Traffic Trace Info


DumpFile: 200707121400.dump
FileSize: 2051.56MB
Id: 200707121400
StartTime: Thu Jul 12 14:00:01 2007
EndTime: Thu Jul 12 14:15:01 2007
TotalTime: 899.80 seconds
TotalCapSize: 1606.08MB CapLen: 96 bytes
# of packets: 29178758 (20825.52MB)
AvgRate: 194.17Mbps stddev:30.69M

IP flow (unique src/dst pair) Information

# of flows: 635286 (avg. 45.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.5% 1.4% 1.3% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 343419
Top 10 bandwidth usage (bytes/total in %):
13.9% 7.4% 3.6% 3.3% 3.1% 2.5% 2.4% 2.3% 2.3% 1.8%
# of IPv6 addresses: 1604
Top 10 bandwidth usage (bytes/total in %):
23.3% 23.3% 8.5% 6.1% 6.0% 5.9% 4.8% 4.7% 4.7% 3.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6463646
 [   64-  127]:    6696756
 [  128-  255]:     807480
 [  256-  511]:     774854
 [  512- 1023]:     875465
 [ 1024- 2047]:   13560557


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         29178758 (100.00%)      21837142737 (100.00%)    748.39
 ip            29114739 ( 99.78%)      21821750408 ( 99.93%)    749.51
  tcp          25680083 ( 88.01%)      20843778478 ( 95.45%)    811.67
   http(s)     12661043 ( 43.39%)      17045986959 ( 78.06%)   1346.33
   http(c)      8167167 ( 27.99%)       1018934882 (  4.67%)    124.76
   squid         518882 (  1.78%)        440280889 (  2.02%)    848.52
   smtp          434636 (  1.49%)        154448697 (  0.71%)    355.35
   nntp             211 (  0.00%)            15462 (  0.00%)     73.28
   ftp           535466 (  1.84%)         36493017 (  0.17%)     68.15
   pop3           21288 (  0.07%)          8533594 (  0.04%)    400.86
   imap           18949 (  0.06%)         11512135 (  0.05%)    607.53
   telnet           259 (  0.00%)            33459 (  0.00%)    129.19
   ssh            36625 (  0.13%)          4258841 (  0.02%)    116.28
   dns             6228 (  0.02%)          2217463 (  0.01%)    356.05
   bgp              176 (  0.00%)            36789 (  0.00%)    209.03
   napster          248 (  0.00%)            36416 (  0.00%)    146.84
   realaud          127 (  0.00%)            12581 (  0.00%)     99.06
   rtsp          285982 (  0.98%)         87344835 (  0.40%)    305.42
   icecast        11093 (  0.04%)           746731 (  0.00%)     67.32
   hotline           23 (  0.00%)             1453 (  0.00%)     63.17
   other        2981679 ( 10.22%)       2032884215 (  9.31%)    681.79
  udp           2831811 (  9.71%)        869523097 (  3.98%)    307.06
   dns          1683793 (  5.77%)        214912331 (  0.98%)    127.64
   realaud         2478 (  0.01%)           150310 (  0.00%)     60.66
   halflif           18 (  0.00%)             1685 (  0.00%)     93.61
   starcra            8 (  0.00%)             1034 (  0.00%)    129.25
   everque           42 (  0.00%)             7496 (  0.00%)    178.48
   unreal            24 (  0.00%)             4218 (  0.00%)    175.75
   quake             19 (  0.00%)             1975 (  0.00%)    103.95
   cuseeme            7 (  0.00%)              882 (  0.00%)    126.00
   other        1145133 (  3.92%)        654357341 (  3.00%)    571.42
  icmp           373035 (  1.28%)         38244037 (  0.18%)    102.52
  ipip              321 (  0.00%)            38254 (  0.00%)    119.17
  ipsec            4154 (  0.01%)          5351996 (  0.02%)   1288.40
  ip6             18265 (  0.06%)         12422286 (  0.06%)    680.11
  other          207070 (  0.71%)         52392260 (  0.24%)    253.02
  frag             9492 (  0.03%)          9336940 (  0.04%)    983.66
 ip6              64019 (  0.22%)         15392329 (  0.07%)    240.43
  tcp6            16216 (  0.06%)          7041853 (  0.03%)    434.25
   http(s)          833 (  0.00%)           921866 (  0.00%)   1106.68
   http(c)         1515 (  0.01%)           209724 (  0.00%)    138.43
   squid           2051 (  0.01%)          1031840 (  0.00%)    503.09
   smtp             338 (  0.00%)            78483 (  0.00%)    232.20
   nntp            1655 (  0.01%)           211257 (  0.00%)    127.65
   ftp               50 (  0.00%)             5082 (  0.00%)    101.64
   ssh               64 (  0.00%)            10562 (  0.00%)    165.03
   dns               42 (  0.00%)             5866 (  0.00%)    139.67
   bgp               98 (  0.00%)             9706 (  0.00%)     99.04
   other           9570 (  0.03%)          4557467 (  0.02%)    476.22
  udp6            39420 (  0.14%)          7200198 (  0.03%)    182.65
   dns            39370 (  0.13%)          7194698 (  0.03%)    182.75
   other             50 (  0.00%)             5500 (  0.00%)    110.00
  icmp6            8048 (  0.03%)          1102391 (  0.01%)    136.98
  ip6               220 (  0.00%)            32303 (  0.00%)    146.83
  ipsec6             84 (  0.00%)            11368 (  0.00%)    135.33
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00


tcpdump file: 200707121400.dump.gz (715.81 MB)