Traffic Trace Info


DumpFile: 200707301400.dump
FileSize: 1607.51MB
Id: 200707301400
StartTime: Mon Jul 30 14:00:01 2007
EndTime: Mon Jul 30 14:15:00 2007
TotalTime: 899.23 seconds
TotalCapSize: 1263.75MB CapLen: 96 bytes
# of packets: 22524415 (15331.24MB)
AvgRate: 143.03Mbps stddev:23.27M

IP flow (unique src/dst pair) Information

# of flows: 555310 (avg. 40.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.3% 1.9% 1.5% 0.8% 0.8% 0.7% 0.7% 0.7% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 303491
Top 10 bandwidth usage (bytes/total in %):
18.4% 14.8% 14.5% 9.0% 8.8% 3.0% 1.9% 1.6% 1.5% 1.3%
# of IPv6 addresses: 1666
Top 10 bandwidth usage (bytes/total in %):
22.8% 22.5% 9.7% 7.9% 6.5% 6.5% 4.2% 4.0% 3.8% 3.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5077331
 [   64-  127]:    5840954
 [  128-  255]:     486785
 [  256-  511]:     505634
 [  512- 1023]:     626534
 [ 1024- 2047]:    9987177


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         22524415 (100.00%)      16075971108 (100.00%)    713.71
 ip            22427487 ( 99.57%)      16052067640 ( 99.85%)    715.73
  tcp          20189348 ( 89.63%)      15693176075 ( 97.62%)    777.30
   http(s)      7919343 ( 35.16%)      10541988169 ( 65.58%)   1331.17
   http(c)      5772800 ( 25.63%)        797553483 (  4.96%)    138.16
   squid         611601 (  2.72%)        463133792 (  2.88%)    757.25
   smtp          376414 (  1.67%)        118434302 (  0.74%)    314.64
   nntp             227 (  0.00%)            18690 (  0.00%)     82.33
   ftp            43130 (  0.19%)          9472973 (  0.06%)    219.64
   pop3           20543 (  0.09%)          9458344 (  0.06%)    460.42
   imap            6594 (  0.03%)          3161491 (  0.02%)    479.45
   telnet           703 (  0.00%)            66409 (  0.00%)     94.47
   ssh           203906 (  0.91%)        123541067 (  0.77%)    605.87
   dns             6393 (  0.03%)          2179705 (  0.01%)    340.95
   bgp              200 (  0.00%)            46844 (  0.00%)    234.22
   napster            6 (  0.00%)              884 (  0.00%)    147.33
   realaud          435 (  0.00%)            51296 (  0.00%)    117.92
   rtsp          319280 (  1.42%)         89779389 (  0.56%)    281.19
   icecast        39375 (  0.17%)         29777822 (  0.19%)    756.26
   other        4868387 ( 21.61%)       3504510755 ( 21.80%)    719.85
  udp           1801862 (  8.00%)        279397381 (  1.74%)    155.06
   dns          1536855 (  6.82%)        191473933 (  1.19%)    124.59
   realaud         1909 (  0.01%)          1278636 (  0.01%)    669.79
   halflif            8 (  0.00%)              606 (  0.00%)     75.75
   starcra            6 (  0.00%)              742 (  0.00%)    123.67
   everque           75 (  0.00%)             9703 (  0.00%)    129.37
   unreal            11 (  0.00%)             1156 (  0.00%)    105.09
   quake              9 (  0.00%)              746 (  0.00%)     82.89
   cuseeme            1 (  0.00%)               88 (  0.00%)     88.00
   other         260014 (  1.15%)         83976228 (  0.52%)    322.97
  icmp           294426 (  1.31%)         32183596 (  0.20%)    109.31
  ipip              346 (  0.00%)            42436 (  0.00%)    122.65
  ipsec             179 (  0.00%)            19690 (  0.00%)    110.00
  ip6              7639 (  0.03%)          4025319 (  0.03%)    526.94
  other          133687 (  0.59%)         43223143 (  0.27%)    323.32
  frag            16035 (  0.07%)         16182444 (  0.10%)   1009.20
 ip6              96928 (  0.43%)         23903468 (  0.15%)    246.61
  tcp6            38363 (  0.17%)         14158213 (  0.09%)    369.06
   http(s)         3826 (  0.02%)          4033470 (  0.03%)   1054.23
   http(c)        11376 (  0.05%)          1238343 (  0.01%)    108.86
   squid              5 (  0.00%)              422 (  0.00%)     84.40
   smtp             762 (  0.00%)           180769 (  0.00%)    237.23
   nntp            1861 (  0.01%)          1546501 (  0.01%)    831.01
   pop3              60 (  0.00%)             7450 (  0.00%)    124.17
   ssh             1930 (  0.01%)           204646 (  0.00%)    106.03
   bgp               92 (  0.00%)             8776 (  0.00%)     95.39
   other          18451 (  0.08%)          6937836 (  0.04%)    376.01
  udp6            48011 (  0.21%)          8336271 (  0.05%)    173.63
   dns            47975 (  0.21%)          8332311 (  0.05%)    173.68
   other             36 (  0.00%)             3960 (  0.00%)    110.00
  icmp6           10301 (  0.05%)          1368717 (  0.01%)    132.87
  ip6               219 (  0.00%)            32144 (  0.00%)    146.78
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              4 (  0.00%)             4043 (  0.00%)   1010.75


tcpdump file: 200707301400.dump.gz (563.66 MB)