Traffic Trace Info


DumpFile: 200708201400.dump
FileSize: 2009.43MB
Id: 200708201400
StartTime: Mon Aug 20 14:00:01 2007
EndTime: Mon Aug 20 14:15:00 2007
TotalTime: 899.64 seconds
TotalCapSize: 1569.54MB CapLen: 96 bytes
# of packets: 28819249 (20488.54MB)
AvgRate: 190.93Mbps stddev:38.49M

IP flow (unique src/dst pair) Information

# of flows: 714682 (avg. 40.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 3.8% 3.7% 2.3% 2.1% 1.9% 1.5% 1.4% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 368741
Top 10 bandwidth usage (bytes/total in %):
13.3% 8.2% 8.0% 7.6% 7.6% 5.9% 5.8% 4.6% 3.6% 2.4%
# of IPv6 addresses: 1694
Top 10 bandwidth usage (bytes/total in %):
19.5% 17.1% 17.1% 12.4% 7.4% 6.0% 5.6% 5.3% 4.5% 3.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7176055
 [   64-  127]:    5886213
 [  128-  255]:     941303
 [  256-  511]:     699859
 [  512- 1023]:     645913
 [ 1024- 2047]:   13469906


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         28819249 (100.00%)      21483789606 (100.00%)    745.47
 ip            28693679 ( 99.56%)      21462893077 ( 99.90%)    748.00
  tcp          24476880 ( 84.93%)      20147024864 ( 93.78%)    823.10
   http(s)     11691857 ( 40.57%)      16200277982 ( 75.41%)   1385.60
   http(c)      7892374 ( 27.39%)        952771432 (  4.43%)    120.72
   squid         926581 (  3.22%)        580526963 (  2.70%)    626.53
   smtp          483725 (  1.68%)        166782960 (  0.78%)    344.79
   nntp             215 (  0.00%)            24249 (  0.00%)    112.79
   ftp            68004 (  0.24%)          6829271 (  0.03%)    100.42
   pop3           22212 (  0.08%)          8689111 (  0.04%)    391.19
   imap            3306 (  0.01%)           534217 (  0.00%)    161.59
   telnet           574 (  0.00%)            47142 (  0.00%)     82.13
   ssh           168864 (  0.59%)         79627968 (  0.37%)    471.55
   dns             6302 (  0.02%)          2174223 (  0.01%)    345.01
   bgp              246 (  0.00%)            54361 (  0.00%)    220.98
   napster           13 (  0.00%)              836 (  0.00%)     64.31
   realaud         1162 (  0.00%)            83385 (  0.00%)     71.76
   rtsp          430167 (  1.49%)         55227690 (  0.26%)    128.39
   icecast        15642 (  0.05%)         13639944 (  0.06%)    872.01
   hotline            4 (  0.00%)              539 (  0.00%)    134.75
   other        2765615 (  9.60%)       2079731571 (  9.68%)    752.00
  udp           3305126 ( 11.47%)       1211065735 (  5.64%)    366.42
   dns          1755052 (  6.09%)        216710202 (  1.01%)    123.48
   realaud         4867 (  0.02%)          2611259 (  0.01%)    536.52
   halflif           74 (  0.00%)             8870 (  0.00%)    119.86
   starcra         6085 (  0.02%)           439695 (  0.00%)     72.26
   everque           28 (  0.00%)             5423 (  0.00%)    193.68
   unreal            12 (  0.00%)             1597 (  0.00%)    133.08
   quake             17 (  0.00%)             1752 (  0.00%)    103.06
   cuseeme            6 (  0.00%)              540 (  0.00%)     90.00
   other        1538974 (  5.34%)        991280977 (  4.61%)    644.12
  icmp           729592 (  2.53%)         64056315 (  0.30%)     87.80
  ipip              499 (  0.00%)            61174 (  0.00%)    122.59
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6             16190 (  0.06%)          8107715 (  0.04%)    500.79
  other          165212 (  0.57%)         32557474 (  0.15%)    197.06
  frag             1007 (  0.00%)           832792 (  0.00%)    827.00
 ip6             125570 (  0.44%)         20896529 (  0.10%)    166.41
  tcp6            55041 (  0.19%)          9845743 (  0.05%)    178.88
   http(s)         1091 (  0.00%)          1178819 (  0.01%)   1080.49
   http(c)        45714 (  0.16%)          4268097 (  0.02%)     93.37
   smtp             289 (  0.00%)           125918 (  0.00%)    435.70
   pop3              14 (  0.00%)             1292 (  0.00%)     92.29
   ssh               62 (  0.00%)            10402 (  0.00%)    167.77
   dns               22 (  0.00%)             2130 (  0.00%)     96.82
   bgp               96 (  0.00%)             9378 (  0.00%)     97.69
   other           7753 (  0.03%)          4249707 (  0.02%)    548.14
  udp6            61789 (  0.21%)          9874436 (  0.05%)    159.81
   dns            61054 (  0.21%)          9727750 (  0.05%)    159.33
   other            735 (  0.00%)           146686 (  0.00%)    199.57
  icmp6            8506 (  0.03%)          1132321 (  0.01%)    133.12
  ip6               157 (  0.00%)            22412 (  0.00%)    142.75
  pim6               58 (  0.00%)             6808 (  0.00%)    117.38
  other6             19 (  0.00%)            14809 (  0.00%)    779.42


tcpdump file: 200708201400.dump.gz (715.66 MB)