Traffic Trace Info


DumpFile: 200709161400.dump
FileSize: 997.99MB
Id: 200709161400
StartTime: Sun Sep 16 14:00:00 2007
EndTime: Sun Sep 16 14:15:00 2007
TotalTime: 899.98 seconds
TotalCapSize: 773.56MB CapLen: 96 bytes
# of packets: 14703736 (8882.35MB)
AvgRate: 82.76Mbps stddev:25.59M

IP flow (unique src/dst pair) Information

# of flows: 639398 (avg. 23.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 3.5% 2.0% 1.4% 1.3% 0.9% 0.8% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 374810
Top 10 bandwidth usage (bytes/total in %):
16.3% 15.5% 12.7% 8.7% 4.7% 3.6% 3.6% 2.5% 2.1% 2.1%
# of IPv6 addresses: 2565
Top 10 bandwidth usage (bytes/total in %):
44.3% 44.3% 12.5% 9.8% 5.4% 3.2% 3.0% 2.3% 2.2% 1.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3862525
 [   64-  127]:    3778697
 [  128-  255]:     629857
 [  256-  511]:     307297
 [  512- 1023]:     384312
 [ 1024- 2047]:    5741048


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         14703736 (100.00%)       9313816915 (100.00%)    633.43
 ip            14616385 ( 99.41%)       9290230251 ( 99.75%)    635.60
  tcp          10556527 ( 71.79%)       8299678950 ( 89.11%)    786.21
   http(s)      4855204 ( 33.02%)       6664529580 ( 71.56%)   1372.66
   http(c)      2585465 ( 17.58%)        248998550 (  2.67%)     96.31
   squid         571514 (  3.89%)        518863894 (  5.57%)    907.88
   smtp          329112 (  2.24%)         73794125 (  0.79%)    224.22
   nntp               2 (  0.00%)              122 (  0.00%)     61.00
   ftp            19270 (  0.13%)          1880262 (  0.02%)     97.57
   pop3           11920 (  0.08%)          8286129 (  0.09%)    695.15
   imap            2364 (  0.02%)           522504 (  0.01%)    221.03
   telnet           327 (  0.00%)            20737 (  0.00%)     63.42
   ssh            96052 (  0.65%)         42759615 (  0.46%)    445.17
   dns             3990 (  0.03%)           282913 (  0.00%)     70.91
   bgp              267 (  0.00%)            62910 (  0.00%)    235.62
   napster           32 (  0.00%)             7130 (  0.00%)    222.81
   realaud           52 (  0.00%)             6290 (  0.00%)    120.96
   rtsp          125189 (  0.85%)         23590815 (  0.25%)    188.44
   icecast        68983 (  0.47%)         19789140 (  0.21%)    286.87
   hotline            2 (  0.00%)              122 (  0.00%)     61.00
   other        1886775 ( 12.83%)        696283692 (  7.48%)    369.03
  udp           3259859 ( 22.17%)        897628715 (  9.64%)    275.36
   dns          1439798 (  9.79%)        167385448 (  1.80%)    116.26
   realaud          320 (  0.00%)            34175 (  0.00%)    106.80
   halflif           19 (  0.00%)             1770 (  0.00%)     93.16
   starcra           19 (  0.00%)             3977 (  0.00%)    209.32
   everque           92 (  0.00%)            13993 (  0.00%)    152.10
   unreal             8 (  0.00%)              962 (  0.00%)    120.25
   quake             33 (  0.00%)             3726 (  0.00%)    112.91
   cuseeme            5 (  0.00%)              464 (  0.00%)     92.80
   other        1819554 ( 12.37%)        730174064 (  7.84%)    401.29
  icmp           694762 (  4.73%)         60741726 (  0.65%)     87.43
  ipip              364 (  0.00%)            44524 (  0.00%)    122.32
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              7487 (  0.05%)          3998484 (  0.04%)    534.06
  other           97206 (  0.66%)         28118052 (  0.30%)    289.26
  frag             1741 (  0.01%)          1412476 (  0.02%)    811.30
 ip6              87351 (  0.59%)         23586664 (  0.25%)    270.02
  tcp6            44361 (  0.30%)         16321050 (  0.18%)    367.91
   http(s)          351 (  0.00%)           315700 (  0.00%)    899.43
   http(c)        18372 (  0.12%)          2359058 (  0.03%)    128.41
   squid              5 (  0.00%)              852 (  0.00%)    170.40
   smtp             389 (  0.00%)           134813 (  0.00%)    346.56
   ssh               62 (  0.00%)            10402 (  0.00%)    167.77
   bgp              116 (  0.00%)            12310 (  0.00%)    106.12
   other          25066 (  0.17%)         13487915 (  0.14%)    538.10
  udp6            31702 (  0.22%)          5846799 (  0.06%)    184.43
   dns            28934 (  0.20%)          5321482 (  0.06%)    183.92
   starcra            7 (  0.00%)             1226 (  0.00%)    175.14
   other           2761 (  0.02%)           524091 (  0.01%)    189.82
  icmp6           11156 (  0.08%)          1393976 (  0.01%)    124.95
  ip6                75 (  0.00%)            11335 (  0.00%)    151.13
  pim6               46 (  0.00%)             5616 (  0.00%)    122.09
  other6             11 (  0.00%)             7888 (  0.00%)    717.09


tcpdump file: 200709161400.dump.gz (359.10 MB)