Traffic Trace Info


DumpFile: 200709031400.dump
FileSize: 1629.42MB
Id: 200709031400
StartTime: Mon Sep 3 14:00:00 2007
EndTime: Mon Sep 3 14:15:00 2007
TotalTime: 899.96 seconds
TotalCapSize: 1276.62MB CapLen: 96 bytes
# of packets: 23116120 (14333.77MB)
AvgRate: 133.61Mbps stddev:24.41M

IP flow (unique src/dst pair) Information

# of flows: 793887 (avg. 29.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 1.5% 1.5% 1.2% 1.1% 0.8% 0.8% 0.7% 0.7% 0.6%

IP address Information

# of IPv4 addresses: 431642
Top 10 bandwidth usage (bytes/total in %):
10.8% 10.7% 9.9% 3.9% 3.8% 3.6% 3.2% 2.0% 1.8% 1.6%
# of IPv6 addresses: 2208
Top 10 bandwidth usage (bytes/total in %):
21.0% 21.0% 12.0% 10.8% 10.8% 7.3% 4.1% 4.1% 3.4% 2.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6171106
 [   64-  127]:    5759009
 [  128-  255]:     828453
 [  256-  511]:     681437
 [  512- 1023]:     635785
 [ 1024- 2047]:    9040330


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         23116120 (100.00%)      15030050952 (100.00%)    650.20
 ip            23027561 ( 99.62%)      15012114767 ( 99.88%)    651.92
  tcp          19846195 ( 85.85%)      14540943110 ( 96.75%)    732.68
   http(s)      8028466 ( 34.73%)      11058081379 ( 73.57%)   1377.36
   http(c)      5984989 ( 25.89%)        736236929 (  4.90%)    123.01
   squid         948565 (  4.10%)        680005607 (  4.52%)    716.88
   smtp          532251 (  2.30%)        178002241 (  1.18%)    334.43
   ftp            12528 (  0.05%)           995654 (  0.01%)     79.47
   pop3           16302 (  0.07%)          6598589 (  0.04%)    404.77
   imap            6408 (  0.03%)          3239182 (  0.02%)    505.49
   telnet           220 (  0.00%)            19659 (  0.00%)     89.36
   ssh           980350 (  4.24%)        411071903 (  2.74%)    419.31
   dns             6367 (  0.03%)          2192450 (  0.01%)    344.35
   bgp              215 (  0.00%)            45851 (  0.00%)    213.26
   napster           19 (  0.00%)             1975 (  0.00%)    103.95
   realaud         2807 (  0.01%)           245374 (  0.00%)     87.42
   rtsp          424870 (  1.84%)         26283008 (  0.17%)     61.86
   icecast        89072 (  0.39%)         43163606 (  0.29%)    484.59
   hotline            2 (  0.00%)              156 (  0.00%)     78.00
   other        2812674 ( 12.17%)       1394754147 (  9.28%)    495.88
  udp           2297352 (  9.94%)        393549730 (  2.62%)    171.31
   dns          1709222 (  7.39%)        211953078 (  1.41%)    124.01
   realaud         5438 (  0.02%)           401570 (  0.00%)     73.85
   halflif           16 (  0.00%)             2424 (  0.00%)    151.50
   starcra           15 (  0.00%)             2602 (  0.00%)    173.47
   everque           66 (  0.00%)            14207 (  0.00%)    215.26
   unreal            28 (  0.00%)             4057 (  0.00%)    144.89
   quake             11 (  0.00%)              860 (  0.00%)     78.18
   cuseeme            4 (  0.00%)              342 (  0.00%)     85.50
   other         582495 (  2.52%)        181164063 (  1.21%)    311.01
  icmp           856122 (  3.70%)         70910804 (  0.47%)     82.83
  ipip              329 (  0.00%)            39150 (  0.00%)    119.00
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              7768 (  0.03%)          4046756 (  0.03%)    520.95
  other           19615 (  0.08%)          2605417 (  0.02%)    132.83
  frag            15166 (  0.07%)         11649299 (  0.08%)    768.12
 ip6              88559 (  0.38%)         17936185 (  0.12%)    202.53
  tcp6            42959 (  0.19%)         10533017 (  0.07%)    245.19
   http(s)         1770 (  0.01%)          2147851 (  0.01%)   1213.48
   http(c)        20416 (  0.09%)          2223544 (  0.01%)    108.91
   squid            529 (  0.00%)           282314 (  0.00%)    533.67
   smtp             678 (  0.00%)           144003 (  0.00%)    212.39
   ftp               58 (  0.00%)             6478 (  0.00%)    111.69
   ssh             3088 (  0.01%)           265833 (  0.00%)     86.09
   bgp              103 (  0.00%)            10562 (  0.00%)    102.54
   other          16317 (  0.07%)          5452432 (  0.04%)    334.16
  udp6            37431 (  0.16%)          6370850 (  0.04%)    170.20
   dns            36110 (  0.16%)          6136371 (  0.04%)    169.94
   everque           19 (  0.00%)             3048 (  0.00%)    160.42
   other           1302 (  0.01%)           231431 (  0.00%)    177.75
  icmp6            7956 (  0.03%)           981976 (  0.01%)    123.43
  ip6               156 (  0.00%)            22301 (  0.00%)    142.96
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             27 (  0.00%)            23961 (  0.00%)    887.44


tcpdump file: 200709031400.dump.gz (606.83 MB)