Traffic Trace Info


DumpFile: 200708311400.dump
FileSize: 1436.92MB
Id: 200708311400
StartTime: Fri Aug 31 14:00:00 2007
EndTime: Fri Aug 31 14:15:01 2007
TotalTime: 900.43 seconds
TotalCapSize: 1123.53MB CapLen: 96 bytes
# of packets: 20528444 (13176.79MB)
AvgRate: 122.76Mbps stddev:15.58M

IP flow (unique src/dst pair) Information

# of flows: 865667 (avg. 23.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 1.2% 1.1% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 526744
Top 10 bandwidth usage (bytes/total in %):
18.1% 11.6% 11.3% 2.9% 2.6% 2.3% 1.8% 1.4% 1.4% 1.4%
# of IPv6 addresses: 2213
Top 10 bandwidth usage (bytes/total in %):
23.0% 23.0% 19.1% 10.8% 4.6% 4.4% 4.2% 3.4% 3.3% 3.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5199264
 [   64-  127]:    5261206
 [  128-  255]:     593216
 [  256-  511]:     503894
 [  512- 1023]:     564762
 [ 1024- 2047]:    8406102


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         20528444 (100.00%)      13816867687 (100.00%)    673.06
 ip            20440849 ( 99.57%)      13801240108 ( 99.89%)    675.18
  tcp          17269065 ( 84.12%)      13159803006 ( 95.24%)    762.04
   http(s)      7969083 ( 38.82%)      10668579238 ( 77.21%)   1338.75
   http(c)      5761788 ( 28.07%)        670197419 (  4.85%)    116.32
   squid         375973 (  1.83%)        270109423 (  1.95%)    718.43
   smtp          437054 (  2.13%)        159246172 (  1.15%)    364.36
   nntp              32 (  0.00%)             2172 (  0.00%)     67.88
   ftp            24459 (  0.12%)          2430681 (  0.02%)     99.38
   pop3           19197 (  0.09%)         10042191 (  0.07%)    523.11
   imap            6443 (  0.03%)          3278586 (  0.02%)    508.86
   telnet           879 (  0.00%)            56217 (  0.00%)     63.96
   ssh           121056 (  0.59%)         53982057 (  0.39%)    445.93
   dns             7646 (  0.04%)          2263765 (  0.02%)    296.07
   bgp              240 (  0.00%)            56697 (  0.00%)    236.24
   napster           31 (  0.00%)             3489 (  0.00%)    112.55
   realaud         9094 (  0.04%)          8655450 (  0.06%)    951.78
   rtsp          470673 (  2.29%)         87458115 (  0.63%)    185.82
   icecast        27085 (  0.13%)         16069876 (  0.12%)    593.31
   other        2038331 (  9.93%)       1207371398 (  8.74%)    592.33
  udp           2330820 ( 11.35%)        513369258 (  3.72%)    220.25
   dns          1571135 (  7.65%)        199289129 (  1.44%)    126.84
   realaud         1074 (  0.01%)            66225 (  0.00%)     61.66
   halflif           24 (  0.00%)             2989 (  0.00%)    124.54
   starcra        12602 (  0.06%)           857103 (  0.01%)     68.01
   everque           63 (  0.00%)             9770 (  0.00%)    155.08
   unreal            15 (  0.00%)             1882 (  0.00%)    125.47
   quake             21 (  0.00%)             1767 (  0.00%)     84.14
   cuseeme            5 (  0.00%)              491 (  0.00%)     98.20
   other         745878 (  3.63%)        313137966 (  2.27%)    419.82
  icmp           598026 (  2.91%)         52813520 (  0.38%)     88.31
  ipip              349 (  0.00%)            43402 (  0.00%)    124.36
  ipsec            5157 (  0.03%)          2616054 (  0.02%)    507.28
  ip6             16649 (  0.08%)         10785491 (  0.08%)    647.82
  other          220783 (  1.08%)         61809377 (  0.45%)    279.96
  frag              770 (  0.00%)           634403 (  0.00%)    823.90
 ip6              87595 (  0.43%)         15627579 (  0.11%)    178.41
  tcp6            43305 (  0.21%)          8034203 (  0.06%)    185.53
   http(s)          251 (  0.00%)           191409 (  0.00%)    762.59
   http(c)        32847 (  0.16%)          3147233 (  0.02%)     95.81
   squid             16 (  0.00%)             1312 (  0.00%)     82.00
   smtp             402 (  0.00%)            77000 (  0.00%)    191.54
   pop3              20 (  0.00%)             1816 (  0.00%)     90.80
   ssh             1706 (  0.01%)           279098 (  0.00%)    163.60
   dns               32 (  0.00%)             4030 (  0.00%)    125.94
   bgp              109 (  0.00%)            11326 (  0.00%)    103.91
   icecast            8 (  0.00%)              656 (  0.00%)     82.00
   other           7914 (  0.04%)          4320323 (  0.03%)    545.91
  udp6            34773 (  0.17%)          6393260 (  0.05%)    183.86
   dns            33178 (  0.16%)          6090183 (  0.04%)    183.56
   starcra           12 (  0.00%)             2836 (  0.00%)    236.33
   everque           27 (  0.00%)             4785 (  0.00%)    177.22
   unreal             9 (  0.00%)             1041 (  0.00%)    115.67
   other           1547 (  0.01%)           294415 (  0.00%)    190.31
  icmp6            9245 (  0.05%)          1098169 (  0.01%)    118.79
  ip6               156 (  0.00%)            22309 (  0.00%)    143.01
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             86 (  0.00%)            75558 (  0.00%)    878.58


tcpdump file: 200708311400.dump.gz (537.49 MB)