dns            20887 (  0.15%)          3444170 (  0.03%)    164.90
   other            130 (  0.00%)            15928 (  0.00%)    122.52
  icmp6           10292 (  0.07%)          1412989 (  0.01%)    137.29
  ip6               318 (  0.00%)            50062 (  0.00%)    157.43
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             46 (  0.00%)            36432 (  0.00%)    792.00


tcpdump file: 200705131400.dump.gz (345.46 MB)