Traffic Trace Info


DumpFile: 200712141400.dump
FileSize: 1658.53MB
Id: 200712141400
StartTime: Fri Dec 14 14:00:01 2007
EndTime: Fri Dec 14 14:15:00 2007
TotalTime: 899.89 seconds
TotalCapSize: 1300.64MB CapLen: 96 bytes
# of packets: 23454110 (14979.58MB)
AvgRate: 139.62Mbps stddev:23.19M

IP flow (unique src/dst pair) Information

# of flows: 655384 (avg. 35.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 2.4% 1.7% 1.7% 1.6% 0.9% 0.9% 0.9% 0.9% 0.7%

IP address Information

# of IPv4 addresses: 314903
Top 10 bandwidth usage (bytes/total in %):
18.4% 10.4% 5.2% 3.8% 3.7% 2.6% 2.4% 2.4% 1.8% 1.7%
# of IPv6 addresses: 1073
Top 10 bandwidth usage (bytes/total in %):
41.6% 40.4% 6.2% 5.8% 4.2% 4.1% 2.7% 2.5% 2.4% 2.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5501279
 [   64-  127]:    6332582
 [  128-  255]:     865483
 [  256-  511]:     537293
 [  512- 1023]:     637864
 [ 1024- 2047]:    9579609


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         23454110 (100.00%)      15707226483 (100.00%)    669.70
 ip            23414569 ( 99.83%)      15697576998 ( 99.94%)    670.42
  tcp          19713868 ( 84.05%)      15174985358 ( 96.61%)    769.76
   http(s)      7871634 ( 33.56%)      10447020020 ( 66.51%)   1327.17
   http(c)      5659515 ( 24.13%)        824255536 (  5.25%)    145.64
   squid         765287 (  3.26%)        471681756 (  3.00%)    616.35
   smtp          713141 (  3.04%)        165009675 (  1.05%)    231.38
   ftp            55089 (  0.23%)         20664394 (  0.13%)    375.11
   pop3           20398 (  0.09%)         12143821 (  0.08%)    595.34
   imap            5162 (  0.02%)          2444252 (  0.02%)    473.51
   telnet          1107 (  0.00%)           236983 (  0.00%)    214.08
   ssh          1008209 (  4.30%)        145074700 (  0.92%)    143.89
   dns             2560 (  0.01%)           200127 (  0.00%)     78.17
   bgp              326 (  0.00%)           160199 (  0.00%)    491.41
   napster            7 (  0.00%)             1468 (  0.00%)    209.71
   realaud         1145 (  0.00%)           638145 (  0.00%)    557.33
   rtsp          263730 (  1.12%)         30906744 (  0.20%)    117.19
   icecast        48967 (  0.21%)         27042930 (  0.17%)    552.27
   hotline           32 (  0.00%)             4270 (  0.00%)    133.44
   other        3297557 ( 14.06%)       3027500218 ( 19.27%)    918.10
  udp           2891480 ( 12.33%)        443596541 (  2.82%)    153.42
   dns          1927335 (  8.22%)        241303027 (  1.54%)    125.20
   realaud         7071 (  0.03%)          2817204 (  0.02%)    398.42
   halflif           18 (  0.00%)             1733 (  0.00%)     96.28
   starcra           17 (  0.00%)             2263 (  0.00%)    133.12
   everque           63 (  0.00%)            10570 (  0.00%)    167.78
   unreal             8 (  0.00%)              645 (  0.00%)     80.62
   quake             34 (  0.00%)             2881 (  0.00%)     84.74
   cuseeme            6 (  0.00%)              573 (  0.00%)     95.50
   other         956923 (  4.08%)        199455255 (  1.27%)    208.43
  icmp           791939 (  3.38%)         69269371 (  0.44%)     87.47
  ipip              346 (  0.00%)            40428 (  0.00%)    116.84
  ipsec           12244 (  0.05%)          8934856 (  0.06%)    729.73
  ip6               963 (  0.00%)           150160 (  0.00%)    155.93
  other            3729 (  0.02%)           600284 (  0.00%)    160.98
  frag             8003 (  0.03%)          9770062 (  0.06%)   1220.80
 ip6              39541 (  0.17%)          9649485 (  0.06%)    244.04
  tcp6            11045 (  0.05%)          5416148 (  0.03%)    490.37
   http(s)          510 (  0.00%)           488484 (  0.00%)    957.81
   http(c)          792 (  0.00%)           116960 (  0.00%)    147.68
   smtp            1091 (  0.00%)           341410 (  0.00%)    312.93
   ftp               67 (  0.00%)             7926 (  0.00%)    118.30
   pop3              35 (  0.00%)             3214 (  0.00%)     91.83
   ssh               30 (  0.00%)             7788 (  0.00%)    259.60
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              108 (  0.00%)            14328 (  0.00%)    132.67
   other           8405 (  0.04%)          4435403 (  0.03%)    527.71
  udp6            20630 (  0.09%)          3219831 (  0.02%)    156.08
   dns            20515 (  0.09%)          3207181 (  0.02%)    156.33
   other            115 (  0.00%)            12650 (  0.00%)    110.00
  icmp6            7836 (  0.03%)          1009426 (  0.01%)    128.82
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200712141400.dump.gz (593.50 MB)