Traffic Trace Info


DumpFile: 200708171400.dump
FileSize: 1772.23MB
Id: 200708171400
StartTime: Fri Aug 17 14:00:01 2007
EndTime: Fri Aug 17 14:15:01 2007
TotalTime: 899.95 seconds
TotalCapSize: 1384.41MB CapLen: 96 bytes
# of packets: 25414858 (16025.57MB)
AvgRate: 149.38Mbps stddev:15.60M

IP flow (unique src/dst pair) Information

# of flows: 769030 (avg. 33.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 1.8% 1.7% 1.3% 1.1% 1.0% 0.9% 0.8% 0.7% 0.6%

IP address Information

# of IPv4 addresses: 425576
Top 10 bandwidth usage (bytes/total in %):
16.7% 10.0% 9.8% 4.1% 4.0% 3.2% 2.8% 2.3% 1.8% 1.7%
# of IPv6 addresses: 1538
Top 10 bandwidth usage (bytes/total in %):
46.6% 46.6% 12.5% 12.5% 4.1% 4.0% 2.8% 2.7% 2.6% 2.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6375567
 [   64-  127]:    6418962
 [  128-  255]:     819853
 [  256-  511]:     745482
 [  512- 1023]:     783407
 [ 1024- 2047]:   10271587


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         25414858 (100.00%)      16804033194 (100.00%)    661.19
 ip            25325486 ( 99.65%)      16775309193 ( 99.83%)    662.39
  tcp          21160861 ( 83.26%)      15684843561 ( 93.34%)    741.22
   http(s)      8443157 ( 33.22%)      11401653475 ( 67.85%)   1350.40
   http(c)      6518664 ( 25.65%)        741213243 (  4.41%)    113.71
   squid         837060 (  3.29%)        371006920 (  2.21%)    443.23
   smtp          482327 (  1.90%)        123594321 (  0.74%)    256.25
   ftp            17664 (  0.07%)          6842501 (  0.04%)    387.37
   pop3           18287 (  0.07%)          8688930 (  0.05%)    475.14
   imap            4552 (  0.02%)           880423 (  0.01%)    193.41
   telnet           126 (  0.00%)            14561 (  0.00%)    115.56
   ssh           903397 (  3.55%)        328800394 (  1.96%)    363.96
   dns             4475 (  0.02%)           312631 (  0.00%)     69.86
   bgp              302 (  0.00%)            91945 (  0.00%)    304.45
   napster           77 (  0.00%)            51827 (  0.00%)    673.08
   realaud          178 (  0.00%)            72964 (  0.00%)    409.91
   rtsp          465457 (  1.83%)        252082275 (  1.50%)    541.58
   icecast        59513 (  0.23%)         24985097 (  0.15%)    419.83
   hotline            1 (  0.00%)               60 (  0.00%)     60.00
   other        3405621 ( 13.40%)       2424551814 ( 14.43%)    711.93
  udp           3552078 ( 13.98%)       1007196148 (  5.99%)    283.55
   dns          1789402 (  7.04%)        221598878 (  1.32%)    123.84
   realaud         1824 (  0.01%)           111368 (  0.00%)     61.06
   halflif           29 (  0.00%)             3763 (  0.00%)    129.76
   starcra           34 (  0.00%)             5477 (  0.00%)    161.09
   everque           72 (  0.00%)            13609 (  0.00%)    189.01
   unreal            36 (  0.00%)             5091 (  0.00%)    141.42
   quake            107 (  0.00%)             7069 (  0.00%)     66.07
   cuseeme            8 (  0.00%)              984 (  0.00%)    123.00
   other        1760548 (  6.93%)        785432098 (  4.67%)    446.13
  icmp           463325 (  1.82%)         46563086 (  0.28%)    100.50
  ipip              367 (  0.00%)            44406 (  0.00%)    121.00
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              3648 (  0.01%)          1723004 (  0.01%)    472.31
  other          145027 (  0.57%)         34919188 (  0.21%)    240.78
  frag              916 (  0.00%)           767367 (  0.00%)    837.74
 ip6              89372 (  0.35%)         28724001 (  0.17%)    321.40
  tcp6            26241 (  0.10%)         18719487 (  0.11%)    713.37
   http(s)        10530 (  0.04%)         13594969 (  0.08%)   1291.07
   http(c)         8365 (  0.03%)           852083 (  0.01%)    101.86
   smtp             420 (  0.00%)           123421 (  0.00%)    293.86
   ftp               40 (  0.00%)             4198 (  0.00%)    104.95
   pop3              17 (  0.00%)             1538 (  0.00%)     90.47
   ssh               65 (  0.00%)            10636 (  0.00%)    163.63
   bgp               93 (  0.00%)             9042 (  0.00%)     97.23
   other           6711 (  0.03%)          4123600 (  0.02%)    614.45
  udp6            53565 (  0.21%)          8755628 (  0.05%)    163.46
   dns            53482 (  0.21%)          8746352 (  0.05%)    163.54
   other             83 (  0.00%)             9276 (  0.00%)    111.76
  icmp6            9377 (  0.04%)          1220646 (  0.01%)    130.17
  ip6               156 (  0.00%)            22443 (  0.00%)    143.87
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6              2 (  0.00%)             1581 (  0.00%)    790.50


tcpdump file: 200708171400.dump.gz (671.62 MB)