Traffic Trace Info


DumpFile: 200802101400.dump
FileSize: 783.19MB
Id: 200802101400
StartTime: Sun Feb 10 14:00:00 2008
EndTime: Sun Feb 10 14:15:01 2008
TotalTime: 900.70 seconds
TotalCapSize: 608.36MB CapLen: 96 bytes
# of packets: 11456842 (7361.50MB)
AvgRate: 68.57Mbps stddev:15.80M

IP flow (unique src/dst pair) Information

# of flows: 475491 (avg. 24.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.7% 1.7% 1.4% 1.4% 1.4% 1.2% 1.0% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 275074
Top 10 bandwidth usage (bytes/total in %):
8.9% 8.3% 7.6% 6.7% 6.1% 3.9% 3.2% 2.9% 2.5% 2.2%
# of IPv6 addresses: 622
Top 10 bandwidth usage (bytes/total in %):
14.3% 14.0% 9.7% 8.7% 8.1% 8.1% 5.8% 5.2% 5.1% 4.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2638561
 [   64-  127]:    3017653
 [  128-  255]:     423769
 [  256-  511]:     379730
 [  512- 1023]:     275669
 [ 1024- 2047]:    4721460


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         11456842 (100.00%)       7719092661 (100.00%)    673.75
 ip            11438422 ( 99.84%)       7716200651 ( 99.96%)    674.59
  tcp           8561199 ( 74.73%)       6679382077 ( 86.53%)    780.19
   http(s)      3605220 ( 31.47%)       4988853570 ( 64.63%)   1383.79
   http(c)      2238030 ( 19.53%)        179205361 (  2.32%)     80.07
   squid         660749 (  5.77%)        499323315 (  6.47%)    755.69
   smtp          443751 (  3.87%)         67578184 (  0.88%)    152.29
   nntp              15 (  0.00%)             1660 (  0.00%)    110.67
   ftp            23873 (  0.21%)          2080571 (  0.03%)     87.15
   pop3            4153 (  0.04%)          2267992 (  0.03%)    546.11
   imap            2249 (  0.02%)           417699 (  0.01%)    185.73
   telnet           787 (  0.01%)            64679 (  0.00%)     82.18
   ssh             2475 (  0.02%)           894445 (  0.01%)    361.39
   dns             1795 (  0.02%)           139706 (  0.00%)     77.83
   bgp              177 (  0.00%)            42153 (  0.00%)    238.15
   napster           39 (  0.00%)             2614 (  0.00%)     67.03
   realaud            9 (  0.00%)             1329 (  0.00%)    147.67
   rtsp            2841 (  0.02%)          2584468 (  0.03%)    909.70
   icecast        12414 (  0.11%)         15221315 (  0.20%)   1226.14
   hotline            5 (  0.00%)              507 (  0.00%)    101.40
   other        1562616 ( 13.64%)        920702449 ( 11.93%)    589.21
  udp           2487218 ( 21.71%)        999301870 ( 12.95%)    401.77
   dns           591216 (  5.16%)         88925567 (  1.15%)    150.41
   realaud          885 (  0.01%)            60714 (  0.00%)     68.60
   halflif           11 (  0.00%)             2822 (  0.00%)    256.55
   starcra           24 (  0.00%)             4232 (  0.00%)    176.33
   everque           24 (  0.00%)             3501 (  0.00%)    145.88
   unreal            28 (  0.00%)             5688 (  0.00%)    203.14
   quake              5 (  0.00%)             1015 (  0.00%)    203.00
   cuseeme            2 (  0.00%)              134 (  0.00%)     67.00
   other        1894962 ( 16.54%)        910278459 ( 11.79%)    480.37
  icmp           377026 (  3.29%)         35178519 (  0.46%)     93.31
  ipip              331 (  0.00%)            41491 (  0.00%)    125.35
  ip6               852 (  0.01%)           102636 (  0.00%)    120.46
  other           11796 (  0.10%)          2194058 (  0.03%)    186.00
  frag             2404 (  0.02%)          1906298 (  0.02%)    792.97
 ip6              18420 (  0.16%)          2892010 (  0.04%)    157.00
  tcp6             4180 (  0.04%)           558657 (  0.01%)    133.65
   http(s)           74 (  0.00%)            93447 (  0.00%)   1262.80
   http(c)           48 (  0.00%)             5192 (  0.00%)    108.17
   smtp             287 (  0.00%)            57539 (  0.00%)    200.48
   ssh                1 (  0.00%)               74 (  0.00%)     74.00
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp               78 (  0.00%)             9841 (  0.00%)    126.17
   other           3685 (  0.03%)           391929 (  0.01%)    106.36
  udp6             8135 (  0.07%)          1694392 (  0.02%)    208.28
   dns             8033 (  0.07%)          1681246 (  0.02%)    209.29
   other            102 (  0.00%)            13146 (  0.00%)    128.88
  icmp6            6075 (  0.05%)           634881 (  0.01%)    104.51
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200802101400.dump.gz (276.25 MB)