Traffic Trace Info


DumpFile: 200708021400.dump
FileSize: 1686.50MB
Id: 200708021400
StartTime: Thu Aug 2 14:00:01 2007
EndTime: Thu Aug 2 14:15:01 2007
TotalTime: 900.32 seconds
TotalCapSize: 1322.38MB CapLen: 96 bytes
# of packets: 23858314 (16061.33MB)
AvgRate: 149.63Mbps stddev:16.21M

IP flow (unique src/dst pair) Information

# of flows: 830688 (avg. 28.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.1% 1.7% 1.7% 1.1% 1.1% 0.9% 0.9% 0.9% 0.8%

IP address Information

# of IPv4 addresses: 512551
Top 10 bandwidth usage (bytes/total in %):
17.5% 11.7% 9.4% 3.8% 3.5% 2.1% 2.1% 1.7% 1.7% 1.7%
# of IPv6 addresses: 1708
Top 10 bandwidth usage (bytes/total in %):
49.4% 37.8% 11.6% 5.4% 3.6% 3.5% 3.3% 3.1% 2.9% 2.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5586529
 [   64-  127]:    5960269
 [  128-  255]:     780570
 [  256-  511]:     505971
 [  512- 1023]:     710658
 [ 1024- 2047]:   10314317


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         23858314 (100.00%)      16841521792 (100.00%)    705.90
 ip            23752349 ( 99.56%)      16810820440 ( 99.82%)    707.75
  tcp          20917886 ( 87.68%)      16290509176 ( 96.73%)    778.78
   http(s)      9142141 ( 38.32%)      12600317677 ( 74.82%)   1378.27
   http(c)      6344992 ( 26.59%)        694864978 (  4.13%)    109.51
   squid         602439 (  2.53%)        486385172 (  2.89%)    807.36
   smtp          451856 (  1.89%)        126090762 (  0.75%)    279.05
   nntp             569 (  0.00%)            61418 (  0.00%)    107.94
   ftp            10096 (  0.04%)          1065700 (  0.01%)    105.56
   pop3           18312 (  0.08%)          9466491 (  0.06%)    516.96
   imap            4749 (  0.02%)          1789886 (  0.01%)    376.90
   telnet           171 (  0.00%)            21538 (  0.00%)    125.95
   ssh          1041702 (  4.37%)        163147426 (  0.97%)    156.62
   dns            20548 (  0.09%)          8337492 (  0.05%)    405.76
   bgp              364 (  0.00%)           180640 (  0.00%)    496.26
   napster           38 (  0.00%)             3375 (  0.00%)     88.82
   realaud           14 (  0.00%)             1148 (  0.00%)     82.00
   rtsp          364486 (  1.53%)        116074065 (  0.69%)    318.46
   icecast        83070 (  0.35%)         55102680 (  0.33%)    663.33
   other        2832329 ( 11.87%)       2027597930 ( 12.04%)    715.88
  udp           2479448 ( 10.39%)        441579570 (  2.62%)    178.10
   dns          1587324 (  6.65%)        201845239 (  1.20%)    127.16
   realaud          330 (  0.00%)            41228 (  0.00%)    124.93
   halflif           29 (  0.00%)             2757 (  0.00%)     95.07
   starcra           27 (  0.00%)             3383 (  0.00%)    125.30
   everque          128 (  0.00%)            15853 (  0.00%)    123.85
   unreal            56 (  0.00%)             5833 (  0.00%)    104.16
   quake             17 (  0.00%)             1366 (  0.00%)     80.35
   cuseeme            7 (  0.00%)              578 (  0.00%)     82.57
   other         891152 (  3.74%)        239146142 (  1.42%)    268.36
  icmp           242874 (  1.02%)         26573228 (  0.16%)    109.41
  ipip              352 (  0.00%)            41572 (  0.00%)    118.10
  ipsec            3885 (  0.02%)          4516046 (  0.03%)   1162.43
  ip6             52843 (  0.22%)         34020867 (  0.20%)    643.81
  other           55061 (  0.23%)         13579981 (  0.08%)    246.64
  frag             8448 (  0.04%)          8243402 (  0.05%)    975.78
 ip6             105963 (  0.44%)         30701232 (  0.18%)    289.74
  tcp6            41580 (  0.17%)         19988430 (  0.12%)    480.72
   http(s)         9059 (  0.04%)         12565940 (  0.07%)   1387.12
   http(c)        19689 (  0.08%)          1906753 (  0.01%)     96.84
   smtp            1093 (  0.00%)           379020 (  0.00%)    346.77
   nntp            1406 (  0.01%)           423069 (  0.00%)    300.90
   ftp              505 (  0.00%)           341479 (  0.00%)    676.20
   pop3              78 (  0.00%)             9118 (  0.00%)    116.90
   ssh             1975 (  0.01%)           185012 (  0.00%)     93.68
   dns               12 (  0.00%)             1122 (  0.00%)     93.50
   bgp              108 (  0.00%)            11553 (  0.00%)    106.97
   other           7655 (  0.03%)          4165364 (  0.02%)    544.14
  udp6            53120 (  0.22%)          9191547 (  0.05%)    173.03
   dns            52975 (  0.22%)          9164854 (  0.05%)    173.00
   other            145 (  0.00%)            26693 (  0.00%)    184.09
  icmp6           10942 (  0.05%)          1438630 (  0.01%)    131.48
  ip6               224 (  0.00%)            32925 (  0.00%)    146.99
  pim6               67 (  0.00%)             7632 (  0.00%)    113.91
  other6             30 (  0.00%)            42068 (  0.00%)   1402.27


tcpdump file: 200708021400.dump.gz (635.78 MB)