Traffic Trace Info


DumpFile: 200705251400.dump
FileSize: 1435.05MB
Id: 200705251400
StartTime: Fri May 25 14:00:01 2007
EndTime: Fri May 25 14:15:00 2007
TotalTime: 899.39 seconds
TotalCapSize: 1123.35MB CapLen: 96 bytes
# of packets: 20426820 (12632.07MB)
AvgRate: 117.80Mbps stddev:16.90M

IP flow (unique src/dst pair) Information

# of flows: 709040 (avg. 28.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 2.5% 2.4% 1.7% 1.3% 1.1% 1.0% 1.0% 0.9% 0.8%

IP address Information

# of IPv4 addresses: 397662
Top 10 bandwidth usage (bytes/total in %):
10.4% 9.3% 9.1% 6.6% 4.3% 2.8% 2.5% 2.5% 2.5% 2.4%
# of IPv6 addresses: 1662
Top 10 bandwidth usage (bytes/total in %):
89.7% 89.7% 2.1% 0.7% 0.6% 0.6% 0.5% 0.5% 0.5% 0.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5184942
 [   64-  127]:    5505548
 [  128-  255]:     565499
 [  256-  511]:     594764
 [  512- 1023]:     578771
 [ 1024- 2047]:    7997296


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         20426820 (100.00%)      13245683299 (100.00%)    648.45
 ip            20253167 ( 99.15%)      13134312749 ( 99.16%)    648.51
  tcp          17426214 ( 85.31%)      12681153782 ( 95.74%)    727.71
   http(s)      6729501 ( 32.94%)       8618693701 ( 65.07%)   1280.73
   http(c)      5388064 ( 26.38%)        654524613 (  4.94%)    121.48
   squid         467601 (  2.29%)        278985622 (  2.11%)    596.63
   smtp          511330 (  2.50%)        155481982 (  1.17%)    304.07
   nntp             159 (  0.00%)            11634 (  0.00%)     73.17
   ftp           265530 (  1.30%)        244091834 (  1.84%)    919.26
   pop3           16375 (  0.08%)          7987196 (  0.06%)    487.77
   imap           10074 (  0.05%)          5973086 (  0.05%)    592.92
   telnet          2008 (  0.01%)           172144 (  0.00%)     85.73
   ssh            71364 (  0.35%)         46332515 (  0.35%)    649.24
   dns            17418 (  0.09%)          2724711 (  0.02%)    156.43
   bgp             1230 (  0.01%)           151944 (  0.00%)    123.53
   napster           28 (  0.00%)             2234 (  0.00%)     79.79
   realaud          386 (  0.00%)           120161 (  0.00%)    311.30
   rtsp          280861 (  1.37%)        187431146 (  1.42%)    667.34
   icecast         9302 (  0.05%)         13205842 (  0.10%)   1419.68
   hotline            5 (  0.00%)              832 (  0.00%)    166.40
   other        3654970 ( 17.89%)       2465262105 ( 18.61%)    674.50
  udp           2134662 ( 10.45%)        376115110 (  2.84%)    176.19
   dns          1507412 (  7.38%)        189027145 (  1.43%)    125.40
   realaud        91444 (  0.45%)         40351785 (  0.30%)    441.27
   halflif           52 (  0.00%)             4801 (  0.00%)     92.33
   starcra          105 (  0.00%)            19357 (  0.00%)    184.35
   everque           67 (  0.00%)            10199 (  0.00%)    152.22
   unreal            40 (  0.00%)             7478 (  0.00%)    186.95
   quake             11 (  0.00%)              952 (  0.00%)     86.55
   cuseeme            3 (  0.00%)              527 (  0.00%)    175.67
   other         535520 (  2.62%)        146690363 (  1.11%)    273.92
  icmp           457051 (  2.24%)         43374738 (  0.33%)     94.90
  ipip              342 (  0.00%)            41268 (  0.00%)    120.67
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              1157 (  0.01%)           137492 (  0.00%)    118.83
  other          233561 (  1.14%)         33470559 (  0.25%)    143.31
  frag             2090 (  0.01%)          2240170 (  0.02%)   1071.85
 ip6             173653 (  0.85%)        111370550 (  0.84%)    641.34
  tcp6           132337 (  0.65%)        104444129 (  0.79%)    789.23
   http(s)          514 (  0.00%)           612416 (  0.00%)   1191.47
   http(c)        18632 (  0.09%)          2319174 (  0.02%)    124.47
   smtp             381 (  0.00%)           109617 (  0.00%)    287.71
   nntp            2133 (  0.01%)           532804 (  0.00%)    249.79
   ftp               17 (  0.00%)             1798 (  0.00%)    105.76
   imap              15 (  0.00%)             3738 (  0.00%)    249.20
   ssh              486 (  0.00%)           262767 (  0.00%)    540.67
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              195 (  0.00%)            20698 (  0.00%)    106.14
   other         109957 (  0.54%)        100580482 (  0.76%)    914.73
  udp6            33203 (  0.16%)          5924993 (  0.04%)    178.45
   dns            33119 (  0.16%)          5915753 (  0.04%)    178.62
   other             84 (  0.00%)             9240 (  0.00%)    110.00
  icmp6            7998 (  0.04%)           984190 (  0.01%)    123.05
  ip6                83 (  0.00%)            11294 (  0.00%)    136.07
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              2 (  0.00%)             1864 (  0.00%)    932.00


tcpdump file: 200705251400.dump.gz (525.78 MB)