Traffic Trace Info


DumpFile: 200801021400.dump
FileSize: 864.72MB
Id: 200801021400
StartTime: Wed Jan 2 14:00:00 2008
EndTime: Wed Jan 2 14:15:01 2008
TotalTime: 900.22 seconds
TotalCapSize: 672.90MB CapLen: 96 bytes
# of packets: 12570812 (6045.54MB)
AvgRate: 56.34Mbps stddev:7.20M

IP flow (unique src/dst pair) Information

# of flows: 731832 (avg. 17.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 3.1% 1.6% 1.6% 1.5% 1.4% 1.1% 1.1% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 395792
Top 10 bandwidth usage (bytes/total in %):
10.0% 7.1% 6.9% 6.6% 6.2% 5.5% 5.4% 5.2% 3.3% 3.0%
# of IPv6 addresses: 2196
Top 10 bandwidth usage (bytes/total in %):
64.7% 64.6% 3.6% 3.2% 2.6% 2.6% 2.3% 1.8% 1.8% 1.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3370285
 [   64-  127]:    4143391
 [  128-  255]:     710001
 [  256-  511]:     397307
 [  512- 1023]:     298772
 [ 1024- 2047]:    3651056


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         12570812 (100.00%)       6339206283 (100.00%)    504.28
 ip            12546366 ( 99.81%)       6330138930 ( 99.86%)    504.54
  tcp           8353457 ( 66.45%)       5523294688 ( 87.13%)    661.20
   http(s)      2303898 ( 18.33%)       3062685232 ( 48.31%)   1329.35
   http(c)      1526792 ( 12.15%)        140112848 (  2.21%)     91.77
   squid         538061 (  4.28%)        298777724 (  4.71%)    555.29
   smtp          627535 (  4.99%)        106704245 (  1.68%)    170.04
   ftp            67771 (  0.54%)          5447332 (  0.09%)     80.38
   pop3           10293 (  0.08%)          7564845 (  0.12%)    734.95
   imap            1749 (  0.01%)           139575 (  0.00%)     79.80
   telnet          1011 (  0.01%)            64753 (  0.00%)     64.05
   ssh             8682 (  0.07%)          1703556 (  0.03%)    196.22
   dns             1882 (  0.01%)           142423 (  0.00%)     75.68
   bgp              181 (  0.00%)            45634 (  0.00%)    252.12
   napster         3440 (  0.03%)           929453 (  0.01%)    270.19
   realaud            8 (  0.00%)             1136 (  0.00%)    142.00
   rtsp              60 (  0.00%)            12465 (  0.00%)    207.75
   icecast          232 (  0.00%)            20028 (  0.00%)     86.33
   other        3261859 ( 25.95%)       1898943259 ( 29.96%)    582.17
  udp           3178422 ( 25.28%)        713125993 ( 11.25%)    224.36
   dns          1351980 ( 10.75%)        166346256 (  2.62%)    123.04
   realaud           48 (  0.00%)             5842 (  0.00%)    121.71
   halflif           17 (  0.00%)             2154 (  0.00%)    126.71
   starcra         3797 (  0.03%)           253538 (  0.00%)     66.77
   everque           75 (  0.00%)            14649 (  0.00%)    195.32
   unreal            42 (  0.00%)             9468 (  0.00%)    225.43
   quake             30 (  0.00%)             4558 (  0.00%)    151.93
   cuseeme           33 (  0.00%)             5960 (  0.00%)    180.61
   other        1822294 ( 14.50%)        546476511 (  8.62%)    299.88
  icmp          1009516 (  8.03%)         92980359 (  1.47%)     92.10
  ipip              340 (  0.00%)            40076 (  0.00%)    117.87
  ipsec             181 (  0.00%)            19910 (  0.00%)    110.00
  ip6               817 (  0.01%)            99362 (  0.00%)    121.62
  other            3633 (  0.03%)           578542 (  0.01%)    159.25
  frag             1086 (  0.01%)           865734 (  0.01%)    797.18
 ip6              24446 (  0.19%)          9067353 (  0.14%)    370.91
  tcp6             9476 (  0.08%)          6749410 (  0.11%)    712.26
   http(s)          132 (  0.00%)           106683 (  0.00%)    808.20
   http(c)         2169 (  0.02%)           348293 (  0.01%)    160.58
   smtp             255 (  0.00%)           108122 (  0.00%)    424.01
   ssh               29 (  0.00%)             7702 (  0.00%)    265.59
   bgp               82 (  0.00%)             9330 (  0.00%)    113.78
   other           6809 (  0.05%)          6169280 (  0.10%)    906.05
  udp6            10639 (  0.08%)          1836169 (  0.03%)    172.59
   dns             7525 (  0.06%)          1386621 (  0.02%)    184.27
   other           3114 (  0.02%)           449548 (  0.01%)    144.36
  icmp6            4268 (  0.03%)           448016 (  0.01%)    104.97
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6             32 (  0.00%)            29542 (  0.00%)    923.19


tcpdump file: 200801021400.dump.gz (324.04 MB)