Traffic Trace Info


DumpFile: 200709221400.dump
FileSize: 1505.53MB
Id: 200709221400
StartTime: Sat Sep 22 14:00:01 2007
EndTime: Sat Sep 22 14:15:00 2007
TotalTime: 899.35 seconds
TotalCapSize: 1176.93MB CapLen: 96 bytes
# of packets: 21530243 (13471.22MB)
AvgRate: 125.67Mbps stddev:18.54M

IP flow (unique src/dst pair) Information

# of flows: 984685 (avg. 21.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.3% 1.2% 1.1% 1.0% 1.0% 1.0% 1.0% 0.9% 0.8%

IP address Information

# of IPv4 addresses: 614885
Top 10 bandwidth usage (bytes/total in %):
14.0% 12.2% 10.8% 4.7% 3.4% 3.0% 2.3% 1.7% 1.6% 1.5%
# of IPv6 addresses: 2867
Top 10 bandwidth usage (bytes/total in %):
25.1% 25.1% 25.1% 15.2% 9.9% 6.1% 4.5% 3.6% 3.0% 2.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5993108
 [   64-  127]:    5401628
 [  128-  255]:     622439
 [  256-  511]:     431636
 [  512- 1023]:     425619
 [ 1024- 2047]:    8655813


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         21530243 (100.00%)      14125602772 (100.00%)    656.08
 ip            21371034 ( 99.26%)      14100329566 ( 99.82%)    659.79
  tcp          17264794 ( 80.19%)      13484284999 ( 95.46%)    781.03
   http(s)      7851333 ( 36.47%)      10971024684 ( 77.67%)   1397.35
   http(c)      4808482 ( 22.33%)        490143079 (  3.47%)    101.93
   squid         761770 (  3.54%)        504693566 (  3.57%)    662.53
   smtp          414576 (  1.93%)         93862772 (  0.66%)    226.41
   ftp            13756 (  0.06%)          1414615 (  0.01%)    102.84
   pop3           12568 (  0.06%)          8884711 (  0.06%)    706.93
   imap            4675 (  0.02%)          1866779 (  0.01%)    399.31
   telnet           845 (  0.00%)           192929 (  0.00%)    228.32
   ssh           160730 (  0.75%)         41751825 (  0.30%)    259.76
   dns             4846 (  0.02%)           352143 (  0.00%)     72.67
   bgp              263 (  0.00%)            66330 (  0.00%)    252.21
   napster           24 (  0.00%)            12325 (  0.00%)    513.54
   realaud           37 (  0.00%)             5390 (  0.00%)    145.68
   rtsp          149042 (  0.69%)         35193458 (  0.25%)    236.13
   icecast        18189 (  0.08%)         15641495 (  0.11%)    859.94
   hotline           13 (  0.00%)             2472 (  0.00%)    190.15
   other        3063641 ( 14.23%)       1319176186 (  9.34%)    430.59
  udp           2914818 ( 13.54%)        489782720 (  3.47%)    168.03
   dns          1528830 (  7.10%)        180136127 (  1.28%)    117.83
   realaud         2754 (  0.01%)           168620 (  0.00%)     61.23
   halflif           20 (  0.00%)             2968 (  0.00%)    148.40
   starcra           29 (  0.00%)             3999 (  0.00%)    137.90
   everque          279 (  0.00%)            52812 (  0.00%)    189.29
   unreal            12 (  0.00%)             2372 (  0.00%)    197.67
   quake             14 (  0.00%)             1543 (  0.00%)    110.21
   cuseeme            1 (  0.00%)               86 (  0.00%)     86.00
   other        1382784 (  6.42%)        309370258 (  2.19%)    223.73
  icmp           996793 (  4.63%)         87790773 (  0.62%)     88.07
  ipip              391 (  0.00%)            48006 (  0.00%)    122.78
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              7664 (  0.04%)          4005719 (  0.03%)    522.67
  other          186394 (  0.87%)         34397549 (  0.24%)    184.54
  frag             1348 (  0.01%)          1118318 (  0.01%)    829.61
 ip6             159209 (  0.74%)         25273206 (  0.18%)    158.74
  tcp6           109095 (  0.51%)         16579243 (  0.12%)    151.97
   http(s)         1843 (  0.01%)          2553091 (  0.02%)   1385.29
   http(c)        10257 (  0.05%)          1353539 (  0.01%)    131.96
   squid             54 (  0.00%)             4212 (  0.00%)     78.00
   smtp             577 (  0.00%)           195933 (  0.00%)    339.57
   ssh               66 (  0.00%)            10722 (  0.00%)    162.45
   bgp              111 (  0.00%)            11713 (  0.00%)    105.52
   other          96187 (  0.45%)         12450033 (  0.09%)    129.44
  udp6            39399 (  0.18%)          7321598 (  0.05%)    185.83
   dns            35731 (  0.17%)          6566639 (  0.05%)    183.78
   everque           31 (  0.00%)             4595 (  0.00%)    148.23
   other           3637 (  0.02%)           750364 (  0.01%)    206.31
  icmp6           10419 (  0.05%)          1287242 (  0.01%)    123.55
  ip6               161 (  0.00%)            23489 (  0.00%)    145.89
  pim6               77 (  0.00%)             8592 (  0.00%)    111.58
  other6             58 (  0.00%)            53042 (  0.00%)    914.52


tcpdump file: 200709221400.dump.gz (547.03 MB)