Traffic Trace Info


DumpFile: 200707161400.dump
FileSize: 1434.89MB
Id: 200707161400
StartTime: Mon Jul 16 14:00:01 2007
EndTime: Mon Jul 16 14:15:00 2007
TotalTime: 899.75 seconds
TotalCapSize: 1117.65MB CapLen: 96 bytes
# of packets: 20785658 (14591.86MB)
AvgRate: 136.05Mbps stddev:19.70M

IP flow (unique src/dst pair) Information

# of flows: 956786 (avg. 21.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 4.2% 3.5% 2.5% 1.5% 1.4% 1.2% 1.2% 1.1% 1.0%

IP address Information

# of IPv4 addresses: 619688
Top 10 bandwidth usage (bytes/total in %):
13.9% 8.8% 6.7% 6.6% 5.6% 4.9% 4.6% 4.4% 3.6% 3.6%
# of IPv6 addresses: 1620
Top 10 bandwidth usage (bytes/total in %):
23.0% 19.5% 19.5% 13.2% 7.7% 7.7% 7.7% 4.9% 3.9% 3.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4937912
 [   64-  127]:    4687806
 [  128-  255]:     665532
 [  256-  511]:     430166
 [  512- 1023]:     465924
 [ 1024- 2047]:    9598318


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         20785658 (100.00%)      15300671384 (100.00%)    736.12
 ip            20668278 ( 99.44%)      15282259114 ( 99.88%)    739.41
  tcp          17459025 ( 84.00%)      14491755682 ( 94.71%)    830.04
   http(s)      8192439 ( 39.41%)      11303498739 ( 73.88%)   1379.75
   http(c)      4567475 ( 21.97%)        511793338 (  3.34%)    112.05
   squid         537912 (  2.59%)        438909386 (  2.87%)    815.95
   smtp          339925 (  1.64%)         69795322 (  0.46%)    205.33
   nntp             198 (  0.00%)            14652 (  0.00%)     74.00
   ftp            57978 (  0.28%)          4680488 (  0.03%)     80.73
   pop3           12442 (  0.06%)          6649416 (  0.04%)    534.43
   imap            2517 (  0.01%)           400278 (  0.00%)    159.03
   telnet           263 (  0.00%)            28650 (  0.00%)    108.94
   ssh           369907 (  1.78%)         89548852 (  0.59%)    242.08
   dns             4608 (  0.02%)          2006870 (  0.01%)    435.52
   bgp              192 (  0.00%)            45124 (  0.00%)    235.02
   napster         1052 (  0.01%)           321433 (  0.00%)    305.54
   realaud            9 (  0.00%)              778 (  0.00%)     86.44
   rtsp          285571 (  1.37%)         58296129 (  0.38%)    204.14
   icecast        11723 (  0.06%)         11280936 (  0.07%)    962.29
   hotline           16 (  0.00%)             3017 (  0.00%)    188.56
   other        3074796 ( 14.79%)       1994482154 ( 13.04%)    648.66
  udp           2604990 ( 12.53%)        689563247 (  4.51%)    264.71
   dns          1460762 (  7.03%)        176102277 (  1.15%)    120.56
   realaud        39591 (  0.19%)         41354996 (  0.27%)   1044.56
   halflif           53 (  0.00%)             8409 (  0.00%)    158.66
   starcra           59 (  0.00%)             8307 (  0.00%)    140.80
   everque          270 (  0.00%)           134696 (  0.00%)    498.87
   unreal            83 (  0.00%)            11979 (  0.00%)    144.33
   quake             30 (  0.00%)             3458 (  0.00%)    115.27
   cuseeme           11 (  0.00%)             1106 (  0.00%)    100.55
   other        1104090 (  5.31%)        471932429 (  3.08%)    427.44
  icmp           322808 (  1.55%)         33268307 (  0.22%)    103.06
  ipip              344 (  0.00%)            41192 (  0.00%)    119.74
  ipsec            5520 (  0.03%)          6089664 (  0.04%)   1103.20
  ip6              8252 (  0.04%)          4075829 (  0.03%)    493.92
  other          267339 (  1.29%)         57465193 (  0.38%)    214.95
  frag             7800 (  0.04%)          9951753 (  0.07%)   1275.87
 ip6             117380 (  0.56%)         18412270 (  0.12%)    156.86
  tcp6            73784 (  0.35%)         10509959 (  0.07%)    142.44
   http(s)          370 (  0.00%)           338477 (  0.00%)    914.80
   http(c)        48540 (  0.23%)          4259480 (  0.03%)     87.75
   smtp             703 (  0.00%)           292049 (  0.00%)    415.43
   nntp            1540 (  0.01%)           191167 (  0.00%)    124.13
   ftp               96 (  0.00%)             8870 (  0.00%)     92.40
   pop3              51 (  0.00%)             6195 (  0.00%)    121.47
   ssh               66 (  0.00%)            10722 (  0.00%)    162.45
   bgp              146 (  0.00%)            13040 (  0.00%)     89.32
   other          22272 (  0.11%)          5389959 (  0.04%)    242.01
  udp6            35422 (  0.17%)          6771438 (  0.04%)    191.16
   dns            35384 (  0.17%)          6767258 (  0.04%)    191.25
   other             38 (  0.00%)             4180 (  0.00%)    110.00
  icmp6            7922 (  0.04%)          1091567 (  0.01%)    137.79
  ip6               217 (  0.00%)            31949 (  0.00%)    147.23
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              5 (  0.00%)             3277 (  0.00%)    655.40


tcpdump file: 200707161400.dump.gz (512.07 MB)