Traffic Trace Info


DumpFile: 200709261400.dump
FileSize: 1799.66MB
Id: 200709261400
StartTime: Wed Sep 26 14:00:01 2007
EndTime: Wed Sep 26 14:15:01 2007
TotalTime: 900.19 seconds
TotalCapSize: 1405.67MB CapLen: 96 bytes
# of packets: 25815763 (15646.36MB)
AvgRate: 145.78Mbps stddev:20.88M

IP flow (unique src/dst pair) Information

# of flows: 974636 (avg. 26.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.4% 1.1% 0.8% 0.8% 0.7% 0.7% 0.7% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 557694
Top 10 bandwidth usage (bytes/total in %):
12.8% 9.8% 9.5% 3.5% 3.3% 2.9% 2.4% 2.0% 1.9% 1.5%
# of IPv6 addresses: 2735
Top 10 bandwidth usage (bytes/total in %):
31.0% 31.0% 11.9% 11.9% 7.4% 5.2% 3.3% 3.2% 2.8% 2.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6721522
 [   64-  127]:    6853285
 [  128-  255]:     843612
 [  256-  511]:     674497
 [  512- 1023]:     814124
 [ 1024- 2047]:    9908723


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         25815763 (100.00%)      16406399824 (100.00%)    635.52
 ip            25708146 ( 99.58%)      16375409801 ( 99.81%)    636.97
  tcp          21268598 ( 82.39%)      15186383282 ( 92.56%)    714.03
   http(s)      8743623 ( 33.87%)      11599288200 ( 70.70%)   1326.60
   http(c)      7572581 ( 29.33%)       1233690213 (  7.52%)    162.92
   squid         442221 (  1.71%)        275484280 (  1.68%)    622.96
   smtp          513527 (  1.99%)        174777261 (  1.07%)    340.35
   nntp              62 (  0.00%)             6477 (  0.00%)    104.47
   ftp            13850 (  0.05%)          1488865 (  0.01%)    107.50
   pop3           22735 (  0.09%)         14477834 (  0.09%)    636.81
   imap           43914 (  0.17%)         38511048 (  0.23%)    876.97
   telnet           851 (  0.00%)           145283 (  0.00%)    170.72
   ssh           480875 (  1.86%)        140076057 (  0.85%)    291.29
   dns             5019 (  0.02%)           359193 (  0.00%)     71.57
   bgp              306 (  0.00%)            79360 (  0.00%)    259.35
   napster           90 (  0.00%)            10535 (  0.00%)    117.06
   realaud           11 (  0.00%)             2084 (  0.00%)    189.45
   rtsp          526064 (  2.04%)         65312673 (  0.40%)    124.15
   icecast        26593 (  0.10%)         16277399 (  0.10%)    612.09
   hotline           13 (  0.00%)             1386 (  0.00%)    106.62
   other        2876248 ( 11.14%)       1626394234 (  9.91%)    565.46
  udp           3656152 ( 14.16%)       1090466743 (  6.65%)    298.26
   dns          2065677 (  8.00%)        241958744 (  1.47%)    117.13
   realaud         5224 (  0.02%)          2316497 (  0.01%)    443.43
   halflif         3217 (  0.01%)           258193 (  0.00%)     80.26
   starcra           20 (  0.00%)             3511 (  0.00%)    175.55
   everque         1097 (  0.00%)           194768 (  0.00%)    177.55
   unreal            36 (  0.00%)             5948 (  0.00%)    165.22
   quake             40 (  0.00%)             4330 (  0.00%)    108.25
   cuseeme           43 (  0.00%)             5052 (  0.00%)    117.49
   other        1580596 (  6.12%)        845638222 (  5.15%)    535.01
  icmp           620794 (  2.40%)         56540105 (  0.34%)     91.08
  ipip              347 (  0.00%)            41258 (  0.00%)    118.90
  ipsec            1488 (  0.01%)          1639864 (  0.01%)   1102.06
  ip6              8199 (  0.03%)          4194525 (  0.03%)    511.59
  other          152568 (  0.59%)         36144024 (  0.22%)    236.90
  frag             1887 (  0.01%)          1534234 (  0.01%)    813.05
 ip6             107617 (  0.42%)         30990023 (  0.19%)    287.97
  tcp6            39932 (  0.15%)         18468299 (  0.11%)    462.49
   http(s)         8318 (  0.03%)         10397194 (  0.06%)   1249.96
   http(c)        19482 (  0.08%)          2450233 (  0.01%)    125.77
   squid             24 (  0.00%)             2160 (  0.00%)     90.00
   smtp             992 (  0.00%)           265878 (  0.00%)    268.02
   ftp              161 (  0.00%)            24543 (  0.00%)    152.44
   ssh               93 (  0.00%)            14452 (  0.00%)    155.40
   dns               11 (  0.00%)             1171 (  0.00%)    106.45
   bgp              134 (  0.00%)            12996 (  0.00%)     96.99
   icecast           12 (  0.00%)             1080 (  0.00%)     90.00
   other          10705 (  0.04%)          5298592 (  0.03%)    494.96
  udp6            58844 (  0.23%)         11347124 (  0.07%)    192.83
   dns            55928 (  0.22%)         10799176 (  0.07%)    193.09
   starcra           29 (  0.00%)             6030 (  0.00%)    207.93
   everque           25 (  0.00%)             3739 (  0.00%)    149.56
   other           2862 (  0.01%)           538179 (  0.00%)    188.04
  icmp6            8532 (  0.03%)          1087781 (  0.01%)    127.49
  ip6               159 (  0.00%)            22759 (  0.00%)    143.14
  pim6               80 (  0.00%)             8920 (  0.00%)    111.50
  other6             70 (  0.00%)            55140 (  0.00%)    787.71


tcpdump file: 200709261400.dump.gz (666.89 MB)