Traffic Trace Info


DumpFile: 200708081400.dump
FileSize: 1594.12MB
Id: 200708081400
StartTime: Wed Aug 8 14:00:01 2007
EndTime: Wed Aug 8 14:15:01 2007
TotalTime: 900.27 seconds
TotalCapSize: 1247.81MB CapLen: 96 bytes
# of packets: 22691185 (15402.81MB)
AvgRate: 143.50Mbps stddev:20.85M

IP flow (unique src/dst pair) Information

# of flows: 552660 (avg. 41.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 3.0% 1.0% 1.0% 0.8% 0.7% 0.6% 0.6% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 274540
Top 10 bandwidth usage (bytes/total in %):
17.0% 10.8% 9.7% 3.8% 3.8% 3.1% 3.0% 2.0% 1.6% 1.5%
# of IPv6 addresses: 1596
Top 10 bandwidth usage (bytes/total in %):
22.0% 22.0% 9.5% 6.5% 5.5% 4.9% 4.7% 4.6% 4.5% 4.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5372848
 [   64-  127]:    5472870
 [  128-  255]:     632848
 [  256-  511]:     566816
 [  512- 1023]:     674792
 [ 1024- 2047]:    9971011


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         22691185 (100.00%)      16151013901 (100.00%)    711.77
 ip            22613619 ( 99.66%)      16134910132 ( 99.90%)    713.50
  tcp          19382487 ( 85.42%)      15367613747 ( 95.15%)    792.86
   http(s)      9273949 ( 40.87%)      12512345985 ( 77.47%)   1349.19
   http(c)      6222711 ( 27.42%)        721339406 (  4.47%)    115.92
   squid         560160 (  2.47%)        345201999 (  2.14%)    616.26
   smtp          501036 (  2.21%)        167068133 (  1.03%)    333.45
   nntp               8 (  0.00%)              520 (  0.00%)     65.00
   ftp            18850 (  0.08%)          2020041 (  0.01%)    107.16
   pop3           18272 (  0.08%)          6634821 (  0.04%)    363.11
   imap            5019 (  0.02%)          1140416 (  0.01%)    227.22
   telnet           863 (  0.00%)           101722 (  0.00%)    117.87
   ssh            87437 (  0.39%)         29391220 (  0.18%)    336.14
   dns            15328 (  0.07%)          2724954 (  0.02%)    177.78
   bgp              221 (  0.00%)            61642 (  0.00%)    278.92
   napster           12 (  0.00%)             2646 (  0.00%)    220.50
   realaud            9 (  0.00%)              973 (  0.00%)    108.11
   rtsp          488045 (  2.15%)        135255106 (  0.84%)    277.14
   icecast          669 (  0.00%)            81490 (  0.00%)    121.81
   other        2189893 (  9.65%)       1444242373 (  8.94%)    659.50
  udp           2768427 ( 12.20%)        666232981 (  4.13%)    240.65
   dns          1803083 (  7.95%)        223647522 (  1.38%)    124.04
   realaud         2356 (  0.01%)           224248 (  0.00%)     95.18
   halflif           26 (  0.00%)             3702 (  0.00%)    142.38
   starcra           10 (  0.00%)             1212 (  0.00%)    121.20
   everque           33 (  0.00%)             5310 (  0.00%)    160.91
   unreal            70 (  0.00%)             7383 (  0.00%)    105.47
   quake             22 (  0.00%)             1867 (  0.00%)     84.86
   cuseeme           10 (  0.00%)             1310 (  0.00%)    131.00
   other         962450 (  4.24%)        441798805 (  2.74%)    459.04
  icmp           286295 (  1.26%)         29120890 (  0.18%)    101.72
  ipip              365 (  0.00%)            44170 (  0.00%)    121.01
  ipsec            2143 (  0.01%)          2355906 (  0.01%)   1099.35
  ip6             20064 (  0.09%)          8501089 (  0.05%)    423.70
  other          153838 (  0.68%)         61041349 (  0.38%)    396.79
  frag             5798 (  0.03%)          7391031 (  0.05%)   1274.76
 ip6              77566 (  0.34%)         16103769 (  0.10%)    207.61
  tcp6            21050 (  0.09%)          6453705 (  0.04%)    306.59
   http(s)          170 (  0.00%)           133471 (  0.00%)    785.12
   http(c)        14570 (  0.06%)          1579391 (  0.01%)    108.40
   smtp            2317 (  0.01%)          1011376 (  0.01%)    436.50
   ssh              278 (  0.00%)            35658 (  0.00%)    128.27
   dns                7 (  0.00%)              632 (  0.00%)     90.29
   bgp               74 (  0.00%)             8822 (  0.00%)    119.22
   other           3634 (  0.02%)          3684355 (  0.02%)   1013.86
  udp6            48757 (  0.21%)          8519013 (  0.05%)    174.72
   dns            48719 (  0.21%)          8514773 (  0.05%)    174.77
   other             38 (  0.00%)             4240 (  0.00%)    111.58
  icmp6            7467 (  0.03%)          1076808 (  0.01%)    144.21
  ip6               214 (  0.00%)            31595 (  0.00%)    147.64
  pim6               58 (  0.00%)             6808 (  0.00%)    117.38
  other6             20 (  0.00%)            15840 (  0.00%)    792.00


tcpdump file: 200708081400.dump.gz (585.42 MB)