Traffic Trace Info


DumpFile: 200711101400.dump
FileSize: 1548.31MB
Id: 200711101400
StartTime: Sat Nov 10 14:00:01 2007
EndTime: Sat Nov 10 14:15:00 2007
TotalTime: 899.58 seconds
TotalCapSize: 1203.13MB CapLen: 96 bytes
# of packets: 22617072 (15359.59MB)
AvgRate: 143.26Mbps stddev:39.26M

IP flow (unique src/dst pair) Information

# of flows: 652652 (avg. 34.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.1% 3.7% 1.4% 1.3% 1.3% 1.2% 1.0% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 361561
Top 10 bandwidth usage (bytes/total in %):
15.7% 15.1% 15.1% 4.3% 3.8% 3.3% 3.3% 2.5% 2.0% 1.9%
# of IPv6 addresses: 1790
Top 10 bandwidth usage (bytes/total in %):
45.2% 45.2% 26.3% 26.3% 12.5% 12.5% 1.8% 1.8% 1.8% 1.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5119143
 [   64-  127]:    5895098
 [  128-  255]:     634909
 [  256-  511]:     449856
 [  512- 1023]:     488150
 [ 1024- 2047]:   10029916


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         22617072 (100.00%)      16105697015 (100.00%)    712.10
 ip            22477581 ( 99.38%)      16075394039 ( 99.81%)    715.17
  tcp          16707960 ( 73.87%)      12837394828 ( 79.71%)    768.34
   http(s)      6355601 ( 28.10%)       8711267462 ( 54.09%)   1370.64
   http(c)      3793262 ( 16.77%)        400169547 (  2.48%)    105.49
   squid         931341 (  4.12%)        822086568 (  5.10%)    882.69
   smtp          597550 (  2.64%)        101211109 (  0.63%)    169.38
   ftp           654963 (  2.90%)         58068027 (  0.36%)     88.66
   pop3           11999 (  0.05%)          6567438 (  0.04%)    547.33
   imap            5564 (  0.02%)          2213692 (  0.01%)    397.86
   telnet           565 (  0.00%)            36150 (  0.00%)     63.98
   ssh           440554 (  1.95%)         92761778 (  0.58%)    210.56
   dns             3422 (  0.02%)           960725 (  0.01%)    280.75
   bgp              289 (  0.00%)            78881 (  0.00%)    272.94
   napster           92 (  0.00%)             7490 (  0.00%)     81.41
   realaud         3551 (  0.02%)           378640 (  0.00%)    106.63
   rtsp          376808 (  1.67%)        291197181 (  1.81%)    772.80
   icecast        32784 (  0.14%)         20801609 (  0.13%)    634.50
   hotline           19 (  0.00%)             5046 (  0.00%)    265.58
   other        3499590 ( 15.47%)       2329583125 ( 14.46%)    665.67
  udp           4594658 ( 20.31%)       3124071166 ( 19.40%)    679.94
   dns          1551764 (  6.86%)        217244134 (  1.35%)    140.00
   rip               44 (  0.00%)            66504 (  0.00%)   1511.45
   realaud         1786 (  0.01%)           235258 (  0.00%)    131.72
   halflif          109 (  0.00%)           136015 (  0.00%)   1247.84
   starcra           73 (  0.00%)            73927 (  0.00%)   1012.70
   everque          211 (  0.00%)           216536 (  0.00%)   1026.24
   unreal            57 (  0.00%)            69198 (  0.00%)   1214.00
   quake            152 (  0.00%)           202951 (  0.00%)   1335.20
   cuseeme           58 (  0.00%)            68130 (  0.00%)   1174.66
   other        3039587 ( 13.44%)       2904554541 ( 18.03%)    955.58
  icmp           990338 (  4.38%)         80976765 (  0.50%)     81.77
  ipip              340 (  0.00%)            40716 (  0.00%)    119.75
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              7153 (  0.03%)          3965291 (  0.02%)    554.35
  other          176952 (  0.78%)         28925473 (  0.18%)    163.47
  frag          1611685 (  7.13%)       2434275084 ( 15.11%)   1510.39
 ip6             139491 (  0.62%)         30302976 (  0.19%)    217.24
  tcp6           116230 (  0.51%)         26844743 (  0.17%)    230.96
   http(s)         9616 (  0.04%)         13816259 (  0.09%)   1436.80
   http(c)         7059 (  0.03%)           646732 (  0.00%)     91.62
   smtp             612 (  0.00%)           183717 (  0.00%)    300.19
   pop3              33 (  0.00%)             3042 (  0.00%)     92.18
   ssh               29 (  0.00%)             7702 (  0.00%)    265.59
   dns               12 (  0.00%)             1128 (  0.00%)     94.00
   bgp              113 (  0.00%)            14547 (  0.00%)    128.73
   other          98756 (  0.44%)         12171616 (  0.08%)    123.25
  udp6            16837 (  0.07%)          2677527 (  0.02%)    159.03
   dns            15855 (  0.07%)          2506816 (  0.02%)    158.11
   other            982 (  0.00%)           170711 (  0.00%)    173.84
  icmp6            6378 (  0.03%)           762007 (  0.00%)    119.47
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             16 (  0.00%)            14619 (  0.00%)    913.69


tcpdump file: 200711101400.dump.gz (542.28 MB)