Traffic Trace Info


DumpFile: 200709191400.dump
FileSize: 1793.71MB
Id: 200709191400
StartTime: Wed Sep 19 14:00:01 2007
EndTime: Wed Sep 19 14:15:00 2007
TotalTime: 899.41 seconds
TotalCapSize: 1402.16MB CapLen: 96 bytes
# of packets: 25655505 (15932.78MB)
AvgRate: 148.57Mbps stddev:32.31M

IP flow (unique src/dst pair) Information

# of flows: 901119 (avg. 28.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 1.7% 1.6% 1.5% 1.3% 1.3% 1.2% 1.1% 1.0% 0.8%

IP address Information

# of IPv4 addresses: 489727
Top 10 bandwidth usage (bytes/total in %):
12.3% 10.2% 10.2% 5.2% 4.6% 3.5% 1.9% 1.8% 1.7% 1.7%
# of IPv6 addresses: 2609
Top 10 bandwidth usage (bytes/total in %):
39.8% 23.5% 20.4% 20.3% 16.3% 6.7% 6.7% 3.5% 3.3% 2.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6717378
 [   64-  127]:    6431771
 [  128-  255]:     830807
 [  256-  511]:     615443
 [  512- 1023]:     930869
 [ 1024- 2047]:   10129237


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         25655505 (100.00%)      16706735581 (100.00%)    651.19
 ip            25417686 ( 99.07%)      16659496513 ( 99.72%)    655.43
  tcp          20904939 ( 81.48%)      15917920482 ( 95.28%)    761.44
   http(s)      8981722 ( 35.01%)      12101543291 ( 72.44%)   1347.35
   http(c)      6851349 ( 26.71%)        958780940 (  5.74%)    139.94
   squid         517439 (  2.02%)        318606130 (  1.91%)    615.74
   smtp          492228 (  1.92%)        158636240 (  0.95%)    322.28
   nntp            1372 (  0.01%)            83104 (  0.00%)     60.57
   ftp           193077 (  0.75%)        255813087 (  1.53%)   1324.93
   pop3           17336 (  0.07%)          6242692 (  0.04%)    360.10
   imap           80753 (  0.31%)          5443971 (  0.03%)     67.42
   telnet           636 (  0.00%)            71545 (  0.00%)    112.49
   ssh            83913 (  0.33%)         36620981 (  0.22%)    436.42
   dns             6512 (  0.03%)           470475 (  0.00%)     72.25
   bgp              297 (  0.00%)            94764 (  0.00%)    319.07
   napster           48 (  0.00%)             4914 (  0.00%)    102.38
   realaud           92 (  0.00%)            14288 (  0.00%)    155.30
   rtsp          173774 (  0.68%)         35388670 (  0.21%)    203.65
   icecast       121152 (  0.47%)        112067572 (  0.67%)    925.02
   hotline            2 (  0.00%)              124 (  0.00%)     62.00
   other        3383234 ( 13.19%)       1928037514 ( 11.54%)    569.88
  udp           3405098 ( 13.27%)        597539506 (  3.58%)    175.48
   dns          1923911 (  7.50%)        236263209 (  1.41%)    122.80
   realaud         7381 (  0.03%)          3807240 (  0.02%)    515.82
   halflif           14 (  0.00%)             1430 (  0.00%)    102.14
   starcra           11 (  0.00%)             2107 (  0.00%)    191.55
   everque           51 (  0.00%)             8722 (  0.00%)    171.02
   unreal            21 (  0.00%)             4209 (  0.00%)    200.43
   quake             35 (  0.00%)             3358 (  0.00%)     95.94
   cuseeme           10 (  0.00%)             1580 (  0.00%)    158.00
   other        1473486 (  5.74%)        357419189 (  2.14%)    242.57
  icmp           966561 (  3.77%)        121453215 (  0.73%)    125.65
  ipip              355 (  0.00%)            42306 (  0.00%)    119.17
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              7661 (  0.03%)          4034313 (  0.02%)    526.60
  other          132892 (  0.52%)         18486891 (  0.11%)    139.11
  frag             8421 (  0.03%)          6634747 (  0.04%)    787.88
 ip6             237819 (  0.93%)         47239068 (  0.28%)    198.63
  tcp6           182707 (  0.71%)         37633593 (  0.23%)    205.98
   http(s)         5203 (  0.02%)          7510169 (  0.04%)   1443.43
   http(c)        36080 (  0.14%)          3568206 (  0.02%)     98.90
   smtp            1824 (  0.01%)           706288 (  0.00%)    387.22
   ftp               27 (  0.00%)             2528 (  0.00%)     93.63
   ssh             1775 (  0.01%)           270075 (  0.00%)    152.15
   dns                4 (  0.00%)              536 (  0.00%)    134.00
   bgp              132 (  0.00%)            15030 (  0.00%)    113.86
   other         137662 (  0.54%)         25560761 (  0.15%)    185.68
  udp6            44457 (  0.17%)          8245027 (  0.05%)    185.46
   dns            41644 (  0.16%)          7698615 (  0.05%)    184.87
   starcra           15 (  0.00%)             4188 (  0.00%)    279.20
   everque           32 (  0.00%)             5568 (  0.00%)    174.00
   other           2766 (  0.01%)           536656 (  0.00%)    194.02
  icmp6           10482 (  0.04%)          1296556 (  0.01%)    123.69
  ip6                76 (  0.00%)            11407 (  0.00%)    150.09
  pim6               45 (  0.00%)             5520 (  0.00%)    122.67
  other6             52 (  0.00%)            46965 (  0.00%)    903.17


tcpdump file: 200709191400.dump.gz (667.25 MB)