Traffic Trace Info


DumpFile: 200708141400.dump
FileSize: 1620.14MB
Id: 200708141400
StartTime: Tue Aug 14 14:00:01 2007
EndTime: Tue Aug 14 14:15:00 2007
TotalTime: 899.56 seconds
TotalCapSize: 1262.40MB CapLen: 96 bytes
# of packets: 23440664 (14453.89MB)
AvgRate: 134.81Mbps stddev:16.39M

IP flow (unique src/dst pair) Information

# of flows: 821442 (avg. 28.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 1.4% 1.3% 0.9% 0.8% 0.7% 0.7% 0.6% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 456976
Top 10 bandwidth usage (bytes/total in %):
13.2% 10.8% 10.6% 5.1% 5.0% 4.1% 4.0% 3.4% 2.3% 2.0%
# of IPv6 addresses: 1552
Top 10 bandwidth usage (bytes/total in %):
70.1% 70.1% 3.8% 2.1% 2.0% 1.9% 1.8% 1.8% 1.8% 1.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5708480
 [   64-  127]:    6171508
 [  128-  255]:     904278
 [  256-  511]:     653286
 [  512- 1023]:     639023
 [ 1024- 2047]:    9364089


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         23440664 (100.00%)      15156006703 (100.00%)    646.57
 ip            23350129 ( 99.61%)      15113952243 ( 99.72%)    647.27
  tcp          18034345 ( 76.94%)      13506432988 ( 89.12%)    748.93
   http(s)      8069945 ( 34.43%)      11005634134 ( 72.62%)   1363.78
   http(c)      6023496 ( 25.70%)        680870032 (  4.49%)    113.04
   squid         808766 (  3.45%)        393862684 (  2.60%)    486.99
   smtp          417262 (  1.78%)        145932987 (  0.96%)    349.74
   nntp             470 (  0.00%)            43110 (  0.00%)     91.72
   ftp            11463 (  0.05%)           973425 (  0.01%)     84.92
   pop3           14191 (  0.06%)          5148379 (  0.03%)    362.79
   imap           23307 (  0.10%)         24462467 (  0.16%)   1049.58
   telnet            81 (  0.00%)             6205 (  0.00%)     76.60
   ssh            97762 (  0.42%)         41175216 (  0.27%)    421.18
   dns            27423 (  0.12%)          5400219 (  0.04%)    196.92
   bgp              258 (  0.00%)            69808 (  0.00%)    270.57
   napster           42 (  0.00%)             7205 (  0.00%)    171.55
   rtsp          189822 (  0.81%)         14699915 (  0.10%)     77.44
   icecast        40563 (  0.17%)         36875585 (  0.24%)    909.09
   hotline           16 (  0.00%)             3804 (  0.00%)    237.75
   other        2309470 (  9.85%)       1151267333 (  7.60%)    498.50
  udp           4230109 ( 18.05%)       1477887659 (  9.75%)    349.37
   dns          1744881 (  7.44%)        215195281 (  1.42%)    123.33
   realaud         2317 (  0.01%)           163282 (  0.00%)     70.47
   halflif           10 (  0.00%)             1150 (  0.00%)    115.00
   starcra           25 (  0.00%)             4173 (  0.00%)    166.92
   everque          124 (  0.00%)            19056 (  0.00%)    153.68
   unreal            21 (  0.00%)             3502 (  0.00%)    166.76
   quake             24 (  0.00%)             2302 (  0.00%)     95.92
   cuseeme            8 (  0.00%)             1158 (  0.00%)    144.75
   other        2482662 ( 10.59%)       1262480812 (  8.33%)    508.52
  icmp           832480 (  3.55%)         77865726 (  0.51%)     93.53
  igmp                1 (  0.00%)               90 (  0.00%)     90.00
  ipip              329 (  0.00%)            38982 (  0.00%)    118.49
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              7544 (  0.03%)          4004929 (  0.03%)    530.88
  other          245141 (  1.05%)         47702069 (  0.31%)    194.59
  frag             2892 (  0.01%)          2390027 (  0.02%)    826.43
 ip6              90535 (  0.39%)         42054460 (  0.28%)    464.51
  tcp6            36480 (  0.16%)         32866056 (  0.22%)    900.93
   http(s)          607 (  0.00%)           607241 (  0.00%)   1000.40
   http(c)        11453 (  0.05%)          1682201 (  0.01%)    146.88
   squid              6 (  0.00%)             1419 (  0.00%)    236.50
   smtp            1656 (  0.01%)           543971 (  0.00%)    328.48
   pop3              17 (  0.00%)             1522 (  0.00%)     89.53
   ssh               64 (  0.00%)            10562 (  0.00%)    165.03
   dns                5 (  0.00%)              485 (  0.00%)     97.00
   bgp               90 (  0.00%)             8569 (  0.00%)     95.21
   other          22582 (  0.10%)         30010086 (  0.20%)   1328.94
  udp6            45125 (  0.19%)          7944169 (  0.05%)    176.05
   dns            45077 (  0.19%)          7938889 (  0.05%)    176.12
   other             48 (  0.00%)             5280 (  0.00%)    110.00
  icmp6            8655 (  0.04%)          1203068 (  0.01%)    139.00
  ip6               216 (  0.00%)            31727 (  0.00%)    146.88
  pim6               55 (  0.00%)             6480 (  0.00%)    117.82
  other6              4 (  0.00%)             2960 (  0.00%)    740.00


tcpdump file: 200708141400.dump.gz (604.65 MB)