Traffic Trace Info


DumpFile: 200710081400.dump
FileSize: 1523.53MB
Id: 200710081400
StartTime: Mon Oct 8 14:00:00 2007
EndTime: Mon Oct 8 14:15:00 2007
TotalTime: 900.00 seconds
TotalCapSize: 1192.72MB CapLen: 96 bytes
# of packets: 21676107 (13304.59MB)
AvgRate: 123.99Mbps stddev:12.07M

IP flow (unique src/dst pair) Information

# of flows: 949750 (avg. 22.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.8% 1.4% 1.4% 1.1% 1.1% 1.1% 1.0% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 495442
Top 10 bandwidth usage (bytes/total in %):
21.3% 11.6% 10.7% 4.1% 2.7% 2.5% 2.2% 2.0% 1.9% 1.8%
# of IPv6 addresses: 3444
Top 10 bandwidth usage (bytes/total in %):
55.0% 51.4% 10.4% 10.4% 4.2% 3.6% 2.4% 1.8% 1.6% 1.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5006216
 [   64-  127]:    6337112
 [  128-  255]:     909175
 [  256-  511]:     448681
 [  512- 1023]:     506846
 [ 1024- 2047]:    8468077


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         21676107 (100.00%)      13950873357 (100.00%)    643.61
 ip            21574119 ( 99.53%)      13913970790 ( 99.74%)    644.94
  tcp          17763706 ( 81.95%)      13297780040 ( 95.32%)    748.59
   http(s)      7881517 ( 36.36%)      10885501348 ( 78.03%)   1381.14
   http(c)      4921250 ( 22.70%)        471517990 (  3.38%)     95.81
   squid         824694 (  3.80%)        770230597 (  5.52%)    933.96
   smtp          526365 (  2.43%)         90164537 (  0.65%)    171.30
   nntp              61 (  0.00%)             5967 (  0.00%)     97.82
   ftp            24698 (  0.11%)          2055571 (  0.01%)     83.23
   pop3            7618 (  0.04%)          3777868 (  0.03%)    495.91
   imap            3871 (  0.02%)          1453547 (  0.01%)    375.50
   telnet           402 (  0.00%)            27496 (  0.00%)     68.40
   ssh           830081 (  3.83%)        150571940 (  1.08%)    181.39
   dns             3543 (  0.02%)           251135 (  0.00%)     70.88
   bgp              292 (  0.00%)            90994 (  0.00%)    311.62
   napster            7 (  0.00%)              428 (  0.00%)     61.14
   realaud          117 (  0.00%)            14334 (  0.00%)    122.51
   rtsp          437114 (  2.02%)         33260378 (  0.24%)     76.09
   icecast        27945 (  0.13%)         26300260 (  0.19%)    941.14
   hotline            8 (  0.00%)              562 (  0.00%)     70.25
   other        2274118 ( 10.49%)        862554788 (  6.18%)    379.29
  udp           2761624 ( 12.74%)        474206262 (  3.40%)    171.71
   dns          1909024 (  8.81%)        237625154 (  1.70%)    124.47
   realaud         4421 (  0.02%)           326712 (  0.00%)     73.90
   halflif         6885 (  0.03%)           537076 (  0.00%)     78.01
   starcra           59 (  0.00%)             6733 (  0.00%)    114.12
   everque           66 (  0.00%)            11467 (  0.00%)    173.74
   unreal            16 (  0.00%)             1760 (  0.00%)    110.00
   quake             16 (  0.00%)             1292 (  0.00%)     80.75
   cuseeme           16 (  0.00%)             1568 (  0.00%)     98.00
   other         840904 (  3.88%)        235560876 (  1.69%)    280.13
  icmp           780344 (  3.60%)         69479233 (  0.50%)     89.04
  ipip              353 (  0.00%)            42406 (  0.00%)    120.13
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              6704 (  0.03%)          4616074 (  0.03%)    688.56
  other          261208 (  1.21%)         67826975 (  0.49%)    259.67
  frag             2869 (  0.01%)          2352936 (  0.02%)    820.12
 ip6             101988 (  0.47%)         36902567 (  0.26%)    361.83
  tcp6            42242 (  0.19%)         26289176 (  0.19%)    622.35
   http(s)        13759 (  0.06%)         19191020 (  0.14%)   1394.80
   http(c)        12849 (  0.06%)          1521349 (  0.01%)    118.40
   squid              2 (  0.00%)              148 (  0.00%)     74.00
   smtp             374 (  0.00%)            70370 (  0.00%)    188.16
   pop3              45 (  0.00%)             4128 (  0.00%)     91.73
   ssh               62 (  0.00%)            10402 (  0.00%)    167.77
   dns               50 (  0.00%)             4589 (  0.00%)     91.78
   bgp               92 (  0.00%)             8776 (  0.00%)     95.39
   icecast            1 (  0.00%)               74 (  0.00%)     74.00
   other          15008 (  0.07%)          5478320 (  0.04%)    365.03
  udp6            50350 (  0.23%)          9352108 (  0.07%)    185.74
   dns            46222 (  0.21%)          8472289 (  0.06%)    183.30
   starcra           14 (  0.00%)             2702 (  0.00%)    193.00
   everque           30 (  0.00%)             5224 (  0.00%)    174.13
   other           4084 (  0.02%)           871893 (  0.01%)    213.49
  icmp6            9281 (  0.04%)          1235640 (  0.01%)    133.14
  ip6                73 (  0.00%)            11065 (  0.00%)    151.58
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             12 (  0.00%)            10498 (  0.00%)    874.83


tcpdump file: 200710081400.dump.gz (576.67 MB)