Traffic Trace Info


DumpFile: 200708121400.dump
FileSize: 1145.57MB
Id: 200708121400
StartTime: Sun Aug 12 14:00:01 2007
EndTime: Sun Aug 12 14:15:01 2007
TotalTime: 900.07 seconds
TotalCapSize: 894.15MB CapLen: 96 bytes
# of packets: 16467735 (9974.88MB)
AvgRate: 92.98Mbps stddev:17.15M

IP flow (unique src/dst pair) Information

# of flows: 658367 (avg. 25.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 4.4% 2.6% 1.9% 1.0% 0.9% 0.8% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 384802
Top 10 bandwidth usage (bytes/total in %):
14.9% 14.2% 9.8% 8.9% 8.9% 4.2% 2.9% 2.7% 2.7% 2.7%
# of IPv6 addresses: 1413
Top 10 bandwidth usage (bytes/total in %):
68.5% 68.5% 9.3% 9.3% 2.1% 1.5% 1.3% 1.2% 1.1% 1.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3721317
 [   64-  127]:    4694025
 [  128-  255]:     811165
 [  256-  511]:     434231
 [  512- 1023]:     377331
 [ 1024- 2047]:    6429666


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         16467735 (100.00%)      10459418128 (100.00%)    635.15
 ip            16106813 ( 97.81%)      10420310974 ( 99.63%)    646.95
  tcp          12309569 ( 74.75%)       9094372212 ( 86.95%)    738.81
   http(s)      5012000 ( 30.44%)       6962536201 ( 66.57%)   1389.17
   http(c)      3281037 ( 19.92%)        288356409 (  2.76%)     87.89
   squid         902018 (  5.48%)        479627967 (  4.59%)    531.73
   smtp          280472 (  1.70%)         43137975 (  0.41%)    153.80
   nntp              55 (  0.00%)             3552 (  0.00%)     64.58
   ftp            12301 (  0.07%)          1205784 (  0.01%)     98.02
   pop3           12179 (  0.07%)          6906226 (  0.07%)    567.06
   imap            2058 (  0.01%)           718326 (  0.01%)    349.04
   telnet            81 (  0.00%)             6095 (  0.00%)     75.25
   ssh           129707 (  0.79%)         43492861 (  0.42%)    335.32
   dns             4781 (  0.03%)          2043363 (  0.02%)    427.39
   bgp              210 (  0.00%)            51812 (  0.00%)    246.72
   napster            3 (  0.00%)              186 (  0.00%)     62.00
   rtsp          100461 (  0.61%)         28006423 (  0.27%)    278.78
   icecast          711 (  0.00%)           136557 (  0.00%)    192.06
   other        2571494 ( 15.62%)       1238142415 ( 11.84%)    481.49
  udp           3326891 ( 20.20%)       1270368966 ( 12.15%)    381.85
   dns          1275479 (  7.75%)        147158719 (  1.41%)    115.38
   realaud         3523 (  0.02%)           841075 (  0.01%)    238.74
   halflif           17 (  0.00%)             2765 (  0.00%)    162.65
   starcra           27 (  0.00%)             5622 (  0.00%)    208.22
   everque           79 (  0.00%)            13956 (  0.00%)    176.66
   unreal            51 (  0.00%)             9085 (  0.00%)    178.14
   quake             18 (  0.00%)             2866 (  0.00%)    159.22
   cuseeme           13 (  0.00%)             1689 (  0.00%)    129.92
   other        2047675 ( 12.43%)       1122328139 ( 10.73%)    548.10
  icmp           412254 (  2.50%)         38881272 (  0.37%)     94.31
  ipip              360 (  0.00%)            43744 (  0.00%)    121.51
  ipsec             536 (  0.00%)           290056 (  0.00%)    541.15
  ip6             15573 (  0.09%)          7188025 (  0.07%)    461.57
  other           41630 (  0.25%)          9166699 (  0.09%)    220.19
  frag             1116 (  0.01%)           950821 (  0.01%)    851.99
 ip6             360922 (  2.19%)         39107154 (  0.37%)    108.35
  tcp6           320541 (  1.95%)         31881589 (  0.30%)     99.46
   http(s)          179 (  0.00%)           145624 (  0.00%)    813.54
   http(c)         3137 (  0.02%)           446539 (  0.00%)    142.35
   smtp            1086 (  0.01%)           358070 (  0.00%)    329.71
   ftp               14 (  0.00%)             1444 (  0.00%)    103.14
   pop3              51 (  0.00%)             4748 (  0.00%)     93.10
   ssh              638 (  0.00%)           144148 (  0.00%)    225.94
   dns                9 (  0.00%)              878 (  0.00%)     97.56
   bgp               91 (  0.00%)             8663 (  0.00%)     95.20
   other         315336 (  1.91%)         30771475 (  0.29%)     97.58
  udp6            31018 (  0.19%)          5828028 (  0.06%)    187.89
   dns            30979 (  0.19%)          5823738 (  0.06%)    187.99
   other             39 (  0.00%)             4290 (  0.00%)    110.00
  icmp6            9096 (  0.06%)          1359610 (  0.01%)    149.47
  ip6               216 (  0.00%)            31831 (  0.00%)    147.37
  pim6               51 (  0.00%)             6096 (  0.00%)    119.53


tcpdump file: 200708121400.dump.gz (403.12 MB)