Traffic Trace Info


DumpFile: 200707281400.dump
FileSize: 1056.78MB
Id: 200707281400
StartTime: Sat Jul 28 14:00:00 2007
EndTime: Sat Jul 28 14:15:00 2007
TotalTime: 899.63 seconds
TotalCapSize: 826.29MB CapLen: 96 bytes
# of packets: 15100398 (10388.01MB)
AvgRate: 96.85Mbps stddev:14.58M

IP flow (unique src/dst pair) Information

# of flows: 421764 (avg. 35.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.0% 1.6% 1.4% 1.3% 1.3% 1.1% 1.0% 1.0% 0.8%

IP address Information

# of IPv4 addresses: 212780
Top 10 bandwidth usage (bytes/total in %):
18.2% 12.5% 11.8% 6.1% 3.1% 2.1% 2.0% 1.6% 1.6% 1.4%
# of IPv6 addresses: 1515
Top 10 bandwidth usage (bytes/total in %):
25.7% 25.7% 18.3% 18.1% 6.2% 4.0% 4.0% 3.9% 3.3% 2.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3440196
 [   64-  127]:    3620458
 [  128-  255]:     426423
 [  256-  511]:     400786
 [  512- 1023]:     557532
 [ 1024- 2047]:    6655003


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         15100398 (100.00%)      10892618235 (100.00%)    721.35
 ip            14981072 ( 99.21%)      10873218338 ( 99.82%)    725.80
  tcp          12844826 ( 85.06%)      10499088320 ( 96.39%)    817.38
   http(s)      5498175 ( 36.41%)       7480549320 ( 68.68%)   1360.55
   http(c)      3311773 ( 21.93%)        429435412 (  3.94%)    129.67
   squid         601584 (  3.98%)        401300955 (  3.68%)    667.07
   smtp          307263 (  2.03%)         58846698 (  0.54%)    191.52
   nntp             226 (  0.00%)            16747 (  0.00%)     74.10
   ftp           137744 (  0.91%)        174700908 (  1.60%)   1268.30
   pop3           10106 (  0.07%)          4818961 (  0.04%)    476.84
   imap            1998 (  0.01%)           698402 (  0.01%)    349.55
   telnet          3611 (  0.02%)           221615 (  0.00%)     61.37
   ssh           105949 (  0.70%)         51260849 (  0.47%)    483.83
   dns             6793 (  0.04%)          2156140 (  0.02%)    317.41
   bgp              217 (  0.00%)            51047 (  0.00%)    235.24
   realaud            4 (  0.00%)              252 (  0.00%)     63.00
   rtsp          206948 (  1.37%)         26273791 (  0.24%)    126.96
   icecast        42344 (  0.28%)         30553476 (  0.28%)    721.55
   other        2610080 ( 17.28%)       1838203087 ( 16.88%)    704.27
  udp           1761362 ( 11.66%)        319370530 (  2.93%)    181.32
   dns          1344341 (  8.90%)        161420739 (  1.48%)    120.07
   realaud         1145 (  0.01%)            69595 (  0.00%)     60.78
   halflif           12 (  0.00%)              977 (  0.00%)     81.42
   starcra           13 (  0.00%)             1628 (  0.00%)    125.23
   everque           33 (  0.00%)             5591 (  0.00%)    169.42
   unreal             5 (  0.00%)              668 (  0.00%)    133.60
   quake             16 (  0.00%)             1669 (  0.00%)    104.31
   cuseeme            2 (  0.00%)              158 (  0.00%)     79.00
   other         415401 (  2.75%)        157274213 (  1.44%)    378.61
  icmp           223286 (  1.48%)         24823223 (  0.23%)    111.17
  ipip              331 (  0.00%)            40826 (  0.00%)    123.34
  ipsec             369 (  0.00%)           135014 (  0.00%)    365.89
  ip6              7461 (  0.05%)          3987696 (  0.04%)    534.47
  other          143437 (  0.95%)         25772729 (  0.24%)    179.68
  frag             3739 (  0.02%)          4011706 (  0.04%)   1072.94
 ip6             119326 (  0.79%)         19399897 (  0.18%)    162.58
  tcp6            69031 (  0.46%)         10151751 (  0.09%)    147.06
   http(s)          356 (  0.00%)           365931 (  0.00%)   1027.90
   http(c)          946 (  0.01%)            97433 (  0.00%)    102.99
   smtp             410 (  0.00%)           137398 (  0.00%)    335.12
   nntp           58258 (  0.39%)          5154780 (  0.05%)     88.48
   ftp               32 (  0.00%)             2888 (  0.00%)     90.25
   pop3             119 (  0.00%)            13606 (  0.00%)    114.34
   ssh               64 (  0.00%)            10562 (  0.00%)    165.03
   dns                7 (  0.00%)              632 (  0.00%)     90.29
   bgp               90 (  0.00%)             8550 (  0.00%)     95.00
   other           8749 (  0.06%)          4359971 (  0.04%)    498.34
  udp6            41075 (  0.27%)          8013164 (  0.07%)    195.09
   dns            41022 (  0.27%)          8006642 (  0.07%)    195.18
   other             53 (  0.00%)             6522 (  0.00%)    123.06
  icmp6            8953 (  0.06%)          1197033 (  0.01%)    133.70
  ip6               217 (  0.00%)            31949 (  0.00%)    147.23
  pim6               50 (  0.00%)             6000 (  0.00%)    120.00


tcpdump file: 200707281400.dump.gz (379.92 MB)