Traffic Trace Info


DumpFile: 200705301400.dump
FileSize: 1363.34MB
Id: 200705301400
StartTime: Wed May 30 14:00:00 2007
EndTime: Wed May 30 14:15:00 2007
TotalTime: 899.81 seconds
TotalCapSize: 1067.18MB CapLen: 96 bytes
# of packets: 19408446 (11827.17MB)
AvgRate: 110.26Mbps stddev:14.64M

IP flow (unique src/dst pair) Information

# of flows: 893437 (avg. 21.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.7% 2.4% 1.1% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 584324
Top 10 bandwidth usage (bytes/total in %):
22.4% 9.8% 5.6% 3.5% 2.9% 2.9% 2.8% 2.6% 2.0% 1.7%
# of IPv6 addresses: 1687
Top 10 bandwidth usage (bytes/total in %):
30.6% 30.6% 6.5% 6.5% 4.6% 4.4% 4.4% 4.3% 3.9% 3.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4501871
 [   64-  127]:    5903797
 [  128-  255]:     517848
 [  256-  511]:     518445
 [  512- 1023]:     467052
 [ 1024- 2047]:    7499433


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         19408446 (100.00%)      12401686608 (100.00%)    638.98
 ip            19339589 ( 99.65%)      12387032686 ( 99.88%)    640.50
  tcp          16206046 ( 83.50%)      11924732741 ( 96.15%)    735.82
   http(s)      7156942 ( 36.88%)       9630203414 ( 77.65%)   1345.58
   http(c)      5273726 ( 27.17%)        608587850 (  4.91%)    115.40
   squid         718684 (  3.70%)        241350475 (  1.95%)    335.82
   smtp          466482 (  2.40%)         93819692 (  0.76%)    201.12
   nntp             264 (  0.00%)            25364 (  0.00%)     96.08
   ftp            30081 (  0.15%)          2085165 (  0.02%)     69.32
   pop3            8474 (  0.04%)          1939930 (  0.02%)    228.93
   imap            3983 (  0.02%)           874979 (  0.01%)    219.68
   telnet          1162 (  0.01%)           137164 (  0.00%)    118.04
   ssh            54825 (  0.28%)         14756597 (  0.12%)    269.16
   dns             6824 (  0.04%)          2117141 (  0.02%)    310.25
   bgp             1814 (  0.01%)           268171 (  0.00%)    147.83
   napster           66 (  0.00%)             4048 (  0.00%)     61.33
   realaud          339 (  0.00%)           273257 (  0.00%)    806.07
   rtsp           17545 (  0.09%)          1221263 (  0.01%)     69.61
   icecast        12823 (  0.07%)          1954469 (  0.02%)    152.42
   hotline            6 (  0.00%)              838 (  0.00%)    139.67
   other        2452000 ( 12.63%)       1325112564 ( 10.68%)    540.42
  udp           2302597 ( 11.86%)        350616049 (  2.83%)    152.27
   dns          1554737 (  8.01%)        203782323 (  1.64%)    131.07
   rip                1 (  0.00%)               74 (  0.00%)     74.00
   realaud          789 (  0.00%)            50129 (  0.00%)     63.53
   halflif           26 (  0.00%)             2868 (  0.00%)    110.31
   starcra           46 (  0.00%)             5158 (  0.00%)    112.13
   everque          100 (  0.00%)            10293 (  0.00%)    102.93
   unreal            66 (  0.00%)             8099 (  0.00%)    122.71
   quake             24 (  0.00%)             2860 (  0.00%)    119.17
   cuseeme           16 (  0.00%)             1599 (  0.00%)     99.94
   other         746569 (  3.85%)        146446074 (  1.18%)    196.16
  icmp           525062 (  2.71%)         49199303 (  0.40%)     93.70
  ipip              357 (  0.00%)            43970 (  0.00%)    123.17
  ipsec            2394 (  0.01%)          2306244 (  0.02%)    963.34
  ip6              1239 (  0.01%)           176870 (  0.00%)    142.75
  other          301894 (  1.56%)         59957509 (  0.48%)    198.60
  frag             4800 (  0.02%)          5026695 (  0.04%)   1047.23
 ip6              68857 (  0.35%)         14653922 (  0.12%)    212.82
  tcp6            17764 (  0.09%)          7089751 (  0.06%)    399.11
   http(s)          389 (  0.00%)           332886 (  0.00%)    855.75
   http(c)         3209 (  0.02%)           308070 (  0.00%)     96.00
   smtp             858 (  0.00%)           335504 (  0.00%)    391.03
   nntp            3036 (  0.02%)          1037259 (  0.01%)    341.65
   pop3              12 (  0.00%)             1128 (  0.00%)     94.00
   ssh               77 (  0.00%)            12414 (  0.00%)    161.22
   bgp              167 (  0.00%)            17473 (  0.00%)    104.63
   other          10016 (  0.05%)          5045017 (  0.04%)    503.70
  udp6            35634 (  0.18%)          5679853 (  0.05%)    159.39
   dns            35554 (  0.18%)          5671179 (  0.05%)    159.51
   other             80 (  0.00%)             8674 (  0.00%)    108.42
  icmp6           15339 (  0.08%)          1862873 (  0.02%)    121.45
  ip6                82 (  0.00%)            11176 (  0.00%)    136.29
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6              7 (  0.00%)             6053 (  0.00%)    864.71


tcpdump file: 200705301400.dump.gz (517.81 MB)