Traffic Trace Info


DumpFile: 200705141400.dump
FileSize: 1574.37MB
Id: 200705141400
StartTime: Mon May 14 14:00:01 2007
EndTime: Mon May 14 14:15:00 2007
TotalTime: 898.97 seconds
TotalCapSize: 1233.29MB CapLen: 96 bytes
# of packets: 22352193 (14228.40MB)
AvgRate: 132.76Mbps stddev:17.56M

IP flow (unique src/dst pair) Information

# of flows: 610977 (avg. 36.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 5.2% 3.6% 2.6% 1.0% 0.9% 0.9% 0.9% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 348660
Top 10 bandwidth usage (bytes/total in %):
10.3% 8.4% 8.2% 6.6% 6.4% 5.4% 5.4% 3.7% 3.2% 3.0%
# of IPv6 addresses: 1492
Top 10 bandwidth usage (bytes/total in %):
76.8% 76.8% 6.0% 6.0% 4.3% 3.5% 2.1% 1.1% 1.0% 0.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5325257
 [   64-  127]:    6141453
 [  128-  255]:     484390
 [  256-  511]:     637303
 [  512- 1023]:     752361
 [ 1024- 2047]:    9011429


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         22352193 (100.00%)      14919557669 (100.00%)    667.48
 ip            22177232 ( 99.22%)      14839996174 ( 99.47%)    669.15
  tcp          18841662 ( 84.29%)      13881598994 ( 93.04%)    736.75
   http(s)      8146952 ( 36.45%)      10908002540 ( 73.11%)   1338.91
   http(c)      6905488 ( 30.89%)        819051965 (  5.49%)    118.61
   squid         569843 (  2.55%)        401851382 (  2.69%)    705.20
   smtp          345116 (  1.54%)         81882486 (  0.55%)    237.26
   nntp             190 (  0.00%)            14096 (  0.00%)     74.19
   ftp            32820 (  0.15%)          3333159 (  0.02%)    101.56
   pop3            9007 (  0.04%)          1672710 (  0.01%)    185.71
   imap           14443 (  0.06%)         10356888 (  0.07%)    717.09
   telnet          1059 (  0.00%)            93829 (  0.00%)     88.60
   ssh            54158 (  0.24%)          9156884 (  0.06%)    169.08
   dns             3586 (  0.02%)          1893497 (  0.01%)    528.02
   bgp             1008 (  0.00%)           121155 (  0.00%)    120.19
   napster          138 (  0.00%)             8851 (  0.00%)     64.14
   realaud          208 (  0.00%)            66088 (  0.00%)    317.73
   rtsp           28808 (  0.13%)          9051226 (  0.06%)    314.19
   icecast        47947 (  0.21%)         38467912 (  0.26%)    802.30
   hotline           11 (  0.00%)             1214 (  0.00%)    110.36
   other        2680876 ( 11.99%)       1596572872 ( 10.70%)    595.54
  udp           2380040 ( 10.65%)        848826802 (  5.69%)    356.64
   dns          1364325 (  6.10%)        183721583 (  1.23%)    134.66
   realaud        62860 (  0.28%)         58374062 (  0.39%)    928.64
   halflif           26 (  0.00%)             2546 (  0.00%)     97.92
   starcra           15 (  0.00%)             2456 (  0.00%)    163.73
   everque           39 (  0.00%)             4561 (  0.00%)    116.95
   unreal            13 (  0.00%)             1870 (  0.00%)    143.85
   quake            322 (  0.00%)           292308 (  0.00%)    907.79
   cuseeme            8 (  0.00%)              636 (  0.00%)     79.50
   other         952371 (  4.26%)        606362396 (  4.06%)    636.69
  icmp           742188 (  3.32%)         61033439 (  0.41%)     82.23
  ipip              364 (  0.00%)            45628 (  0.00%)    125.35
  ipsec            4412 (  0.02%)          4120440 (  0.03%)    933.92
  ip6              1165 (  0.01%)           139646 (  0.00%)    119.87
  other          207401 (  0.93%)         44231225 (  0.30%)    213.26
  frag             4859 (  0.02%)          5372445 (  0.04%)   1105.67
 ip6             174958 (  0.78%)         79561315 (  0.53%)    454.75
  tcp6           100686 (  0.45%)         68212868 (  0.46%)    677.48
   http(s)          944 (  0.00%)           487669 (  0.00%)    516.60
   http(c)        12349 (  0.06%)          1686696 (  0.01%)    136.59
   smtp            1071 (  0.00%)           535006 (  0.00%)    499.54
   nntp           10657 (  0.05%)          3445244 (  0.02%)    323.28
   imap              15 (  0.00%)             3738 (  0.00%)    249.20
   ssh             1913 (  0.01%)           362198 (  0.00%)    189.34
   dns              525 (  0.00%)            62250 (  0.00%)    118.57
   bgp              143 (  0.00%)            14438 (  0.00%)    100.97
   other          73069 (  0.33%)         61615629 (  0.41%)    843.25
  udp6            29932 (  0.13%)          4916113 (  0.03%)    164.24
   dns            29851 (  0.13%)          4907203 (  0.03%)    164.39
   other             81 (  0.00%)             8910 (  0.00%)    110.00
  icmp6           11116 (  0.05%)          1595292 (  0.01%)    143.51
  ip6             33193 (  0.15%)          4832826 (  0.03%)    145.60
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00


tcpdump file: 200705141400.dump.gz (564.05 MB)