Traffic Trace Info


DumpFile: 200710041400.dump
FileSize: 2198.18MB
Id: 200710041400
StartTime: Thu Oct 4 14:00:00 2007
EndTime: Thu Oct 4 14:15:01 2007
TotalTime: 900.45 seconds
TotalCapSize: 1722.75MB CapLen: 96 bytes
# of packets: 31153233 (20387.89MB)
AvgRate: 189.91Mbps stddev:29.92M

IP flow (unique src/dst pair) Information

# of flows: 860095 (avg. 36.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 1.6% 1.3% 1.0% 1.0% 0.9% 0.8% 0.8% 0.7% 0.6%

IP address Information

# of IPv4 addresses: 433126
Top 10 bandwidth usage (bytes/total in %):
12.8% 7.1% 6.8% 6.8% 4.1% 3.6% 3.5% 3.2% 2.7% 2.5%
# of IPv6 addresses: 4498
Top 10 bandwidth usage (bytes/total in %):
21.3% 21.3% 16.4% 13.4% 13.4% 3.5% 3.0% 2.7% 2.6% 2.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7347550
 [   64-  127]:    8079240
 [  128-  255]:    1018947
 [  256-  511]:     735552
 [  512- 1023]:     833961
 [ 1024- 2047]:   13137983


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         31153233 (100.00%)      21378247268 (100.00%)    686.23
 ip            30922111 ( 99.26%)      21342937004 ( 99.83%)    690.22
  tcp          26166340 ( 83.99%)      20222911243 ( 94.60%)    772.86
   http(s)     11941271 ( 38.33%)      16333783679 ( 76.40%)   1367.84
   http(c)      8842749 ( 28.38%)       1273303218 (  5.96%)    143.99
   squid         281686 (  0.90%)        171415509 (  0.80%)    608.53
   smtp          645145 (  2.07%)        260508252 (  1.22%)    403.80
   nntp              29 (  0.00%)             2718 (  0.00%)     93.72
   ftp            23605 (  0.08%)          4715187 (  0.02%)    199.75
   pop3           19638 (  0.06%)         11123698 (  0.05%)    566.44
   imap           12638 (  0.04%)          7552378 (  0.04%)    597.59
   telnet           238 (  0.00%)            25231 (  0.00%)    106.01
   ssh            69062 (  0.22%)         18151008 (  0.08%)    262.82
   dns             6097 (  0.02%)           470331 (  0.00%)     77.14
   bgp              315 (  0.00%)           115703 (  0.00%)    367.31
   napster           66 (  0.00%)            10676 (  0.00%)    161.76
   realaud          418 (  0.00%)           138259 (  0.00%)    330.76
   rtsp          339979 (  1.09%)         63815345 (  0.30%)    187.70
   icecast        16655 (  0.05%)          2270830 (  0.01%)    136.35
   hotline           19 (  0.00%)             3293 (  0.00%)    173.32
   other        3966723 ( 12.73%)       2075505508 (  9.71%)    523.23
  udp           3893787 ( 12.50%)       1016777700 (  4.76%)    261.13
   dns          2033696 (  6.53%)        259180914 (  1.21%)    127.44
   realaud        27033 (  0.09%)         13768722 (  0.06%)    509.33
   halflif           10 (  0.00%)             1180 (  0.00%)    118.00
   starcra         1667 (  0.01%)           108912 (  0.00%)     65.33
   everque           96 (  0.00%)            15248 (  0.00%)    158.83
   unreal            10 (  0.00%)             1417 (  0.00%)    141.70
   quake             26 (  0.00%)             2808 (  0.00%)    108.00
   cuseeme            7 (  0.00%)              584 (  0.00%)     83.43
   other        1830986 (  5.88%)        743658102 (  3.48%)    406.15
  icmp           772002 (  2.48%)         74386417 (  0.35%)     96.36
  ipip              347 (  0.00%)            41454 (  0.00%)    119.46
  ipsec            9314 (  0.03%)         11056244 (  0.05%)   1187.06
  ip6              6994 (  0.02%)          4701217 (  0.02%)    672.18
  other           73327 (  0.24%)         13062729 (  0.06%)    178.14
  frag            12734 (  0.04%)         10795237 (  0.05%)    847.75
 ip6             231122 (  0.74%)         35310264 (  0.17%)    152.78
  tcp6           161795 (  0.52%)         23048972 (  0.11%)    142.46
   http(s)         1563 (  0.01%)          1637032 (  0.01%)   1047.37
   http(c)        51353 (  0.16%)          6442748 (  0.03%)    125.46
   squid             24 (  0.00%)             2160 (  0.00%)     90.00
   smtp            1094 (  0.00%)           370862 (  0.00%)    339.00
   ssh               77 (  0.00%)            12292 (  0.00%)    159.64
   dns               36 (  0.00%)             4185 (  0.00%)    116.25
   bgp              122 (  0.00%)            11281 (  0.00%)     92.47
   icecast           12 (  0.00%)             1080 (  0.00%)     90.00
   other         107514 (  0.35%)         14567332 (  0.07%)    135.49
  udp6            55975 (  0.18%)         10594215 (  0.05%)    189.27
   dns            50616 (  0.16%)          9443107 (  0.04%)    186.56
   starcra           19 (  0.00%)             5099 (  0.00%)    268.37
   everque           26 (  0.00%)             6568 (  0.00%)    252.62
   other           5314 (  0.02%)          1139441 (  0.01%)    214.42
  icmp6           13179 (  0.04%)          1594518 (  0.01%)    120.99
  ip6                79 (  0.00%)            11807 (  0.00%)    149.46
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6             63 (  0.00%)            56536 (  0.00%)    897.40


tcpdump file: 200710041400.dump.gz (798.41 MB)