Traffic Trace Info


DumpFile: 200705261400.dump
FileSize: 1292.82MB
Id: 200705261400
StartTime: Sat May 26 14:00:01 2007
EndTime: Sat May 26 14:15:00 2007
TotalTime: 899.70 seconds
TotalCapSize: 1014.25MB CapLen: 96 bytes
# of packets: 18255653 (12179.96MB)
AvgRate: 113.58Mbps stddev:18.20M

IP flow (unique src/dst pair) Information

# of flows: 1061861 (avg. 17.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 3.5% 3.0% 2.6% 2.1% 2.0% 2.0% 1.7% 1.7% 1.5%

IP address Information

# of IPv4 addresses: 442600
Top 10 bandwidth usage (bytes/total in %):
12.8% 11.5% 6.7% 6.6% 5.5% 5.2% 5.0% 3.6% 3.0% 2.7%
# of IPv6 addresses: 1517
Top 10 bandwidth usage (bytes/total in %):
69.7% 69.3% 12.2% 12.2% 4.4% 3.3% 1.4% 1.3% 1.1% 1.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3561022
 [   64-  127]:    5424968
 [  128-  255]:     394001
 [  256-  511]:     556410
 [  512- 1023]:     379619
 [ 1024- 2047]:    7939633


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         18255653 (100.00%)      12771616110 (100.00%)    699.60
 ip            18153172 ( 99.44%)      12720225123 ( 99.60%)    700.72
  tcp          15282749 ( 83.72%)      12236858727 ( 95.81%)    800.70
   http(s)      6407675 ( 35.10%)       8814225699 ( 69.01%)   1375.57
   http(c)      3743530 ( 20.51%)        402981096 (  3.16%)    107.65
   squid         789613 (  4.33%)        568553650 (  4.45%)    720.04
   smtp          357444 (  1.96%)         76933936 (  0.60%)    215.23
   nntp             144 (  0.00%)            10656 (  0.00%)     74.00
   ftp           287608 (  1.58%)        206022133 (  1.61%)    716.33
   pop3           12445 (  0.07%)         10933211 (  0.09%)    878.52
   imap            2224 (  0.01%)           742555 (  0.01%)    333.88
   telnet           413 (  0.00%)            34011 (  0.00%)     82.35
   ssh           368832 (  2.02%)         69980140 (  0.55%)    189.73
   dns             2613 (  0.01%)          1822740 (  0.01%)    697.57
   bgp              769 (  0.00%)           105401 (  0.00%)    137.06
   napster           30 (  0.00%)             1812 (  0.00%)     60.40
   realaud           30 (  0.00%)             3417 (  0.00%)    113.90
   rtsp          101017 (  0.55%)         23010894 (  0.18%)    227.79
   icecast         1736 (  0.01%)           497627 (  0.00%)    286.65
   other        3206623 ( 17.57%)       2060999569 ( 16.14%)    642.73
  udp           2236965 ( 12.25%)        412777760 (  3.23%)    184.53
   dns          1272006 (  6.97%)        154250367 (  1.21%)    121.27
   realaud        10253 (  0.06%)          5620583 (  0.04%)    548.19
   halflif           34 (  0.00%)             4420 (  0.00%)    130.00
   starcra           36 (  0.00%)             4993 (  0.00%)    138.69
   everque          235 (  0.00%)            59501 (  0.00%)    253.20
   unreal           169 (  0.00%)            25442 (  0.00%)    150.54
   quake             35 (  0.00%)             3934 (  0.00%)    112.40
   cuseeme           17 (  0.00%)             2862 (  0.00%)    168.35
   other         954177 (  5.23%)        252804898 (  1.98%)    264.95
  icmp           519460 (  2.85%)         49088332 (  0.38%)     94.50
  ipip              342 (  0.00%)            40860 (  0.00%)    119.47
  ipsec            3236 (  0.02%)          3855128 (  0.03%)   1191.33
  ip6              1236 (  0.01%)           155314 (  0.00%)    125.66
  other          109184 (  0.60%)         17449002 (  0.14%)    159.81
  frag             5331 (  0.03%)          4738214 (  0.04%)    888.80
 ip6             102478 (  0.56%)         51390807 (  0.40%)    501.48
  tcp6            64741 (  0.35%)         45370999 (  0.36%)    700.81
   http(s)         1834 (  0.01%)          1547577 (  0.01%)    843.83
   http(c)         6041 (  0.03%)           785077 (  0.01%)    129.96
   squid             11 (  0.00%)             9914 (  0.00%)    901.27
   smtp             154 (  0.00%)            28941 (  0.00%)    187.93
   nntp            1726 (  0.01%)           334841 (  0.00%)    194.00
   ftp               96 (  0.00%)             9464 (  0.00%)     98.58
   imap              15 (  0.00%)             3738 (  0.00%)    249.20
   dns                4 (  0.00%)              453 (  0.00%)    113.25
   bgp              176 (  0.00%)            17878 (  0.00%)    101.58
   other          54684 (  0.30%)         42633116 (  0.33%)    779.63
  udp6            27728 (  0.15%)          4852383 (  0.04%)    175.00
   dns            27244 (  0.15%)          4777716 (  0.04%)    175.37
   other            484 (  0.00%)            74667 (  0.00%)    154.27
  icmp6            9895 (  0.05%)          1150344 (  0.01%)    116.26
  ip6                81 (  0.00%)            11058 (  0.00%)    136.52
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              3 (  0.00%)             1943 (  0.00%)    647.67


tcpdump file: 200705261400.dump.gz (458.65 MB)