Traffic Trace Info


DumpFile: 200709021400.dump
FileSize: 1069.23MB
Id: 200709021400
StartTime: Sun Sep 2 14:00:01 2007
EndTime: Sun Sep 2 14:15:00 2007
TotalTime: 899.78 seconds
TotalCapSize: 832.10MB CapLen: 96 bytes
# of packets: 15535606 (9711.55MB)
AvgRate: 90.54Mbps stddev:10.48M

IP flow (unique src/dst pair) Information

# of flows: 588977 (avg. 26.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 1.7% 1.6% 1.4% 1.1% 1.0% 1.0% 0.9% 0.9% 0.8%

IP address Information

# of IPv4 addresses: 308703
Top 10 bandwidth usage (bytes/total in %):
14.4% 13.5% 13.0% 4.2% 3.8% 3.6% 3.4% 1.9% 1.8% 1.7%
# of IPv6 addresses: 2139
Top 10 bandwidth usage (bytes/total in %):
23.9% 23.9% 21.3% 7.1% 5.5% 4.6% 4.4% 4.3% 3.5% 3.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3800733
 [   64-  127]:    4115764
 [  128-  255]:     574023
 [  256-  511]:     364666
 [  512- 1023]:     345135
 [ 1024- 2047]:    6335285


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         15535606 (100.00%)      10183295351 (100.00%)    655.48
 ip            15459672 ( 99.51%)      10168155680 ( 99.85%)    657.72
  tcp          11829018 ( 76.14%)       9233769400 ( 90.68%)    780.60
   http(s)      4999056 ( 32.18%)       6956354695 ( 68.31%)   1391.53
   http(c)      3110804 ( 20.02%)        280357201 (  2.75%)     90.12
   squid         497021 (  3.20%)        331774471 (  3.26%)    667.53
   smtp          346882 (  2.23%)         50432803 (  0.50%)    145.39
   ftp           294960 (  1.90%)        412444115 (  4.05%)   1398.31
   pop3            8226 (  0.05%)          3684552 (  0.04%)    447.92
   imap           57285 (  0.37%)         56083817 (  0.55%)    979.03
   telnet             3 (  0.00%)              186 (  0.00%)     62.00
   ssh           131224 (  0.84%)         74354378 (  0.73%)    566.62
   dns             3834 (  0.02%)           275024 (  0.00%)     71.73
   bgp              232 (  0.00%)            63837 (  0.00%)    275.16
   napster           14 (  0.00%)             2483 (  0.00%)    177.36
   realaud           82 (  0.00%)            10908 (  0.00%)    133.02
   rtsp          112558 (  0.72%)          7068163 (  0.07%)     62.80
   icecast          547 (  0.00%)            53003 (  0.00%)     96.90
   hotline            1 (  0.00%)               60 (  0.00%)     60.00
   other        2266286 ( 14.59%)       1060809524 ( 10.42%)    468.08
  udp           2824690 ( 18.18%)        860380924 (  8.45%)    304.59
   dns          1384055 (  8.91%)        163299646 (  1.60%)    117.99
   realaud        12382 (  0.08%)          7902613 (  0.08%)    638.23
   halflif           19 (  0.00%)             1502 (  0.00%)     79.05
   starcra            2 (  0.00%)              222 (  0.00%)    111.00
   everque          220 (  0.00%)            43115 (  0.00%)    195.98
   unreal             3 (  0.00%)              541 (  0.00%)    180.33
   quake             11 (  0.00%)              917 (  0.00%)     83.36
   cuseeme            6 (  0.00%)              765 (  0.00%)    127.50
   other        1427981 (  9.19%)        689120392 (  6.77%)    482.58
  icmp           774156 (  4.98%)         65674235 (  0.64%)     84.83
  ipip              324 (  0.00%)            38760 (  0.00%)    119.63
  ipsec             378 (  0.00%)            57972 (  0.00%)    153.37
  ip6             20259 (  0.13%)          6803199 (  0.07%)    335.81
  other           10847 (  0.07%)          1431190 (  0.01%)    131.94
  frag              628 (  0.00%)           521215 (  0.01%)    829.96
 ip6              75934 (  0.49%)         15139671 (  0.15%)    199.38
  tcp6            39074 (  0.25%)          8580123 (  0.08%)    219.59
   http(s)          343 (  0.00%)           245891 (  0.00%)    716.88
   http(c)        25190 (  0.16%)          3261534 (  0.03%)    129.48
   squid              5 (  0.00%)              382 (  0.00%)     76.40
   smtp             450 (  0.00%)            86941 (  0.00%)    193.20
   ftp               84 (  0.00%)             7366 (  0.00%)     87.69
   ssh             1315 (  0.01%)           168844 (  0.00%)    128.40
   dns               22 (  0.00%)             2336 (  0.00%)    106.18
   bgp              110 (  0.00%)            11529 (  0.00%)    104.81
   icecast          190 (  0.00%)            14816 (  0.00%)     77.98
   other          11365 (  0.07%)          4780484 (  0.05%)    420.63
  udp6            28982 (  0.19%)          5520849 (  0.05%)    190.49
   dns            27485 (  0.18%)          5250332 (  0.05%)    191.03
   everque            1 (  0.00%)              116 (  0.00%)    116.00
   other           1496 (  0.01%)           270401 (  0.00%)    180.75
  icmp6            7590 (  0.05%)           921138 (  0.01%)    121.36
  ip6               152 (  0.00%)            21810 (  0.00%)    143.49
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            106 (  0.00%)            91671 (  0.00%)    864.82


tcpdump file: 200709021400.dump.gz (386.28 MB)