Traffic Trace Info


DumpFile: 200709091400.dump
FileSize: 1050.35MB
Id: 200709091400
StartTime: Sun Sep 9 14:00:01 2007
EndTime: Sun Sep 9 14:15:00 2007
TotalTime: 899.51 seconds
TotalCapSize: 821.37MB CapLen: 96 bytes
# of packets: 15001689 (9957.94MB)
AvgRate: 92.89Mbps stddev:16.57M

IP flow (unique src/dst pair) Information

# of flows: 774257 (avg. 19.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.9% 14.7% 2.2% 2.0% 1.6% 1.2% 1.0% 1.0% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 469799
Top 10 bandwidth usage (bytes/total in %):
15.9% 15.9% 15.1% 15.1% 14.6% 5.8% 4.9% 3.3% 2.2% 2.2%
# of IPv6 addresses: 2195
Top 10 bandwidth usage (bytes/total in %):
21.5% 21.5% 20.0% 17.7% 8.5% 7.3% 3.8% 3.4% 3.3% 2.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2841781
 [   64-  127]:    4450706
 [  128-  255]:     447994
 [  256-  511]:     404393
 [  512- 1023]:     516194
 [ 1024- 2047]:    6340621


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         15001689 (100.00%)      10441661767 (100.00%)    696.03
 ip            14932815 ( 99.54%)      10424734875 ( 99.84%)    698.11
  tcp          11098985 ( 73.98%)       8271471989 ( 79.22%)    745.25
   http(s)      4588607 ( 30.59%)       6397812728 ( 61.27%)   1394.28
   http(c)      2871158 ( 19.14%)        281080496 (  2.69%)     97.90
   squid         789345 (  5.26%)        352277987 (  3.37%)    446.29
   smtp          353938 (  2.36%)         90923412 (  0.87%)    256.89
   nntp              54 (  0.00%)             3492 (  0.00%)     64.67
   ftp            10271 (  0.07%)          1443544 (  0.01%)    140.55
   pop3           15929 (  0.11%)         11835171 (  0.11%)    743.00
   imap            2717 (  0.02%)          1185183 (  0.01%)    436.21
   telnet           108 (  0.00%)             8179 (  0.00%)     75.73
   ssh           140654 (  0.94%)         61311583 (  0.59%)    435.90
   dns             3945 (  0.03%)           296286 (  0.00%)     75.10
   bgp              256 (  0.00%)            63962 (  0.00%)    249.85
   napster         1126 (  0.01%)           317410 (  0.00%)    281.89
   realaud           17 (  0.00%)             1065 (  0.00%)     62.65
   rtsp           27614 (  0.18%)          1920041 (  0.02%)     69.53
   icecast         3750 (  0.02%)           493103 (  0.00%)    131.49
   hotline            9 (  0.00%)             1562 (  0.00%)    173.56
   other        2289485 ( 15.26%)       1070496665 ( 10.25%)    467.57
  udp           3149202 ( 20.99%)       2093056876 ( 20.05%)    664.63
   dns          1280362 (  8.53%)        154824199 (  1.48%)    120.92
   realaud         2757 (  0.02%)           165758 (  0.00%)     60.12
   halflif           14 (  0.00%)             1378 (  0.00%)     98.43
   starcra           14 (  0.00%)             2087 (  0.00%)    149.07
   everque           33 (  0.00%)             5674 (  0.00%)    171.94
   unreal             5 (  0.00%)              714 (  0.00%)    142.80
   quake             10 (  0.00%)              837 (  0.00%)     83.70
   cuseeme            3 (  0.00%)              261 (  0.00%)     87.00
   other        1865622 ( 12.44%)       1937988629 ( 18.56%)   1038.79
  icmp           673402 (  4.49%)         55796505 (  0.53%)     82.86
  ipip              313 (  0.00%)            37866 (  0.00%)    120.98
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              7307 (  0.05%)          3982223 (  0.04%)    544.99
  other            3426 (  0.02%)           369616 (  0.00%)    107.89
  frag             8340 (  0.06%)          7712412 (  0.07%)    924.75
 ip6              68872 (  0.46%)         16926772 (  0.16%)    245.77
  tcp6            29835 (  0.20%)         10226270 (  0.10%)    342.76
   http(s)          971 (  0.01%)           612687 (  0.01%)    630.99
   http(c)        13415 (  0.09%)          1654583 (  0.02%)    123.34
   smtp              91 (  0.00%)            23560 (  0.00%)    258.90
   pop3              52 (  0.00%)             6342 (  0.00%)    121.96
   ssh               42 (  0.00%)             4116 (  0.00%)     98.00
   dns               29 (  0.00%)             2725 (  0.00%)     93.97
   bgp              108 (  0.00%)            11341 (  0.00%)    105.01
   other          15127 (  0.10%)          7910916 (  0.08%)    522.97
  udp6            27832 (  0.19%)          5337218 (  0.05%)    191.77
   dns            25687 (  0.17%)          4927373 (  0.05%)    191.82
   starcra            3 (  0.00%)              390 (  0.00%)    130.00
   other           2142 (  0.01%)           409455 (  0.00%)    191.16
  icmp6            9142 (  0.06%)          1071687 (  0.01%)    117.23
  ip6              2020 (  0.01%)           275739 (  0.00%)    136.50
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6             12 (  0.00%)            11642 (  0.00%)    970.17


tcpdump file: 200709091400.dump.gz (364.70 MB)