Traffic Trace Info


DumpFile: 200712041400.dump
FileSize: 1906.38MB
Id: 200712041400
StartTime: Tue Dec 4 14:00:00 2007
EndTime: Tue Dec 4 14:15:01 2007
TotalTime: 900.15 seconds
TotalCapSize: 1490.46MB CapLen: 96 bytes
# of packets: 27256860 (19203.34MB)
AvgRate: 178.95Mbps stddev:21.59M

IP flow (unique src/dst pair) Information

# of flows: 662625 (avg. 41.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 2.0% 1.9% 1.4% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 358660
Top 10 bandwidth usage (bytes/total in %):
14.7% 10.4% 5.4% 4.8% 3.9% 3.8% 3.4% 3.3% 2.9% 2.0%
# of IPv6 addresses: 1193
Top 10 bandwidth usage (bytes/total in %):
62.9% 62.9% 21.4% 21.4% 10.4% 6.3% 4.1% 0.7% 0.7% 0.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6173618
 [   64-  127]:    6422028
 [  128-  255]:     655704
 [  256-  511]:     786604
 [  512- 1023]:     761626
 [ 1024- 2047]:   12457280


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         27256860 (100.00%)      20136157854 (100.00%)    738.76
 ip            26995233 ( 99.04%)      19994125903 ( 99.29%)    740.65
  tcp          22880439 ( 83.94%)      18847494942 ( 93.60%)    823.74
   http(s)      9454816 ( 34.69%)      12334321660 ( 61.25%)   1304.55
   http(c)      6463863 ( 23.71%)       1442246710 (  7.16%)    223.12
   squid         861235 (  3.16%)        648381424 (  3.22%)    752.85
   smtp          645416 (  2.37%)        136632494 (  0.68%)    211.70
   ftp            40099 (  0.15%)          3483675 (  0.02%)     86.88
   pop3           18555 (  0.07%)         12279131 (  0.06%)    661.77
   imap            6693 (  0.02%)          2569410 (  0.01%)    383.90
   telnet           733 (  0.00%)            97551 (  0.00%)    133.08
   ssh           123973 (  0.45%)        101497373 (  0.50%)    818.71
   dns             1850 (  0.01%)           258016 (  0.00%)    139.47
   bgp              235 (  0.00%)            80872 (  0.00%)    344.14
   napster         1230 (  0.00%)          1006835 (  0.01%)    818.57
   realaud          314 (  0.00%)           165532 (  0.00%)    527.17
   rtsp          182250 (  0.67%)        119396653 (  0.59%)    655.13
   icecast         3018 (  0.01%)          2209341 (  0.01%)    732.05
   other        5076148 ( 18.62%)       4042867551 ( 20.08%)    796.44
  udp           3276588 ( 12.02%)       1051614587 (  5.22%)    320.95
   dns          1759903 (  6.46%)        234683734 (  1.17%)    133.35
   realaud        13154 (  0.05%)          6430232 (  0.03%)    488.84
   halflif           28 (  0.00%)             3223 (  0.00%)    115.11
   starcra           48 (  0.00%)             9589 (  0.00%)    199.77
   everque         1200 (  0.00%)           180195 (  0.00%)    150.16
   unreal            21 (  0.00%)             2596 (  0.00%)    123.62
   quake             26 (  0.00%)             2475 (  0.00%)     95.19
   cuseeme            9 (  0.00%)              745 (  0.00%)     82.78
   other        1501662 (  5.51%)        809596348 (  4.02%)    539.13
  icmp           623586 (  2.29%)         51765797 (  0.26%)     83.01
  ipip              335 (  0.00%)            38614 (  0.00%)    115.27
  ipsec            7570 (  0.03%)          9177060 (  0.05%)   1212.29
  ip6               901 (  0.00%)           126468 (  0.00%)    140.36
  other          205814 (  0.76%)         33908435 (  0.17%)    164.75
  frag             7755 (  0.03%)          9385431 (  0.05%)   1210.24
 ip6             261627 (  0.96%)        142031951 (  0.71%)    542.88
  tcp6           226266 (  0.83%)        137256950 (  0.68%)    606.62
   http(s)          910 (  0.00%)           874088 (  0.00%)    960.54
   http(c)       138132 (  0.51%)         14877945 (  0.07%)    107.71
   smtp            1064 (  0.00%)           323030 (  0.00%)    303.60
   ftp              534 (  0.00%)            66900 (  0.00%)    125.28
   pop3              33 (  0.00%)             3042 (  0.00%)     92.18
   ssh               30 (  0.00%)             7788 (  0.00%)    259.60
   dns               15 (  0.00%)             1606 (  0.00%)    107.07
   bgp               86 (  0.00%)             9616 (  0.00%)    111.81
   other          85462 (  0.31%)        121092935 (  0.60%)   1416.92
  udp6            25336 (  0.09%)          3577476 (  0.02%)    141.20
   dns            25085 (  0.09%)          3546449 (  0.02%)    141.38
   other            251 (  0.00%)            31027 (  0.00%)    123.61
  icmp6            9996 (  0.04%)          1193581 (  0.01%)    119.41
  pim6               29 (  0.00%)             3944 (  0.00%)    136.00


tcpdump file: 200712041400.dump.gz (676.51 MB)