Traffic Trace Info


DumpFile: 200705211400.dump
FileSize: 1659.12MB
Id: 200705211400
StartTime: Mon May 21 14:00:00 2007
EndTime: Mon May 21 14:15:01 2007
TotalTime: 900.53 seconds
TotalCapSize: 1296.09MB CapLen: 96 bytes
# of packets: 23790596 (16125.13MB)
AvgRate: 150.22Mbps stddev:16.89M

IP flow (unique src/dst pair) Information

# of flows: 581118 (avg. 40.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.0% 1.7% 1.6% 1.5% 1.4% 1.4% 1.3% 1.3% 1.3%

IP address Information

# of IPv4 addresses: 301099
Top 10 bandwidth usage (bytes/total in %):
8.0% 7.6% 6.9% 6.0% 5.7% 5.3% 4.9% 3.1% 2.1% 2.1%
# of IPv6 addresses: 1585
Top 10 bandwidth usage (bytes/total in %):
87.3% 87.3% 2.1% 1.2% 1.2% 1.0% 1.0% 1.0% 1.0% 0.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5991843
 [   64-  127]:    5404908
 [  128-  255]:     699621
 [  256-  511]:     593542
 [  512- 1023]:     802142
 [ 1024- 2047]:   10298540


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         23790596 (100.00%)      16908422982 (100.00%)    710.72
 ip            23622831 ( 99.29%)      16804886646 ( 99.39%)    711.38
  tcp          20821991 ( 87.52%)      16229755330 ( 95.99%)    779.45
   http(s)      9421481 ( 39.60%)      12576587278 ( 74.38%)   1334.88
   http(c)      6683303 ( 28.09%)        871080586 (  5.15%)    130.34
   squid         879980 (  3.70%)        654933327 (  3.87%)    744.26
   smtp          426078 (  1.79%)        132414891 (  0.78%)    310.78
   nntp             159 (  0.00%)            11628 (  0.00%)     73.13
   ftp            31267 (  0.13%)          2387022 (  0.01%)     76.34
   pop3           10164 (  0.04%)          2490941 (  0.01%)    245.07
   imap           12756 (  0.05%)         11751496 (  0.07%)    921.25
   telnet          1389 (  0.01%)           231184 (  0.00%)    166.44
   ssh            43949 (  0.18%)         24729327 (  0.15%)    562.68
   dns             3961 (  0.02%)          1923391 (  0.01%)    485.58
   bgp              903 (  0.00%)           108101 (  0.00%)    119.71
   napster         1150 (  0.00%)           623956 (  0.00%)    542.57
   realaud         2071 (  0.01%)           176752 (  0.00%)     85.35
   rtsp           92869 (  0.39%)         46989297 (  0.28%)    505.97
   icecast        30189 (  0.13%)         23660164 (  0.14%)    783.73
   hotline            9 (  0.00%)              832 (  0.00%)     92.44
   other        3180306 ( 13.37%)       1879654737 ( 11.12%)    591.03
  udp           2119009 (  8.91%)        470032025 (  2.78%)    221.82
   dns          1430132 (  6.01%)        189205067 (  1.12%)    132.30
   realaud         8842 (  0.04%)          4122088 (  0.02%)    466.19
   halflif           19 (  0.00%)             2167 (  0.00%)    114.05
   starcra           47 (  0.00%)             8269 (  0.00%)    175.94
   everque           42 (  0.00%)             5983 (  0.00%)    142.45
   unreal            27 (  0.00%)             4661 (  0.00%)    172.63
   quake             79 (  0.00%)             5790 (  0.00%)     73.29
   cuseeme            5 (  0.00%)              641 (  0.00%)    128.20
   other         679797 (  2.86%)        276670605 (  1.64%)    406.99
  icmp           461095 (  1.94%)         43786179 (  0.26%)     94.96
  ipip              338 (  0.00%)            39456 (  0.00%)    116.73
  ipsec            7293 (  0.03%)          8898390 (  0.05%)   1220.13
  ip6              1197 (  0.01%)           142674 (  0.00%)    119.19
  other          211908 (  0.89%)         52232592 (  0.31%)    246.49
  frag             2069 (  0.01%)          2202913 (  0.01%)   1064.72
 ip6             167762 (  0.71%)        103536156 (  0.61%)    617.16
  tcp6           117885 (  0.50%)         95737846 (  0.57%)    812.13
   http(s)         2067 (  0.01%)          2401441 (  0.01%)   1161.80
   http(c)        15755 (  0.07%)          2287915 (  0.01%)    145.22
   smtp             293 (  0.00%)           111230 (  0.00%)    379.62
   nntp             250 (  0.00%)            25815 (  0.00%)    103.26
   ftp                4 (  0.00%)              382 (  0.00%)     95.50
   imap              14 (  0.00%)             3664 (  0.00%)    261.71
   ssh                6 (  0.00%)              516 (  0.00%)     86.00
   bgp              161 (  0.00%)            15794 (  0.00%)     98.10
   other          99335 (  0.42%)         90891089 (  0.54%)    915.00
  udp6            39536 (  0.17%)          6229597 (  0.04%)    157.57
   dns            39443 (  0.17%)          6219367 (  0.04%)    157.68
   other             93 (  0.00%)            10230 (  0.00%)    110.00
  icmp6           10013 (  0.04%)          1516490 (  0.01%)    151.45
  ip6               268 (  0.00%)            42297 (  0.00%)    157.82
  pim6               56 (  0.00%)             6576 (  0.00%)    117.43
  other6              4 (  0.00%)             3350 (  0.00%)    837.50


tcpdump file: 200705211400.dump.gz (608.29 MB)