Traffic Trace Info


DumpFile: 200712221400.dump
FileSize: 1074.00MB
Id: 200712221400
StartTime: Sat Dec 22 14:00:00 2007
EndTime: Sat Dec 22 14:15:01 2007
TotalTime: 900.99 seconds
TotalCapSize: 837.33MB CapLen: 96 bytes
# of packets: 15509536 (9510.05MB)
AvgRate: 88.56Mbps stddev:13.42M

IP flow (unique src/dst pair) Information

# of flows: 801975 (avg. 19.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 3.8% 2.3% 2.1% 2.0% 2.0% 1.9% 1.7% 1.6% 1.0%

IP address Information

# of IPv4 addresses: 509643
Top 10 bandwidth usage (bytes/total in %):
10.0% 7.4% 6.4% 5.0% 4.9% 4.6% 4.0% 3.8% 3.8% 3.2%
# of IPv6 addresses: 814
Top 10 bandwidth usage (bytes/total in %):
50.8% 50.8% 38.3% 38.2% 1.0% 1.0% 1.0% 0.9% 0.8% 0.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4205308
 [   64-  127]:    4045694
 [  128-  255]:     570489
 [  256-  511]:     348242
 [  512- 1023]:     235083
 [ 1024- 2047]:    6104720


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         15509536 (100.00%)       9972014072 (100.00%)    642.96
 ip            15480851 ( 99.82%)       9948782490 ( 99.77%)    642.65
  tcp          11935393 ( 76.96%)       9407302604 ( 94.34%)    788.19
   http(s)      4555342 ( 29.37%)       6290515156 ( 63.08%)   1380.91
   http(c)      2670544 ( 17.22%)        234772976 (  2.35%)     87.91
   squid         565544 (  3.65%)        405816338 (  4.07%)    717.57
   smtp          767011 (  4.95%)        137265345 (  1.38%)    178.96
   ftp            65861 (  0.42%)         45097542 (  0.45%)    684.74
   pop3            9963 (  0.06%)          6380836 (  0.06%)    640.45
   imap            2512 (  0.02%)           268770 (  0.00%)    106.99
   telnet           195 (  0.00%)            12480 (  0.00%)     64.00
   ssh            35970 (  0.23%)          4308654 (  0.04%)    119.78
   dns             3993 (  0.03%)          2139533 (  0.02%)    535.82
   bgp              205 (  0.00%)            65825 (  0.00%)    321.10
   napster           13 (  0.00%)             1171 (  0.00%)     90.08
   realaud           18 (  0.00%)             5593 (  0.00%)    310.72
   rtsp           38554 (  0.25%)         38589410 (  0.39%)   1000.92
   icecast         2806 (  0.02%)           178519 (  0.00%)     63.62
   hotline           13 (  0.00%)             3192 (  0.00%)    245.54
   other        3216847 ( 20.74%)       2241881144 ( 22.48%)    696.92
  udp           2804673 ( 18.08%)        447337358 (  4.49%)    159.50
   dns          1542420 (  9.94%)        188263468 (  1.89%)    122.06
   realaud          986 (  0.01%)            72558 (  0.00%)     73.59
   halflif           19 (  0.00%)             3414 (  0.00%)    179.68
   starcra           11 (  0.00%)             2180 (  0.00%)    198.18
   everque           53 (  0.00%)             9681 (  0.00%)    182.66
   unreal             6 (  0.00%)              627 (  0.00%)    104.50
   quake             15 (  0.00%)             1284 (  0.00%)     85.60
   cuseeme           11 (  0.00%)             1174 (  0.00%)    106.73
   other        1260950 (  8.13%)        258962977 (  2.60%)    205.37
  icmp           706631 (  4.56%)         70581946 (  0.71%)     99.89
  ipip              328 (  0.00%)            39588 (  0.00%)    120.70
  ipsec             162 (  0.00%)            17820 (  0.00%)    110.00
  ip6               911 (  0.01%)           111343 (  0.00%)    122.22
  other           32753 (  0.21%)         23391831 (  0.23%)    714.19
  frag             2172 (  0.01%)          1764291 (  0.02%)    812.29
 ip6              28685 (  0.18%)         23231582 (  0.23%)    809.89
  tcp6            16517 (  0.11%)         21233203 (  0.21%)   1285.54
   http(s)          235 (  0.00%)           247256 (  0.00%)   1052.15
   http(c)           81 (  0.00%)             9141 (  0.00%)    112.85
   squid              4 (  0.00%)              392 (  0.00%)     98.00
   smtp             276 (  0.00%)            64936 (  0.00%)    235.28
   ftp               26 (  0.00%)             3003 (  0.00%)    115.50
   pop3             141 (  0.00%)            12890 (  0.00%)     91.42
   ssh               30 (  0.00%)             7788 (  0.00%)    259.60
   bgp               64 (  0.00%)             6643 (  0.00%)    103.80
   other          15660 (  0.10%)         20881154 (  0.21%)   1333.41
  udp6             9090 (  0.06%)          1586951 (  0.02%)    174.58
   dns             8928 (  0.06%)          1569042 (  0.02%)    175.74
   other            162 (  0.00%)            17909 (  0.00%)    110.55
  icmp6            3048 (  0.02%)           407348 (  0.00%)    133.64
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200712221400.dump.gz (381.57 MB)