Traffic Trace Info


DumpFile: 200708051400.dump
FileSize: 1306.46MB
Id: 200708051400
StartTime: Sun Aug 5 14:00:00 2007
EndTime: Sun Aug 5 14:15:01 2007
TotalTime: 900.74 seconds
TotalCapSize: 1021.93MB CapLen: 96 bytes
# of packets: 18642247 (14238.45MB)
AvgRate: 132.60Mbps stddev:19.35M

IP flow (unique src/dst pair) Information

# of flows: 383893 (avg. 48.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 5.1% 4.3% 2.4% 2.3% 1.6% 1.4% 1.4% 1.3% 0.9%

IP address Information

# of IPv4 addresses: 202546
Top 10 bandwidth usage (bytes/total in %):
19.2% 10.7% 10.2% 8.7% 5.7% 5.7% 5.1% 5.0% 4.3% 3.2%
# of IPv6 addresses: 1477
Top 10 bandwidth usage (bytes/total in %):
25.5% 25.5% 5.5% 5.2% 5.0% 4.9% 4.9% 4.6% 4.5% 4.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3389995
 [   64-  127]:    4324675
 [  128-  255]:     689294
 [  256-  511]:     328489
 [  512- 1023]:     489827
 [ 1024- 2047]:    9419967


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         18642247 (100.00%)      14930101901 (100.00%)    800.87
 ip            18579292 ( 99.66%)      14915699296 ( 99.90%)    802.81
  tcp          16190814 ( 86.85%)      14325041385 ( 95.95%)    884.76
   http(s)      7603089 ( 40.78%)      10755474035 ( 72.04%)   1414.62
   http(c)      3641968 ( 19.54%)        330390806 (  2.21%)     90.72
   squid         474435 (  2.54%)        300908288 (  2.02%)    634.25
   smtp          258598 (  1.39%)         44498670 (  0.30%)    172.08
   nntp               1 (  0.00%)               74 (  0.00%)     74.00
   ftp            41118 (  0.22%)          4024016 (  0.03%)     97.87
   pop3           10730 (  0.06%)          5672426 (  0.04%)    528.65
   imap            2036 (  0.01%)           512357 (  0.00%)    251.65
   telnet           485 (  0.00%)            49679 (  0.00%)    102.43
   ssh           428307 (  2.30%)         85341609 (  0.57%)    199.25
   dns             4474 (  0.02%)          2022301 (  0.01%)    452.01
   bgp              208 (  0.00%)            44252 (  0.00%)    212.75
   napster            2 (  0.00%)              124 (  0.00%)     62.00
   realaud           86 (  0.00%)             9656 (  0.00%)    112.28
   rtsp          173823 (  0.93%)         11675225 (  0.08%)     67.17
   icecast        49451 (  0.27%)         24822694 (  0.17%)    501.97
   other        3501999 ( 18.79%)       2759594933 ( 18.48%)    788.01
  udp           1983234 ( 10.64%)        535504324 (  3.59%)    270.02
   dns          1139310 (  6.11%)        137616086 (  0.92%)    120.79
   realaud         4985 (  0.03%)          3673261 (  0.02%)    736.86
   halflif           11 (  0.00%)              850 (  0.00%)     77.27
   starcra           19 (  0.00%)             2996 (  0.00%)    157.68
   everque           36 (  0.00%)             6279 (  0.00%)    174.42
   unreal             5 (  0.00%)              849 (  0.00%)    169.80
   quake              8 (  0.00%)              682 (  0.00%)     85.25
   cuseeme            9 (  0.00%)             1219 (  0.00%)    135.44
   other         838836 (  4.50%)        394185425 (  2.64%)    469.92
  icmp           312378 (  1.68%)         31306866 (  0.21%)    100.22
  ipip              912 (  0.00%)           133228 (  0.00%)    146.08
  ip6              7670 (  0.04%)          4046494 (  0.03%)    527.57
  other           84284 (  0.45%)         19666999 (  0.13%)    233.34
  frag             3041 (  0.02%)          3001109 (  0.02%)    986.88
 ip6              62955 (  0.34%)         14402605 (  0.10%)    228.78
  tcp6            15753 (  0.08%)          5996444 (  0.04%)    380.65
   http(s)          203 (  0.00%)           181868 (  0.00%)    895.90
   http(c)         6068 (  0.03%)           822561 (  0.01%)    135.56
   squid             76 (  0.00%)             6015 (  0.00%)     79.14
   smtp             334 (  0.00%)            80609 (  0.00%)    241.34
   nntp            1198 (  0.01%)           507291 (  0.00%)    423.45
   ftp               26 (  0.00%)             2914 (  0.00%)    112.08
   pop3              95 (  0.00%)            10249 (  0.00%)    107.88
   ssh               66 (  0.00%)            10722 (  0.00%)    162.45
   bgp               90 (  0.00%)             8550 (  0.00%)     95.00
   other           7597 (  0.04%)          4365665 (  0.03%)    574.66
  udp6            36367 (  0.20%)          6907803 (  0.05%)    189.95
   dns            36321 (  0.19%)          6901969 (  0.05%)    190.03
   other             46 (  0.00%)             5834 (  0.00%)    126.83
  icmp6           10548 (  0.06%)          1458539 (  0.01%)    138.28
  ip6               217 (  0.00%)            31899 (  0.00%)    147.00
  pim6               70 (  0.00%)             7920 (  0.00%)    113.14


tcpdump file: 200708051400.dump.gz (474.26 MB)