Traffic Trace Info


DumpFile: 200802021400.dump
FileSize: 1037.30MB
Id: 200802021400
StartTime: Sat Feb 2 14:00:01 2008
EndTime: Sat Feb 2 14:15:01 2008
TotalTime: 900.07 seconds
TotalCapSize: 806.19MB CapLen: 96 bytes
# of packets: 15145282 (9377.48MB)
AvgRate: 87.40Mbps stddev:15.65M

IP flow (unique src/dst pair) Information

# of flows: 655530 (avg. 23.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 2.9% 2.0% 1.8% 1.6% 1.6% 1.6% 1.5% 1.2% 1.2%

IP address Information

# of IPv4 addresses: 367496
Top 10 bandwidth usage (bytes/total in %):
8.3% 6.2% 5.2% 5.2% 3.7% 3.6% 3.4% 3.2% 3.0% 3.0%
# of IPv6 addresses: 815
Top 10 bandwidth usage (bytes/total in %):
13.8% 10.5% 8.7% 8.1% 8.1% 6.8% 5.2% 5.1% 4.8% 4.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2621556
 [   64-  127]:    5089107
 [  128-  255]:     651980
 [  256-  511]:     396087
 [  512- 1023]:     393323
 [ 1024- 2047]:    5993229


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         15145282 (100.00%)       9833004422 (100.00%)    649.25
 ip            15127411 ( 99.88%)       9830116075 ( 99.97%)    649.82
  tcp          10575090 ( 69.82%)       8639733560 ( 87.86%)    816.99
   http(s)      4180770 ( 27.60%)       5577313123 ( 56.72%)   1334.04
   http(c)      2236564 ( 14.77%)        266335977 (  2.71%)    119.08
   squid         524363 (  3.46%)        462863066 (  4.71%)    882.71
   smtp          684612 (  4.52%)        286216108 (  2.91%)    418.07
   ftp            52855 (  0.35%)          5710779 (  0.06%)    108.05
   pop3            3081 (  0.02%)          1288980 (  0.01%)    418.36
   imap            4023 (  0.03%)          1282904 (  0.01%)    318.89
   telnet          1784 (  0.01%)           914242 (  0.01%)    512.47
   ssh           446585 (  2.95%)         62574970 (  0.64%)    140.12
   dns             5917 (  0.04%)           594637 (  0.01%)    100.50
   bgp              202 (  0.00%)            59936 (  0.00%)    296.71
   napster           25 (  0.00%)             5585 (  0.00%)    223.40
   realaud           35 (  0.00%)             3628 (  0.00%)    103.66
   rtsp            2542 (  0.02%)           262437 (  0.00%)    103.24
   icecast        13512 (  0.09%)         17404645 (  0.18%)   1288.09
   hotline            6 (  0.00%)             1119 (  0.00%)    186.50
   other        2418212 ( 15.97%)       1956901304 ( 19.90%)    809.23
  udp           3963686 ( 26.17%)       1109234455 ( 11.28%)    279.85
   dns          1367220 (  9.03%)        173233773 (  1.76%)    126.71
   realaud           40 (  0.00%)             4147 (  0.00%)    103.67
   halflif           28 (  0.00%)             2631 (  0.00%)     93.96
   starcra         2714 (  0.02%)           195378 (  0.00%)     71.99
   everque           57 (  0.00%)             7325 (  0.00%)    128.51
   unreal           177 (  0.00%)            15531 (  0.00%)     87.75
   quake             23 (  0.00%)             1981 (  0.00%)     86.13
   cuseeme            8 (  0.00%)             1028 (  0.00%)    128.50
   other        2593292 ( 17.12%)        935616510 (  9.52%)    360.78
  icmp           489522 (  3.23%)         49811788 (  0.51%)    101.76
  ipip              337 (  0.00%)            40088 (  0.00%)    118.96
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6               864 (  0.01%)           106581 (  0.00%)    123.36
  other           97732 (  0.65%)         31169803 (  0.32%)    318.93
  frag            15389 (  0.10%)         16105719 (  0.16%)   1046.57
 ip6              17871 (  0.12%)          2888347 (  0.03%)    161.62
  tcp6             4325 (  0.03%)           757823 (  0.01%)    175.22
   http(s)          148 (  0.00%)           185437 (  0.00%)   1252.95
   http(c)          218 (  0.00%)            26144 (  0.00%)    119.93
   smtp             283 (  0.00%)            94054 (  0.00%)    332.35
   ftp               25 (  0.00%)             2189 (  0.00%)     87.56
   ssh                1 (  0.00%)               74 (  0.00%)     74.00
   dns                5 (  0.00%)              633 (  0.00%)    126.60
   bgp               83 (  0.00%)            10485 (  0.00%)    126.33
   other           3562 (  0.02%)           438807 (  0.00%)    123.19
  udp6             8207 (  0.05%)          1497418 (  0.02%)    182.46
   dns             8003 (  0.05%)          1471279 (  0.01%)    183.84
   everque            1 (  0.00%)              139 (  0.00%)    139.00
   other            203 (  0.00%)            26000 (  0.00%)    128.08
  icmp6            5307 (  0.04%)           626779 (  0.01%)    118.10
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              2 (  0.00%)             2247 (  0.00%)   1123.50


tcpdump file: 200802021400.dump.gz (369.88 MB)