Traffic Trace Info


DumpFile: 200707151400.dump
FileSize: 922.42MB
Id: 200707151400
StartTime: Sun Jul 15 14:00:00 2007
EndTime: Sun Jul 15 14:15:00 2007
TotalTime: 900.36 seconds
TotalCapSize: 722.78MB CapLen: 96 bytes
# of packets: 13072668 (8583.79MB)
AvgRate: 79.98Mbps stddev:12.67M

IP flow (unique src/dst pair) Information

# of flows: 1352617 (avg. 9.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.0% 3.8% 2.8% 1.0% 0.9% 0.8% 0.7% 0.7% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 1153631
Top 10 bandwidth usage (bytes/total in %):
14.6% 13.7% 13.7% 9.6% 9.5% 4.3% 3.8% 3.2% 2.9% 1.9%
# of IPv6 addresses: 1478
Top 10 bandwidth usage (bytes/total in %):
31.4% 31.4% 8.7% 5.0% 4.2% 3.3% 2.8% 2.8% 2.7% 2.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2918705
 [   64-  127]:    3591076
 [  128-  255]:     384469
 [  256-  511]:     314897
 [  512- 1023]:     357661
 [ 1024- 2047]:    5505860


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         13072668 (100.00%)       9000756657 (100.00%)    688.52
 ip            13024360 ( 99.63%)       8988973165 ( 99.87%)    690.17
  tcp          10787125 ( 82.52%)       8492962846 ( 94.36%)    787.32
   http(s)      4987965 ( 38.16%)       6888557714 ( 76.53%)   1381.04
   http(c)      2561162 ( 19.59%)        242638314 (  2.70%)     94.74
   squid         476072 (  3.64%)        331831300 (  3.69%)    697.02
   smtp          328092 (  2.51%)         54046004 (  0.60%)    164.73
   nntp             198 (  0.00%)            14652 (  0.00%)     74.00
   ftp            42513 (  0.33%)          3484085 (  0.04%)     81.95
   pop3           11699 (  0.09%)          6937490 (  0.08%)    593.00
   imap            8074 (  0.06%)          6338298 (  0.07%)    785.03
   telnet           120 (  0.00%)             7476 (  0.00%)     62.30
   ssh            48877 (  0.37%)         44771864 (  0.50%)    916.01
   dns             3034 (  0.02%)           204190 (  0.00%)     67.30
   bgp              195 (  0.00%)            43545 (  0.00%)    223.31
   napster            4 (  0.00%)              366 (  0.00%)     91.50
   realaud           19 (  0.00%)             2602 (  0.00%)    136.95
   rtsp          218750 (  1.67%)         92175429 (  1.02%)    421.37
   icecast        51501 (  0.39%)         56609854 (  0.63%)   1099.20
   other        2048845 ( 15.67%)        765299363 (  8.50%)    373.53
  udp           1895070 ( 14.50%)        433466450 (  4.82%)    228.73
   dns          1337839 ( 10.23%)        161056044 (  1.79%)    120.39
   realaud         1592 (  0.01%)            96758 (  0.00%)     60.78
   halflif            9 (  0.00%)              995 (  0.00%)    110.56
   starcra           10 (  0.00%)             1358 (  0.00%)    135.80
   everque           37 (  0.00%)             7000 (  0.00%)    189.19
   unreal             6 (  0.00%)              513 (  0.00%)     85.50
   quake             10 (  0.00%)              843 (  0.00%)     84.30
   cuseeme            3 (  0.00%)              537 (  0.00%)    179.00
   other         555490 (  4.25%)        272292396 (  3.03%)    490.18
  icmp           287348 (  2.20%)         28297431 (  0.31%)     98.48
  ipip              357 (  0.00%)            42350 (  0.00%)    118.63
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6             18419 (  0.14%)         12479737 (  0.14%)    677.55
  other           35861 (  0.27%)         21704551 (  0.24%)    605.24
  frag             3190 (  0.02%)          3103135 (  0.03%)    972.77
 ip6              48308 (  0.37%)         11783492 (  0.13%)    243.92
  tcp6            11355 (  0.09%)          4991641 (  0.06%)    439.60
   http(s)          235 (  0.00%)           181856 (  0.00%)    773.86
   http(c)         3074 (  0.02%)           339819 (  0.00%)    110.55
   smtp             331 (  0.00%)           167415 (  0.00%)    505.79
   nntp            1473 (  0.01%)           179097 (  0.00%)    121.59
   pop3             112 (  0.00%)            12011 (  0.00%)    107.24
   ssh               66 (  0.00%)            10722 (  0.00%)    162.45
   dns               29 (  0.00%)             3636 (  0.00%)    125.38
   bgp              108 (  0.00%)            11216 (  0.00%)    103.85
   other           5927 (  0.05%)          4085869 (  0.05%)    689.37
  udp6            28643 (  0.22%)          5612336 (  0.06%)    195.94
   dns            28611 (  0.22%)          5608816 (  0.06%)    196.04
   other             32 (  0.00%)             3520 (  0.00%)    110.00
  icmp6            8057 (  0.06%)          1142492 (  0.01%)    141.80
  ip6               222 (  0.00%)            32658 (  0.00%)    147.11
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              1 (  0.00%)              285 (  0.00%)    285.00


tcpdump file: 200707151400.dump.gz (312.05 MB)