Traffic Trace Info


DumpFile: 200708221400.dump
FileSize: 1930.59MB
Id: 200708221400
StartTime: Wed Aug 22 14:00:00 2007
EndTime: Wed Aug 22 14:15:01 2007
TotalTime: 900.81 seconds
TotalCapSize: 1510.55MB CapLen: 96 bytes
# of packets: 27518478 (18351.80MB)
AvgRate: 170.89Mbps stddev:23.96M

IP flow (unique src/dst pair) Information

# of flows: 778333 (avg. 35.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.1% 1.3% 1.0% 0.9% 0.8% 0.8% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 409083
Top 10 bandwidth usage (bytes/total in %):
15.6% 14.1% 8.9% 8.3% 3.0% 2.7% 2.7% 2.2% 2.1% 1.5%
# of IPv6 addresses: 2472
Top 10 bandwidth usage (bytes/total in %):
7.9% 6.6% 6.6% 6.4% 6.2% 6.1% 5.4% 5.2% 4.6% 4.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7101780
 [   64-  127]:    6242194
 [  128-  255]:     807470
 [  256-  511]:     860054
 [  512- 1023]:     716455
 [ 1024- 2047]:   11790525


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         27518478 (100.00%)      19243258425 (100.00%)    699.28
 ip            27433738 ( 99.69%)      19230134975 ( 99.93%)    700.97
  tcp          23824519 ( 86.58%)      18688874440 ( 97.12%)    784.44
   http(s)     11145038 ( 40.50%)      15075408809 ( 78.34%)   1352.66
   http(c)      7838105 ( 28.48%)        999101666 (  5.19%)    127.47
   squid        1088754 (  3.96%)        804660801 (  4.18%)    739.07
   smtp          495590 (  1.80%)        132878714 (  0.69%)    268.12
   nntp              19 (  0.00%)             2078 (  0.00%)    109.37
   ftp            15731 (  0.06%)          1553527 (  0.01%)     98.76
   pop3           27323 (  0.10%)         16334484 (  0.08%)    597.83
   imap            5540 (  0.02%)           988474 (  0.01%)    178.42
   telnet           153 (  0.00%)            22160 (  0.00%)    144.84
   ssh            91197 (  0.33%)         56949430 (  0.30%)    624.47
   dns             9914 (  0.04%)          3264894 (  0.02%)    329.32
   bgp              559 (  0.00%)           309907 (  0.00%)    554.40
   realaud           64 (  0.00%)            16054 (  0.00%)    250.84
   rtsp          643130 (  2.34%)         97231915 (  0.51%)    151.19
   icecast        21892 (  0.08%)         15482232 (  0.08%)    707.21
   other        2439516 (  8.87%)       1484549655 (  7.71%)    608.54
  udp           2656970 (  9.66%)        435642602 (  2.26%)    163.96
   dns          1769788 (  6.43%)        222218319 (  1.15%)    125.56
   realaud         7893 (  0.03%)          4566091 (  0.02%)    578.50
   halflif           21 (  0.00%)             2276 (  0.00%)    108.38
   starcra           16 (  0.00%)             1864 (  0.00%)    116.50
   everque           52 (  0.00%)             7862 (  0.00%)    151.19
   unreal            14 (  0.00%)             2116 (  0.00%)    151.14
   quake             13 (  0.00%)             1112 (  0.00%)     85.54
   cuseeme           12 (  0.00%)             1000 (  0.00%)     83.33
   other         879133 (  3.19%)        208807782 (  1.09%)    237.52
  icmp           773664 (  2.81%)         67359655 (  0.35%)     87.07
  ipip              457 (  0.00%)            55306 (  0.00%)    121.02
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6             15822 (  0.06%)          8055338 (  0.04%)    509.12
  other          162126 (  0.59%)         30127834 (  0.16%)    185.83
  frag             4945 (  0.02%)          3932499 (  0.02%)    795.25
 ip6              84740 (  0.31%)         13123450 (  0.07%)    154.87
  tcp6            29665 (  0.11%)          3701218 (  0.02%)    124.77
   http(s)          655 (  0.00%)           597585 (  0.00%)    912.34
   http(c)        11761 (  0.04%)          1113928 (  0.01%)     94.71
   squid              6 (  0.00%)             1441 (  0.00%)    240.17
   smtp             756 (  0.00%)           252448 (  0.00%)    333.93
   ftp              157 (  0.00%)            16824 (  0.00%)    107.16
   pop3               6 (  0.00%)              564 (  0.00%)     94.00
   ssh               69 (  0.00%)            11360 (  0.00%)    164.64
   bgp               91 (  0.00%)             8663 (  0.00%)     95.20
   other          16164 (  0.06%)          1698405 (  0.01%)    105.07
  udp6            44956 (  0.16%)          8140633 (  0.04%)    181.08
   dns            42815 (  0.16%)          7670616 (  0.04%)    179.16
   starcra            2 (  0.00%)              208 (  0.00%)    104.00
   other           2139 (  0.01%)           469809 (  0.00%)    219.64
  icmp6            9797 (  0.04%)          1145151 (  0.01%)    116.89
  ip6               161 (  0.00%)            23095 (  0.00%)    143.45
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            131 (  0.00%)           109273 (  0.00%)    834.15


tcpdump file: 200708221400.dump.gz (712.74 MB)