Traffic Trace Info


DumpFile: 200707251400.dump
FileSize: 1620.00MB
Id: 200707251400
StartTime: Wed Jul 25 14:00:01 2007
EndTime: Wed Jul 25 14:15:01 2007
TotalTime: 900.03 seconds
TotalCapSize: 1267.37MB CapLen: 96 bytes
# of packets: 23104957 (15925.92MB)
AvgRate: 148.38Mbps stddev:23.62M

IP flow (unique src/dst pair) Information

# of flows: 554976 (avg. 41.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 1.2% 1.0% 1.0% 0.9% 0.7% 0.7% 0.6% 0.5% 0.5%

IP address Information

# of IPv4 addresses: 290343
Top 10 bandwidth usage (bytes/total in %):
16.5% 11.0% 8.7% 3.3% 2.3% 2.2% 1.3% 1.2% 1.2% 1.2%
# of IPv6 addresses: 1545
Top 10 bandwidth usage (bytes/total in %):
17.7% 17.7% 11.5% 10.1% 10.1% 6.9% 5.9% 5.9% 5.1% 3.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5656376
 [   64-  127]:    5290315
 [  128-  255]:     563147
 [  256-  511]:     514126
 [  512- 1023]:     741508
 [ 1024- 2047]:   10339485


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         23104957 (100.00%)      16699537213 (100.00%)    722.77
 ip            23018278 ( 99.62%)      16679736298 ( 99.88%)    724.63
  tcp          20003764 ( 86.58%)      15922308773 ( 95.35%)    795.97
   http(s)      9813479 ( 42.47%)      13317373525 ( 79.75%)   1357.05
   http(c)      6538813 ( 28.30%)        863174915 (  5.17%)    132.01
   squid         633108 (  2.74%)        420733681 (  2.52%)    664.55
   smtp          482260 (  2.09%)        156150349 (  0.94%)    323.79
   nntp             365 (  0.00%)            34057 (  0.00%)     93.31
   ftp             9659 (  0.04%)           777539 (  0.00%)     80.50
   pop3           26529 (  0.11%)         11870065 (  0.07%)    447.44
   imap            5286 (  0.02%)          1857304 (  0.01%)    351.36
   telnet           400 (  0.00%)            26249 (  0.00%)     65.62
   ssh            91704 (  0.40%)         43170847 (  0.26%)    470.76
   dns             4684 (  0.02%)          2039608 (  0.01%)    435.44
   bgp              233 (  0.00%)            68014 (  0.00%)    291.91
   napster           96 (  0.00%)             9490 (  0.00%)     98.85
   rtsp          312259 (  1.35%)         57031646 (  0.34%)    182.64
   icecast        89811 (  0.39%)         51701678 (  0.31%)    575.67
   other        1995075 (  8.63%)        996289626 (  5.97%)    499.37
  udp           2511732 ( 10.87%)        692693164 (  4.15%)    275.78
   dns          1758803 (  7.61%)        211132954 (  1.26%)    120.04
   rip                1 (  0.00%)               90 (  0.00%)     90.00
   realaud         3642 (  0.02%)           219309 (  0.00%)     60.22
   halflif           15 (  0.00%)             1313 (  0.00%)     87.53
   starcra            6 (  0.00%)              602 (  0.00%)    100.33
   everque           35 (  0.00%)             6412 (  0.00%)    183.20
   unreal             5 (  0.00%)              508 (  0.00%)    101.60
   quake             15 (  0.00%)             1743 (  0.00%)    116.20
   cuseeme           20 (  0.00%)             2994 (  0.00%)    149.70
   other         748883 (  3.24%)        481302715 (  2.88%)    642.69
  icmp           383394 (  1.66%)         35354480 (  0.21%)     92.21
  ipip              347 (  0.00%)            41958 (  0.00%)    120.92
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              7627 (  0.03%)          4041753 (  0.02%)    529.93
  other          111234 (  0.48%)         25276370 (  0.15%)    227.24
  frag             3621 (  0.02%)          3531046 (  0.02%)    975.16
 ip6              86679 (  0.38%)         19800915 (  0.12%)    228.44
  tcp6            36526 (  0.16%)         10934811 (  0.07%)    299.37
   http(s)         2229 (  0.01%)          2682549 (  0.02%)   1203.48
   http(c)        23968 (  0.10%)          2411659 (  0.01%)    100.62
   squid              3 (  0.00%)              234 (  0.00%)     78.00
   smtp             854 (  0.00%)           272669 (  0.00%)    319.28
   nntp            1556 (  0.01%)           354388 (  0.00%)    227.76
   ftp              176 (  0.00%)            20724 (  0.00%)    117.75
   ssh               62 (  0.00%)            10402 (  0.00%)    167.77
   dns                5 (  0.00%)              403 (  0.00%)     80.60
   bgp              110 (  0.00%)            12342 (  0.00%)    112.20
   other           7563 (  0.03%)          5169441 (  0.03%)    683.52
  udp6            40677 (  0.18%)          7594001 (  0.05%)    186.69
   dns            40617 (  0.18%)          7587401 (  0.05%)    186.80
   other             60 (  0.00%)             6600 (  0.00%)    110.00
  icmp6            9200 (  0.04%)          1226380 (  0.01%)    133.30
  ip6               217 (  0.00%)            31899 (  0.00%)    147.00
  pim6               49 (  0.00%)             5904 (  0.00%)    120.49
  other6             10 (  0.00%)             7920 (  0.00%)    792.00


tcpdump file: 200707251400.dump.gz (591.62 MB)