Traffic Trace Info


DumpFile: 200710241400.dump
FileSize: 2067.08MB
Id: 200710241400
StartTime: Wed Oct 24 14:00:01 2007
EndTime: Wed Oct 24 14:15:01 2007
TotalTime: 900.07 seconds
TotalCapSize: 1621.40MB CapLen: 96 bytes
# of packets: 29203568 (19642.45MB)
AvgRate: 183.10Mbps stddev:35.78M

IP flow (unique src/dst pair) Information

# of flows: 667900 (avg. 43.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.4% 1.9% 1.5% 1.3% 1.0% 0.9% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 337663
Top 10 bandwidth usage (bytes/total in %):
14.8% 5.1% 4.2% 3.4% 3.4% 2.9% 2.7% 2.7% 2.5% 2.4%
# of IPv6 addresses: 2191
Top 10 bandwidth usage (bytes/total in %):
36.2% 36.1% 13.1% 4.4% 4.1% 3.7% 3.5% 3.3% 3.3% 2.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6766827
 [   64-  127]:    7083748
 [  128-  255]:    1011640
 [  256-  511]:     755865
 [  512- 1023]:    1109467
 [ 1024- 2047]:   12476021


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         29203568 (100.00%)      20596600724 (100.00%)    705.28
 ip            29158838 ( 99.85%)      20586219398 ( 99.95%)    706.00
  tcp          25369438 ( 86.87%)      20025768622 ( 97.23%)    789.37
   http(s)     11352761 ( 38.87%)      15260464219 ( 74.09%)   1344.21
   http(c)      7286340 ( 24.95%)       1056231312 (  5.13%)    144.96
   squid         632422 (  2.17%)        431054025 (  2.09%)    681.59
   smtp          695480 (  2.38%)        280776346 (  1.36%)    403.72
   nntp              52 (  0.00%)             4499 (  0.00%)     86.52
   ftp            13065 (  0.04%)          1105678 (  0.01%)     84.63
   pop3           21876 (  0.07%)         12633207 (  0.06%)    577.49
   imap            8718 (  0.03%)          3338807 (  0.02%)    382.98
   telnet           410 (  0.00%)            26159 (  0.00%)     63.80
   ssh           631128 (  2.16%)        131449793 (  0.64%)    208.28
   dns             2582 (  0.01%)           202922 (  0.00%)     78.59
   bgp              495 (  0.00%)           244865 (  0.00%)    494.68
   napster         1305 (  0.00%)          1094717 (  0.01%)    838.86
   realaud          212 (  0.00%)            29476 (  0.00%)    139.04
   rtsp          569392 (  1.95%)        114288091 (  0.55%)    200.72
   icecast         6911 (  0.02%)           536989 (  0.00%)     77.70
   hotline            5 (  0.00%)             1603 (  0.00%)    320.60
   other        4146280 ( 14.20%)       2732285674 ( 13.27%)    658.97
  udp           2481757 (  8.50%)        420140008 (  2.04%)    169.29
   dns          1679092 (  5.75%)        231457323 (  1.12%)    137.85
   realaud         8634 (  0.03%)          2871667 (  0.01%)    332.60
   halflif           31 (  0.00%)             3866 (  0.00%)    124.71
   starcra           21 (  0.00%)             3946 (  0.00%)    187.90
   everque           70 (  0.00%)            14124 (  0.00%)    201.77
   unreal            20 (  0.00%)             3522 (  0.00%)    176.10
   quake             31 (  0.00%)             5767 (  0.00%)    186.03
   cuseeme           10 (  0.00%)             1236 (  0.00%)    123.60
   other         793746 (  2.72%)        185731336 (  0.90%)    233.99
  icmp          1033699 (  3.54%)         79802211 (  0.39%)     77.20
  ipip              367 (  0.00%)            43662 (  0.00%)    118.97
  ipsec            1551 (  0.01%)          1740682 (  0.01%)   1122.30
  ip6              6587 (  0.02%)          4603522 (  0.02%)    698.88
  other          265439 (  0.91%)         54120691 (  0.26%)    203.89
  frag             2932 (  0.01%)          2504438 (  0.01%)    854.17
 ip6              44730 (  0.15%)         10381326 (  0.05%)    232.09
  tcp6            16240 (  0.06%)          6305935 (  0.03%)    388.30
   http(s)          649 (  0.00%)           658598 (  0.00%)   1014.79
   http(c)          703 (  0.00%)            79957 (  0.00%)    113.74
   smtp             783 (  0.00%)           401846 (  0.00%)    513.21
   ssh               45 (  0.00%)             8658 (  0.00%)    192.40
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              132 (  0.00%)            19145 (  0.00%)    145.04
   other          13921 (  0.05%)          5137096 (  0.02%)    369.02
  udp6            21190 (  0.07%)          3206635 (  0.02%)    151.33
   dns            19621 (  0.07%)          2909827 (  0.01%)    148.30
   other           1569 (  0.01%)           296808 (  0.00%)    189.17
  icmp6            7240 (  0.02%)           848113 (  0.00%)    117.14
  ip6                11 (  0.00%)             1548 (  0.00%)    140.73
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             19 (  0.00%)            15015 (  0.00%)    790.26


tcpdump file: 200710241400.dump.gz (729.34 MB)