Traffic Trace Info


DumpFile: 200707221400.dump
FileSize: 1057.49MB
Id: 200707221400
StartTime: Sun Jul 22 14:00:00 2007
EndTime: Sun Jul 22 14:15:00 2007
TotalTime: 899.95 seconds
TotalCapSize: 826.49MB CapLen: 96 bytes
# of packets: 15134129 (10701.17MB)
AvgRate: 99.74Mbps stddev:11.00M

IP flow (unique src/dst pair) Information

# of flows: 428174 (avg. 35.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 2.5% 2.4% 1.3% 1.2% 1.2% 1.1% 1.0% 0.7% 0.6%

IP address Information

# of IPv4 addresses: 232125
Top 10 bandwidth usage (bytes/total in %):
22.0% 14.2% 13.8% 6.0% 3.6% 2.5% 2.4% 1.6% 1.5% 1.4%
# of IPv6 addresses: 1473
Top 10 bandwidth usage (bytes/total in %):
24.5% 24.5% 7.2% 7.2% 5.7% 4.6% 4.6% 4.5% 4.1% 4.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2987010
 [   64-  127]:    3884785
 [  128-  255]:     440978
 [  256-  511]:     355124
 [  512- 1023]:     523579
 [ 1024- 2047]:    6942653


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         15134129 (100.00%)      11220989370 (100.00%)    741.44
 ip            15068652 ( 99.57%)      11206656086 ( 99.87%)    743.71
  tcp          12490686 ( 82.53%)      10632626658 ( 94.76%)    851.24
   http(s)      5990050 ( 39.58%)       8314065837 ( 74.09%)   1387.98
   http(c)      3173453 ( 20.97%)        305001205 (  2.72%)     96.11
   squid         534716 (  3.53%)        337837403 (  3.01%)    631.81
   smtp          369545 (  2.44%)         87289608 (  0.78%)    236.21
   nntp             198 (  0.00%)            14652 (  0.00%)     74.00
   ftp            25623 (  0.17%)          1978035 (  0.02%)     77.20
   pop3           20275 (  0.13%)         18874785 (  0.17%)    930.94
   imap            1307 (  0.01%)           336483 (  0.00%)    257.45
   telnet            41 (  0.00%)             2616 (  0.00%)     63.80
   ssh           123299 (  0.81%)         56050394 (  0.50%)    454.59
   dns            13375 (  0.09%)          1810391 (  0.02%)    135.36
   bgp              190 (  0.00%)            30993 (  0.00%)    163.12
   napster           39 (  0.00%)             2845 (  0.00%)     72.95
   realaud            5 (  0.00%)              518 (  0.00%)    103.60
   rtsp          218606 (  1.44%)        177870727 (  1.59%)    813.66
   icecast         7487 (  0.05%)           480730 (  0.00%)     64.21
   other        2012468 ( 13.30%)       1330978896 ( 11.86%)    661.37
  udp           2061311 ( 13.62%)        495640464 (  4.42%)    240.45
   dns          1414988 (  9.35%)        164718420 (  1.47%)    116.41
   realaud        31754 (  0.21%)         33235485 (  0.30%)   1046.66
   halflif           16 (  0.00%)             2501 (  0.00%)    156.31
   starcra           16 (  0.00%)             2858 (  0.00%)    178.62
   everque           95 (  0.00%)            15036 (  0.00%)    158.27
   unreal            29 (  0.00%)             4444 (  0.00%)    153.24
   quake             20 (  0.00%)             2108 (  0.00%)    105.40
   cuseeme            5 (  0.00%)              769 (  0.00%)    153.80
   other         614369 (  4.06%)        297657432 (  2.65%)    484.49
  icmp           294261 (  1.94%)         28797465 (  0.26%)     97.86
  ipip              363 (  0.00%)            44494 (  0.00%)    122.57
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              7452 (  0.05%)          3956047 (  0.04%)    530.87
  other          214399 (  1.42%)         45571158 (  0.41%)    212.55
  frag             3172 (  0.02%)          3168740 (  0.03%)    998.97
 ip6              65477 (  0.43%)         14333284 (  0.13%)    218.91
  tcp6            15858 (  0.10%)          5637389 (  0.05%)    355.49
   http(s)          158 (  0.00%)           121245 (  0.00%)    767.37
   http(c)         5741 (  0.04%)           698953 (  0.01%)    121.75
   smtp             784 (  0.01%)           349421 (  0.00%)    445.69
   nntp            1528 (  0.01%)           267964 (  0.00%)    175.37
   pop3             113 (  0.00%)            12004 (  0.00%)    106.23
   ssh              109 (  0.00%)            18306 (  0.00%)    167.94
   dns               12 (  0.00%)             1122 (  0.00%)     93.50
   bgp               97 (  0.00%)             9642 (  0.00%)     99.40
   other           7316 (  0.05%)          4158732 (  0.04%)    568.44
  udp6            32788 (  0.22%)          6402208 (  0.06%)    195.26
   dns            32748 (  0.22%)          6397808 (  0.06%)    195.36
   other             40 (  0.00%)             4400 (  0.00%)    110.00
  icmp6           16578 (  0.11%)          2257388 (  0.02%)    136.17
  ip6               201 (  0.00%)            30067 (  0.00%)    149.59
  pim6               52 (  0.00%)             6232 (  0.00%)    119.85


tcpdump file: 200707221400.dump.gz (388.37 MB)