Traffic Trace Info


DumpFile: 200710111400.dump
FileSize: 2226.80MB
Id: 200710111400
StartTime: Thu Oct 11 14:00:00 2007
EndTime: Thu Oct 11 14:15:00 2007
TotalTime: 899.71 seconds
TotalCapSize: 1744.34MB CapLen: 96 bytes
# of packets: 31614181 (20779.66MB)
AvgRate: 193.72Mbps stddev:27.87M

IP flow (unique src/dst pair) Information

# of flows: 1020883 (avg. 30.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.8% 1.7% 1.6% 1.2% 1.2% 1.1% 1.1% 1.1% 0.9%

IP address Information

# of IPv4 addresses: 579266
Top 10 bandwidth usage (bytes/total in %):
14.4% 7.4% 6.6% 5.4% 2.4% 2.4% 2.3% 2.1% 1.9% 1.9%
# of IPv6 addresses: 2694
Top 10 bandwidth usage (bytes/total in %):
87.9% 44.1% 43.7% 3.3% 2.8% 2.5% 1.1% 0.8% 0.7% 0.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    8029450
 [   64-  127]:    7646920
 [  128-  255]:     898144
 [  256-  511]:     766005
 [  512- 1023]:     938371
 [ 1024- 2047]:   13335291


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         31614181 (100.00%)      21789057698 (100.00%)    689.22
 ip            31275565 ( 98.93%)      21594633686 ( 99.11%)    690.46
  tcp          27402753 ( 86.68%)      20847710657 ( 95.68%)    760.79
   http(s)     11376673 ( 35.99%)      15483413927 ( 71.06%)   1360.98
   http(c)      8784744 ( 27.79%)       1266814407 (  5.81%)    144.21
   squid         702982 (  2.22%)        436294385 (  2.00%)    620.63
   smtp          561718 (  1.78%)        181311715 (  0.83%)    322.78
   nntp               1 (  0.00%)               60 (  0.00%)     60.00
   ftp            91022 (  0.29%)         12946020 (  0.06%)    142.23
   pop3           21953 (  0.07%)         12712440 (  0.06%)    579.08
   imap            9322 (  0.03%)          3824688 (  0.02%)    410.29
   telnet            78 (  0.00%)            30697 (  0.00%)    393.55
   ssh           155117 (  0.49%)         81448716 (  0.37%)    525.08
   dns             4141 (  0.01%)           279152 (  0.00%)     67.41
   bgp              266 (  0.00%)            81942 (  0.00%)    308.05
   napster           39 (  0.00%)             7763 (  0.00%)    199.05
   realaud           89 (  0.00%)            11487 (  0.00%)    129.07
   rtsp          484141 (  1.53%)        122203207 (  0.56%)    252.41
   icecast        37959 (  0.12%)         19079066 (  0.09%)    502.62
   other        5172495 ( 16.36%)       3227250205 ( 14.81%)    623.93
  udp           2796395 (  8.85%)        601691056 (  2.76%)    215.17
   dns          1887951 (  5.97%)        233144863 (  1.07%)    123.49
   realaud        15425 (  0.05%)          8124937 (  0.04%)    526.74
   halflif           25 (  0.00%)             2928 (  0.00%)    117.12
   starcra           70 (  0.00%)            13069 (  0.00%)    186.70
   everque          165 (  0.00%)            25931 (  0.00%)    157.16
   unreal            39 (  0.00%)             7377 (  0.00%)    189.15
   quake             18 (  0.00%)             2679 (  0.00%)    148.83
   cuseeme           10 (  0.00%)              967 (  0.00%)     96.70
   other         892649 (  2.82%)        360329653 (  1.65%)    403.66
  icmp           808429 (  2.56%)         68708528 (  0.32%)     84.99
  ipip              319 (  0.00%)            38830 (  0.00%)    121.72
  ipsec            8430 (  0.03%)         10194068 (  0.05%)   1209.26
  ip6              6673 (  0.02%)          4621789 (  0.02%)    692.61
  other          252566 (  0.80%)         61668758 (  0.28%)    244.17
  frag             1272 (  0.00%)          1043704 (  0.00%)    820.52
 ip6             338616 (  1.07%)        194424012 (  0.89%)    574.17
  tcp6           288621 (  0.91%)        185275394 (  0.85%)    641.93
   http(s)          365 (  0.00%)           226223 (  0.00%)    619.79
   http(c)        61882 (  0.20%)          7612898 (  0.03%)    123.02
   squid              9 (  0.00%)             1476 (  0.00%)    164.00
   smtp             208 (  0.00%)            74839 (  0.00%)    359.80
   nntp               5 (  0.00%)              470 (  0.00%)     94.00
   ssh               66 (  0.00%)            10722 (  0.00%)    162.45
   dns               11 (  0.00%)             1098 (  0.00%)     99.82
   bgp               91 (  0.00%)             8682 (  0.00%)     95.41
   icecast            2 (  0.00%)              168 (  0.00%)     84.00
   other         225982 (  0.71%)        177338818 (  0.81%)    784.75
  udp6            43312 (  0.14%)          8218147 (  0.04%)    189.74
   dns            40918 (  0.13%)          7804142 (  0.04%)    190.73
   starcra            6 (  0.00%)             1159 (  0.00%)    193.17
   other           2388 (  0.01%)           412846 (  0.00%)    172.88
  icmp6            6563 (  0.02%)           900522 (  0.00%)    137.21
  ip6                74 (  0.00%)            11125 (  0.00%)    150.34
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             16 (  0.00%)            14744 (  0.00%)    921.50


tcpdump file: 200710111400.dump.gz (819.09 MB)