Traffic Trace Info


DumpFile: 200708011400.dump
FileSize: 1536.77MB
Id: 200708011400
StartTime: Wed Aug 1 14:00:01 2007
EndTime: Wed Aug 1 14:15:01 2007
TotalTime: 900.01 seconds
TotalCapSize: 1201.14MB CapLen: 96 bytes
# of packets: 21991337 (14972.81MB)
AvgRate: 139.54Mbps stddev:16.54M

IP flow (unique src/dst pair) Information

# of flows: 873858 (avg. 25.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.1% 2.1% 2.0% 1.9% 1.3% 1.3% 1.1% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 494700
Top 10 bandwidth usage (bytes/total in %):
19.2% 10.9% 10.2% 2.2% 2.2% 2.1% 2.1% 2.1% 2.1% 2.1%
# of IPv6 addresses: 1705
Top 10 bandwidth usage (bytes/total in %):
64.0% 45.5% 18.5% 8.6% 8.6% 2.2% 1.8% 1.7% 1.7% 1.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5237505
 [   64-  127]:    5314733
 [  128-  255]:     635868
 [  256-  511]:     551533
 [  512- 1023]:     589650
 [ 1024- 2047]:    9662048


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         21991337 (100.00%)      15700126481 (100.00%)    713.92
 ip            21822515 ( 99.23%)      15641947231 ( 99.63%)    716.78
  tcp          18829991 ( 85.62%)      15136635063 ( 96.41%)    803.86
   http(s)      8362114 ( 38.02%)      11428480858 ( 72.79%)   1366.70
   http(c)      6099381 ( 27.74%)        694990030 (  4.43%)    113.94
   squid         643869 (  2.93%)        515379162 (  3.28%)    800.44
   smtp          455709 (  2.07%)        159649563 (  1.02%)    350.33
   nntp              12 (  0.00%)              750 (  0.00%)     62.50
   ftp             5280 (  0.02%)           587980 (  0.00%)    111.36
   pop3           17826 (  0.08%)          8197404 (  0.05%)    459.86
   imap            5528 (  0.03%)          1849828 (  0.01%)    334.63
   telnet           214 (  0.00%)            30388 (  0.00%)    142.00
   ssh           101843 (  0.46%)         49468455 (  0.32%)    485.73
   dns             6340 (  0.03%)          2200213 (  0.01%)    347.04
   bgp              263 (  0.00%)            91102 (  0.00%)    346.40
   realaud           34 (  0.00%)             4429 (  0.00%)    130.26
   rtsp          130931 (  0.60%)         14390286 (  0.09%)    109.91
   icecast        51450 (  0.23%)         34644692 (  0.22%)    673.37
   other        2949189 ( 13.41%)       2226669443 ( 14.18%)    755.01
  udp           2455601 ( 11.17%)        422077805 (  2.69%)    171.88
   dns          1613804 (  7.34%)        206776854 (  1.32%)    128.13
   realaud          108 (  0.00%)            14398 (  0.00%)    133.31
   halflif           29 (  0.00%)             3115 (  0.00%)    107.41
   starcra           34 (  0.00%)             4806 (  0.00%)    141.35
   everque          142 (  0.00%)            21900 (  0.00%)    154.23
   unreal            62 (  0.00%)             7339 (  0.00%)    118.37
   quake             22 (  0.00%)             2324 (  0.00%)    105.64
   cuseeme           12 (  0.00%)             1458 (  0.00%)    121.50
   other         840780 (  3.82%)        214432104 (  1.37%)    255.04
  icmp           289345 (  1.32%)         29434422 (  0.19%)    101.73
  ipip              334 (  0.00%)            40352 (  0.00%)    120.81
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              7468 (  0.03%)          3990083 (  0.03%)    534.29
  other          239596 (  1.09%)         49749706 (  0.32%)    207.64
  frag            10107 (  0.05%)         10047681 (  0.06%)    994.13
 ip6             168820 (  0.77%)         58179130 (  0.37%)    344.62
  tcp6           106365 (  0.48%)         47547185 (  0.30%)    447.02
   http(s)         9202 (  0.04%)         12176244 (  0.08%)   1323.22
   http(c)        13103 (  0.06%)          1429247 (  0.01%)    109.08
   smtp             547 (  0.00%)           181034 (  0.00%)    330.96
   nntp           59006 (  0.27%)          5607603 (  0.04%)     95.03
   ftp               34 (  0.00%)             4918 (  0.00%)    144.65
   pop3              75 (  0.00%)             8922 (  0.00%)    118.96
   ssh               66 (  0.00%)            10722 (  0.00%)    162.45
   dns               12 (  0.00%)             1122 (  0.00%)     93.50
   bgp               96 (  0.00%)             9875 (  0.00%)    102.86
   other          24224 (  0.11%)         28117498 (  0.18%)   1160.73
  udp6            51113 (  0.23%)          9127057 (  0.06%)    178.57
   dns            51056 (  0.23%)          9119872 (  0.06%)    178.62
   other             57 (  0.00%)             7185 (  0.00%)    126.05
  icmp6           11067 (  0.05%)          1462748 (  0.01%)    132.17
  ip6               217 (  0.00%)            32002 (  0.00%)    147.47
  pim6               54 (  0.00%)             6384 (  0.00%)    118.22
  other6              4 (  0.00%)             3754 (  0.00%)    938.50


tcpdump file: 200708011400.dump.gz (582.68 MB)