Traffic Trace Info


DumpFile: 200708071400.dump
FileSize: 1571.62MB
Id: 200708071400
StartTime: Tue Aug 7 14:00:01 2007
EndTime: Tue Aug 7 14:15:00 2007
TotalTime: 899.37 seconds
TotalCapSize: 1229.46MB CapLen: 96 bytes
# of packets: 22418929 (14062.56MB)
AvgRate: 131.17Mbps stddev:16.58M

IP flow (unique src/dst pair) Information

# of flows: 625885 (avg. 35.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.2% 1.2% 1.0% 1.0% 1.0% 0.9% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 333651
Top 10 bandwidth usage (bytes/total in %):
19.1% 11.2% 10.7% 2.6% 2.0% 1.8% 1.7% 1.6% 1.5% 1.2%
# of IPv6 addresses: 1632
Top 10 bandwidth usage (bytes/total in %):
22.4% 21.2% 15.7% 7.4% 5.5% 5.4% 4.2% 4.1% 4.0% 3.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6354041
 [   64-  127]:    5311459
 [  128-  255]:     573700
 [  256-  511]:     571879
 [  512- 1023]:     621803
 [ 1024- 2047]:    8986047


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         22418929 (100.00%)      14745660607 (100.00%)    657.73
 ip            22294817 ( 99.45%)      14723043772 ( 99.85%)    660.38
  tcp          19286113 ( 86.03%)      14104776826 ( 95.65%)    731.34
   http(s)      8133057 ( 36.28%)      11207964812 ( 76.01%)   1378.08
   http(c)      6939194 ( 30.95%)        748613835 (  5.08%)    107.88
   squid         546599 (  2.44%)        318650603 (  2.16%)    582.97
   smtp          430052 (  1.92%)        103014115 (  0.70%)    239.54
   nntp              18 (  0.00%)             1175 (  0.00%)     65.28
   ftp            18356 (  0.08%)          1589647 (  0.01%)     86.60
   pop3           27250 (  0.12%)         20004674 (  0.14%)    734.12
   imap            4913 (  0.02%)           876672 (  0.01%)    178.44
   telnet        131619 (  0.59%)          8767593 (  0.06%)     66.61
   ssh           106784 (  0.48%)         38899064 (  0.26%)    364.28
   dns             6398 (  0.03%)          2174844 (  0.01%)    339.93
   bgp              221 (  0.00%)            55836 (  0.00%)    252.65
   napster            9 (  0.00%)              572 (  0.00%)     63.56
   realaud           36 (  0.00%)            11958 (  0.00%)    332.17
   rtsp          257439 (  1.15%)         20603439 (  0.14%)     80.03
   icecast         8077 (  0.04%)           628410 (  0.00%)     77.80
   hotline            3 (  0.00%)              184 (  0.00%)     61.33
   other        2676072 ( 11.94%)       1632918433 ( 11.07%)    610.19
  udp           2456247 ( 10.96%)        550008021 (  3.73%)    223.92
   dns          1643355 (  7.33%)        205650841 (  1.39%)    125.14
   realaud         1821 (  0.01%)           109734 (  0.00%)     60.26
   halflif           10 (  0.00%)             1352 (  0.00%)    135.20
   starcra           10 (  0.00%)             1388 (  0.00%)    138.80
   everque           31 (  0.00%)             5477 (  0.00%)    176.68
   unreal             7 (  0.00%)              592 (  0.00%)     84.57
   quake             12 (  0.00%)              979 (  0.00%)     81.58
   cuseeme            1 (  0.00%)               86 (  0.00%)     86.00
   other         810998 (  3.62%)        344236934 (  2.33%)    424.46
  icmp           398546 (  1.78%)         37393785 (  0.25%)     93.83
  ipip              352 (  0.00%)            43340 (  0.00%)    123.12
  ipsec             972 (  0.00%)           791104 (  0.01%)    813.89
  ip6              7526 (  0.03%)          3996246 (  0.03%)    530.99
  other          145061 (  0.65%)         26034450 (  0.18%)    179.47
  frag             3875 (  0.02%)          3910241 (  0.03%)   1009.09
 ip6             124112 (  0.55%)         22616835 (  0.15%)    182.23
  tcp6            69841 (  0.31%)         12294476 (  0.08%)    176.04
   http(s)          961 (  0.00%)          1033134 (  0.01%)   1075.06
   http(c)        57875 (  0.26%)          6453391 (  0.04%)    111.51
   squid             12 (  0.00%)             1810 (  0.00%)    150.83
   smtp             885 (  0.00%)           214452 (  0.00%)    242.32
   nntp            1621 (  0.01%)           210981 (  0.00%)    130.15
   ssh              118 (  0.00%)            16502 (  0.00%)    139.85
   dns               12 (  0.00%)             1122 (  0.00%)     93.50
   bgp               61 (  0.00%)             6323 (  0.00%)    103.66
   other           8296 (  0.04%)          4356761 (  0.03%)    525.16
  udp6            44095 (  0.20%)          7837667 (  0.05%)    177.75
   dns            44046 (  0.20%)          7829619 (  0.05%)    177.76
   other             49 (  0.00%)             8048 (  0.00%)    164.24
  icmp6            8589 (  0.04%)          1227654 (  0.01%)    142.93
  ip6               217 (  0.00%)            31899 (  0.00%)    147.00
  pim6               61 (  0.00%)             7056 (  0.00%)    115.67
  other6           1309 (  0.01%)          1218083 (  0.01%)    930.54


tcpdump file: 200708071400.dump.gz (570.70 MB)