Traffic Trace Info


DumpFile: 200705311400.dump
FileSize: 1830.69MB
Id: 200705311400
StartTime: Thu May 31 14:00:00 2007
EndTime: Thu May 31 14:15:01 2007
TotalTime: 900.40 seconds
TotalCapSize: 1434.23MB CapLen: 96 bytes
# of packets: 25981544 (16640.45MB)
AvgRate: 155.03Mbps stddev:12.25M

IP flow (unique src/dst pair) Information

# of flows: 672686 (avg. 38.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 7.3% 3.7% 1.0% 1.0% 1.0% 0.9% 0.8% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 374739
Top 10 bandwidth usage (bytes/total in %):
18.1% 14.9% 14.9% 5.0% 4.3% 3.9% 3.8% 3.1% 2.8% 2.8%
# of IPv6 addresses: 1697
Top 10 bandwidth usage (bytes/total in %):
78.9% 78.9% 3.7% 3.7% 3.5% 3.5% 1.1% 1.1% 1.1% 1.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5588950
 [   64-  127]:    7279099
 [  128-  255]:    1152316
 [  256-  511]:     550015
 [  512- 1023]:     603994
 [ 1024- 2047]:   10807170


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         25981544 (100.00%)      17448773669 (100.00%)    671.58
 ip            25820705 ( 99.38%)      17352985083 ( 99.45%)    672.06
  tcp          20734494 ( 79.80%)      15500660575 ( 88.84%)    747.58
   http(s)      7240461 ( 27.87%)       9693264278 ( 55.55%)   1338.76
   http(c)      5874710 ( 22.61%)        682003405 (  3.91%)    116.09
   squid         662836 (  2.55%)        261131400 (  1.50%)    393.96
   smtp          502128 (  1.93%)        143954656 (  0.83%)    286.69
   nntp             225 (  0.00%)            16758 (  0.00%)     74.48
   ftp            47597 (  0.18%)          4390770 (  0.03%)     92.25
   pop3           12965 (  0.05%)          3482301 (  0.02%)    268.59
   imap            7337 (  0.03%)          4434546 (  0.03%)    604.41
   telnet           888 (  0.00%)            87134 (  0.00%)     98.12
   ssh           703814 (  2.71%)        152469747 (  0.87%)    216.63
   dns             2818 (  0.01%)          1836452 (  0.01%)    651.69
   bgp             1301 (  0.01%)           169420 (  0.00%)    130.22
   napster          201 (  0.00%)           175556 (  0.00%)    873.41
   realaud          156 (  0.00%)            22137 (  0.00%)    141.90
   rtsp          406878 (  1.57%)        250835608 (  1.44%)    616.49
   icecast        24426 (  0.09%)         14194781 (  0.08%)    581.13
   hotline           57 (  0.00%)            10661 (  0.00%)    187.04
   other        5245686 ( 20.19%)       4288180167 ( 24.58%)    817.47
  udp           4272787 ( 16.45%)       1755061583 ( 10.06%)    410.75
   dns          2302054 (  8.86%)        255082046 (  1.46%)    110.81
   realaud           44 (  0.00%)             6116 (  0.00%)    139.00
   halflif           50 (  0.00%)             6045 (  0.00%)    120.90
   starcra           46 (  0.00%)             7649 (  0.00%)    166.28
   everque          110 (  0.00%)            16299 (  0.00%)    148.17
   unreal            29 (  0.00%)             4688 (  0.00%)    161.66
   quake             10 (  0.00%)             1371 (  0.00%)    137.10
   cuseeme            2 (  0.00%)              170 (  0.00%)     85.00
   other        1970241 (  7.58%)       1499659471 (  8.59%)    761.16
  icmp           662799 (  2.55%)         59046626 (  0.34%)     89.09
  ipip              351 (  0.00%)            42354 (  0.00%)    120.67
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              1186 (  0.00%)           142550 (  0.00%)    120.19
  other          148908 (  0.57%)         38011595 (  0.22%)    255.27
  frag             4544 (  0.02%)          4715088 (  0.03%)   1037.65
 ip6             160836 (  0.62%)         95788406 (  0.55%)    595.57
  tcp6           110332 (  0.42%)         88324425 (  0.51%)    800.53
   http(s)         4628 (  0.02%)          4679995 (  0.03%)   1011.23
   http(c)        11926 (  0.05%)          1110287 (  0.01%)     93.10
   smtp            1321 (  0.01%)           408690 (  0.00%)    309.38
   nntp            3116 (  0.01%)           941210 (  0.01%)    302.06
   ftp               30 (  0.00%)             2702 (  0.00%)     90.07
   pop3              12 (  0.00%)             1128 (  0.00%)     94.00
   bgp              150 (  0.00%)            14760 (  0.00%)     98.40
   other          89149 (  0.34%)         81165653 (  0.47%)    910.45
  udp6            40365 (  0.16%)          6263401 (  0.04%)    155.17
   dns            40058 (  0.15%)          6217952 (  0.04%)    155.22
   other            307 (  0.00%)            45449 (  0.00%)    148.04
  icmp6           10023 (  0.04%)          1184305 (  0.01%)    118.16
  ip6                84 (  0.00%)            11462 (  0.00%)    136.45
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6              1 (  0.00%)              597 (  0.00%)    597.00


tcpdump file: 200705311400.dump.gz (663.00 MB)