Traffic Trace Info


DumpFile: 200707141400.dump
FileSize: 1162.21MB
Id: 200707141400
StartTime: Sat Jul 14 14:00:00 2007
EndTime: Sat Jul 14 14:15:00 2007
TotalTime: 899.79 seconds
TotalCapSize: 909.39MB CapLen: 96 bytes
# of packets: 16557901 (10767.86MB)
AvgRate: 100.40Mbps stddev:18.88M

IP flow (unique src/dst pair) Information

# of flows: 449726 (avg. 36.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.1% 1.5% 1.5% 1.5% 1.3% 1.2% 1.1% 0.9% 0.8%

IP address Information

# of IPv4 addresses: 222597
Top 10 bandwidth usage (bytes/total in %):
11.1% 10.7% 5.0% 3.9% 3.0% 3.0% 3.0% 2.7% 2.2% 2.1%
# of IPv6 addresses: 1478
Top 10 bandwidth usage (bytes/total in %):
28.1% 28.0% 8.9% 6.4% 6.1% 4.8% 4.2% 3.9% 3.2% 3.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4168672
 [   64-  127]:    4166301
 [  128-  255]:     464217
 [  256-  511]:     456980
 [  512- 1023]:     401972
 [ 1024- 2047]:    6899759


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         16557901 (100.00%)      11290919916 (100.00%)    681.91
 ip            16498953 ( 99.64%)      11278031779 ( 99.89%)    683.56
  tcp          14261812 ( 86.13%)      10849692677 ( 96.09%)    760.75
   http(s)      6226852 ( 37.61%)       8384115987 ( 74.26%)   1346.45
   http(c)      3876881 ( 23.41%)        411716528 (  3.65%)    106.20
   squid         672319 (  4.06%)        470453290 (  4.17%)    699.75
   smtp          342557 (  2.07%)         67673602 (  0.60%)    197.55
   nntp             459 (  0.00%)            33181 (  0.00%)     72.29
   ftp            77421 (  0.47%)          6099453 (  0.05%)     78.78
   pop3           14455 (  0.09%)          6362128 (  0.06%)    440.13
   imap            2342 (  0.01%)           455712 (  0.00%)    194.58
   telnet           321 (  0.00%)            22352 (  0.00%)     69.63
   ssh             5215 (  0.03%)          1268740 (  0.01%)    243.29
   dns             8339 (  0.05%)           556448 (  0.00%)     66.73
   bgp              192 (  0.00%)            35495 (  0.00%)    184.87
   napster         2290 (  0.01%)          1301831 (  0.01%)    568.49
   realaud          150 (  0.00%)            19068 (  0.00%)    127.12
   rtsp          385753 (  2.33%)        149601273 (  1.32%)    387.82
   icecast        26182 (  0.16%)         28666226 (  0.25%)   1094.88
   other        2620081 ( 15.82%)       1321311183 ( 11.70%)    504.30
  udp           1846840 ( 11.15%)        373723358 (  3.31%)    202.36
   dns          1448053 (  8.75%)        176103022 (  1.56%)    121.61
   realaud        27992 (  0.17%)         29665947 (  0.26%)   1059.80
   halflif           20 (  0.00%)             1594 (  0.00%)     79.70
   starcra            9 (  0.00%)             1689 (  0.00%)    187.67
   everque           46 (  0.00%)             7694 (  0.00%)    167.26
   unreal            10 (  0.00%)             1707 (  0.00%)    170.70
   quake              7 (  0.00%)              585 (  0.00%)     83.57
   cuseeme            1 (  0.00%)              104 (  0.00%)    104.00
   other         369218 (  2.23%)        167559704 (  1.48%)    453.82
  icmp           289614 (  1.75%)         28322516 (  0.25%)     97.79
  ipip              361 (  0.00%)            44230 (  0.00%)    122.52
  ipsec             527 (  0.00%)           424418 (  0.00%)    805.35
  ip6             18260 (  0.11%)         12421668 (  0.11%)    680.27
  other           81539 (  0.49%)         13402912 (  0.12%)    164.37
  frag            11423 (  0.07%)         11267903 (  0.10%)    986.42
 ip6              58948 (  0.36%)         12888137 (  0.11%)    218.64
  tcp6            21027 (  0.13%)          6082219 (  0.05%)    289.26
   http(s)          282 (  0.00%)           231783 (  0.00%)    821.93
   http(c)        11593 (  0.07%)          1197411 (  0.01%)    103.29
   squid              3 (  0.00%)              282 (  0.00%)     94.00
   smtp             456 (  0.00%)            99943 (  0.00%)    219.17
   nntp            1436 (  0.01%)           346714 (  0.00%)    241.44
   pop3              97 (  0.00%)            10817 (  0.00%)    111.52
   ssh               66 (  0.00%)            10722 (  0.00%)    162.45
   bgp              109 (  0.00%)            11918 (  0.00%)    109.34
   other           6985 (  0.04%)          4172629 (  0.04%)    597.37
  udp6            30208 (  0.18%)          5772818 (  0.05%)    191.10
   dns            30167 (  0.18%)          5768308 (  0.05%)    191.21
   other             41 (  0.00%)             4510 (  0.00%)    110.00
  icmp6            7465 (  0.05%)           993887 (  0.01%)    133.14
  ip6               214 (  0.00%)            31545 (  0.00%)    147.41
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              4 (  0.00%)             3588 (  0.00%)    897.00


tcpdump file: 200707141400.dump.gz (410.76 MB)