Traffic Trace Info


DumpFile: 200707011400.dump
FileSize: 1000.26MB
Id: 200707011400
StartTime: Sun Jul 1 14:00:00 2007
EndTime: Sun Jul 1 14:15:00 2007
TotalTime: 899.85 seconds
TotalCapSize: 779.77MB CapLen: 96 bytes
# of packets: 14441131 (10063.81MB)
AvgRate: 93.83Mbps stddev:11.28M

IP flow (unique src/dst pair) Information

# of flows: 445852 (avg. 32.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.7% 4.3% 2.3% 1.8% 1.5% 1.3% 1.3% 1.1% 1.0% 0.8%

IP address Information

# of IPv4 addresses: 235986
Top 10 bandwidth usage (bytes/total in %):
19.2% 18.1% 16.0% 14.9% 4.3% 3.2% 2.7% 2.4% 2.3% 1.8%
# of IPv6 addresses: 1456
Top 10 bandwidth usage (bytes/total in %):
28.7% 28.7% 21.1% 21.1% 4.8% 4.1% 3.6% 3.3% 3.2% 2.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3093524
 [   64-  127]:    3435169
 [  128-  255]:     560456
 [  256-  511]:     368573
 [  512- 1023]:     475453
 [ 1024- 2047]:    6507956


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         14441131 (100.00%)      10552669359 (100.00%)    730.74
 ip            14330677 ( 99.24%)      10535701252 ( 99.84%)    735.19
  tcp          11814527 ( 81.81%)       9989916616 ( 94.67%)    845.56
   http(s)      4194686 ( 29.05%)       5630206606 ( 53.35%)   1342.22
   http(c)      2267838 ( 15.70%)        241134611 (  2.29%)    106.33
   squid         490974 (  3.40%)        316964544 (  3.00%)    645.58
   smtp          321762 (  2.23%)         62829848 (  0.60%)    195.27
   nntp             198 (  0.00%)            14652 (  0.00%)     74.00
   ftp           526007 (  3.64%)        518643610 (  4.91%)    986.00
   pop3           11086 (  0.08%)          6146208 (  0.06%)    554.41
   imap            3484 (  0.02%)          1005509 (  0.01%)    288.61
   telnet           222 (  0.00%)            22481 (  0.00%)    101.27
   ssh           134656 (  0.93%)         56279191 (  0.53%)    417.95
   dns             4636 (  0.03%)          2001022 (  0.02%)    431.63
   bgp              181 (  0.00%)            28259 (  0.00%)    156.13
   realaud           10 (  0.00%)             1033 (  0.00%)    103.30
   rtsp          228573 (  1.58%)         14240411 (  0.13%)     62.30
   icecast          413 (  0.00%)            41880 (  0.00%)    101.40
   hotline            6 (  0.00%)              366 (  0.00%)     61.00
   other        3629794 ( 25.14%)       3140356298 ( 29.76%)    865.16
  udp           1973856 ( 13.67%)        466934865 (  4.42%)    236.56
   dns          1267322 (  8.78%)        150137992 (  1.42%)    118.47
   realaud        44218 (  0.31%)         24796199 (  0.23%)    560.77
   halflif           13 (  0.00%)              983 (  0.00%)     75.62
   starcra            9 (  0.00%)             1324 (  0.00%)    147.11
   everque           19 (  0.00%)             3092 (  0.00%)    162.74
   unreal             3 (  0.00%)              276 (  0.00%)     92.00
   quake             18 (  0.00%)             1476 (  0.00%)     82.00
   cuseeme            6 (  0.00%)              530 (  0.00%)     88.33
   other         662240 (  4.59%)        291990679 (  2.77%)    440.91
  icmp           455147 (  3.15%)         43863765 (  0.42%)     96.37
  ipip              350 (  0.00%)            41820 (  0.00%)    119.49
  ipsec            1320 (  0.01%)          1238944 (  0.01%)    938.59
  ip6             14909 (  0.10%)          7341340 (  0.07%)    492.41
  other           70568 (  0.49%)         26363902 (  0.25%)    373.60
  frag             3502 (  0.02%)          3551620 (  0.03%)   1014.17
 ip6             110454 (  0.76%)         16968107 (  0.16%)    153.62
  tcp6            67932 (  0.47%)          9902607 (  0.09%)    145.77
   http(s)          228 (  0.00%)           187602 (  0.00%)    822.82
   http(c)          616 (  0.00%)            66253 (  0.00%)    107.55
   smtp             928 (  0.01%)           272175 (  0.00%)    293.29
   nntp           57089 (  0.40%)          5053855 (  0.05%)     88.53
   ftp               85 (  0.00%)             7656 (  0.00%)     90.07
   ssh               64 (  0.00%)            10562 (  0.00%)    165.03
   dns               27 (  0.00%)             3246 (  0.00%)    120.22
   bgp               91 (  0.00%)             8663 (  0.00%)     95.20
   other           8804 (  0.06%)          4292595 (  0.04%)    487.57
  udp6            26469 (  0.18%)          4942574 (  0.05%)    186.73
   dns            26322 (  0.18%)          4915620 (  0.05%)    186.75
   other            147 (  0.00%)            26954 (  0.00%)    183.36
  icmp6           14406 (  0.10%)          1885492 (  0.02%)    130.88
  ip6              1613 (  0.01%)           230424 (  0.00%)    142.85
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6              3 (  0.00%)             2794 (  0.00%)    931.33


tcpdump file: 200707011400.dump.gz (352.31 MB)