Traffic Trace Info


DumpFile: 200710191400.dump
FileSize: 2078.52MB
Id: 200710191400
StartTime: Fri Oct 19 14:00:00 2007
EndTime: Fri Oct 19 14:15:01 2007
TotalTime: 900.13 seconds
TotalCapSize: 1627.12MB CapLen: 96 bytes
# of packets: 29578693 (20828.12MB)
AvgRate: 194.10Mbps stddev:27.08M

IP flow (unique src/dst pair) Information

# of flows: 906461 (avg. 32.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.3% 1.3% 1.3% 1.1% 0.8% 0.8% 0.7% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 497737
Top 10 bandwidth usage (bytes/total in %):
15.3% 6.8% 6.8% 6.6% 4.2% 3.6% 2.3% 2.0% 1.9% 1.7%
# of IPv6 addresses: 2892
Top 10 bandwidth usage (bytes/total in %):
40.8% 14.7% 14.6% 14.2% 6.2% 6.1% 5.5% 4.8% 3.3% 3.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7090151
 [   64-  127]:    6753220
 [  128-  255]:     738559
 [  256-  511]:     693793
 [  512- 1023]:     819857
 [ 1024- 2047]:   13483113


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         29578693 (100.00%)      21839861545 (100.00%)    738.36
 ip            29404481 ( 99.41%)      21814331951 ( 99.88%)    741.87
  tcp          26079209 ( 88.17%)      21286390378 ( 97.47%)    816.22
   http(s)     12462946 ( 42.13%)      17043423230 ( 78.04%)   1367.53
   http(c)      7644047 ( 25.84%)        892218389 (  4.09%)    116.72
   squid         545526 (  1.84%)        414218016 (  1.90%)    759.30
   smtp          626354 (  2.12%)        231564436 (  1.06%)    369.70
   nntp               2 (  0.00%)              132 (  0.00%)     66.00
   ftp            82766 (  0.28%)        114243107 (  0.52%)   1380.31
   pop3           19258 (  0.07%)         11604952 (  0.05%)    602.60
   imap           53000 (  0.18%)         50838164 (  0.23%)    959.21
   telnet           733 (  0.00%)            75717 (  0.00%)    103.30
   ssh            71240 (  0.24%)         37414345 (  0.17%)    525.19
   dns             2067 (  0.01%)           161885 (  0.00%)     78.32
   bgp              262 (  0.00%)            62125 (  0.00%)    237.12
   napster           32 (  0.00%)             7247 (  0.00%)    226.47
   realaud          107 (  0.00%)            14512 (  0.00%)    135.63
   rtsp          579448 (  1.96%)        211567959 (  0.97%)    365.12
   icecast        30031 (  0.10%)         18736636 (  0.09%)    623.91
   other        3961385 ( 13.39%)       2260239226 ( 10.35%)    570.57
  udp           2169587 (  7.33%)        383713949 (  1.76%)    176.86
   dns          1424863 (  4.82%)        184079145 (  0.84%)    129.19
   realaud        25281 (  0.09%)          6729301 (  0.03%)    266.18
   halflif           38 (  0.00%)             4751 (  0.00%)    125.03
   starcra           22 (  0.00%)             3143 (  0.00%)    142.86
   everque         1858 (  0.01%)           306866 (  0.00%)    165.16
   unreal            34 (  0.00%)             4262 (  0.00%)    125.35
   quake             14 (  0.00%)             1366 (  0.00%)     97.57
   cuseeme            4 (  0.00%)              330 (  0.00%)     82.50
   other         717463 (  2.43%)        192581001 (  0.88%)    268.42
  icmp           857347 (  2.90%)         66990626 (  0.31%)     78.14
  ipip              372 (  0.00%)            45484 (  0.00%)    122.27
  ipsec            4921 (  0.02%)          5206686 (  0.02%)   1058.05
  ip6              7047 (  0.02%)          4708532 (  0.02%)    668.16
  other          285998 (  0.97%)         67276296 (  0.31%)    235.23
  frag             1866 (  0.01%)          1432087 (  0.01%)    767.46
 ip6             174210 (  0.59%)         25529474 (  0.12%)    146.54
  tcp6           129770 (  0.44%)         17992817 (  0.08%)    138.65
   http(s)         1518 (  0.01%)          1851369 (  0.01%)   1219.61
   http(c)       112593 (  0.38%)         10649197 (  0.05%)     94.58
   squid              4 (  0.00%)              296 (  0.00%)     74.00
   smtp             787 (  0.00%)           222012 (  0.00%)    282.10
   ftp              196 (  0.00%)            17778 (  0.00%)     90.70
   pop3              46 (  0.00%)             4214 (  0.00%)     91.61
   ssh               62 (  0.00%)            10402 (  0.00%)    167.77
   dns               17 (  0.00%)             3294 (  0.00%)    193.76
   bgp              163 (  0.00%)            21737 (  0.00%)    133.36
   icecast            2 (  0.00%)              148 (  0.00%)     74.00
   other          14382 (  0.05%)          5212370 (  0.02%)    362.42
  udp6            35249 (  0.12%)          6359643 (  0.03%)    180.42
   dns            32392 (  0.11%)          5876266 (  0.03%)    181.41
   everque           41 (  0.00%)             5834 (  0.00%)    142.29
   other           2816 (  0.01%)           477543 (  0.00%)    169.58
  icmp6            9076 (  0.03%)          1152998 (  0.01%)    127.04
  ip6                74 (  0.00%)            11125 (  0.00%)    150.34
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6             10 (  0.00%)             8675 (  0.00%)    867.50


tcpdump file: 200710191400.dump.gz (736.63 MB)