Traffic Trace Info


DumpFile: 200802131400.dump
FileSize: 1326.20MB
Id: 200802131400
StartTime: Wed Feb 13 14:00:00 2008
EndTime: Wed Feb 13 14:15:00 2008
TotalTime: 900.37 seconds
TotalCapSize: 1038.35MB CapLen: 96 bytes
# of packets: 18863535 (13456.20MB)
AvgRate: 125.35Mbps stddev:27.66M

IP flow (unique src/dst pair) Information

# of flows: 622160 (avg. 30.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.9% 2.7% 1.6% 1.4% 1.1% 1.1% 1.1% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 338879
Top 10 bandwidth usage (bytes/total in %):
5.5% 5.1% 4.3% 4.2% 4.0% 3.7% 3.6% 3.3% 3.0% 2.9%
# of IPv6 addresses: 1060
Top 10 bandwidth usage (bytes/total in %):
54.5% 54.5% 13.7% 13.7% 10.9% 10.7% 1.9% 1.7% 1.7% 1.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4215404
 [   64-  127]:    4172961
 [  128-  255]:     800101
 [  256-  511]:     498492
 [  512- 1023]:     453586
 [ 1024- 2047]:    8722991


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         18863535 (100.00%)      14109853366 (100.00%)    748.00
 ip            18709021 ( 99.18%)      14095007205 ( 99.89%)    753.38
  tcp          15950628 ( 84.56%)      13149493209 ( 93.19%)    824.39
   http(s)      7498699 ( 39.75%)      10129443415 ( 71.79%)   1350.83
   http(c)      4417906 ( 23.42%)        595329429 (  4.22%)    134.75
   squid         691074 (  3.66%)        554315977 (  3.93%)    802.11
   smtp          494910 (  2.62%)        100047035 (  0.71%)    202.15
   nntp            2432 (  0.01%)          1236309 (  0.01%)    508.35
   ftp            71999 (  0.38%)         56295721 (  0.40%)    781.90
   pop3            5819 (  0.03%)          2394937 (  0.02%)    411.57
   imap            6105 (  0.03%)           861980 (  0.01%)    141.19
   telnet            94 (  0.00%)            10482 (  0.00%)    111.51
   ssh            12342 (  0.07%)          2343582 (  0.02%)    189.89
   dns             2531 (  0.01%)           193988 (  0.00%)     76.64
   bgp              201 (  0.00%)            56949 (  0.00%)    283.33
   napster           11 (  0.00%)             1887 (  0.00%)    171.55
   realaud          127 (  0.00%)            11798 (  0.00%)     92.90
   rtsp           18792 (  0.10%)          6252948 (  0.04%)    332.75
   icecast        27025 (  0.14%)         21394227 (  0.15%)    791.65
   other        2700559 ( 14.32%)       1679302425 ( 11.90%)    621.84
  udp           2186738 ( 11.59%)        877613240 (  6.22%)    401.33
   dns           819802 (  4.35%)        126675476 (  0.90%)    154.52
   realaud            9 (  0.00%)             1023 (  0.00%)    113.67
   halflif           18 (  0.00%)             2069 (  0.00%)    114.94
   starcra           26 (  0.00%)             5695 (  0.00%)    219.04
   everque           60 (  0.00%)             9027 (  0.00%)    150.45
   unreal            19 (  0.00%)             1672 (  0.00%)     88.00
   quake             12 (  0.00%)             3080 (  0.00%)    256.67
   cuseeme            6 (  0.00%)             1895 (  0.00%)    315.83
   other        1366762 (  7.25%)        750889072 (  5.32%)    549.39
  icmp           390606 (  2.07%)         33901934 (  0.24%)     86.79
  ipip              338 (  0.00%)            42612 (  0.00%)    126.07
  ip6              1002 (  0.01%)           137291 (  0.00%)    137.02
  other          179709 (  0.95%)         33818919 (  0.24%)    188.19
  frag             1225 (  0.01%)          1044135 (  0.01%)    852.36
 ip6             154514 (  0.82%)         14846161 (  0.11%)     96.08
  tcp6           140441 (  0.74%)         12179896 (  0.09%)     86.73
   http(s)           38 (  0.00%)            28166 (  0.00%)    741.21
   http(c)       110508 (  0.59%)          8199109 (  0.06%)     74.19
   smtp            1506 (  0.01%)          1708690 (  0.01%)   1134.59
   ftp               72 (  0.00%)             6590 (  0.00%)     91.53
   bgp               60 (  0.00%)             6210 (  0.00%)    103.50
   other          28257 (  0.15%)          2231131 (  0.02%)     78.96
  udp6             9878 (  0.05%)          2157384 (  0.02%)    218.40
   dns             9183 (  0.05%)          1898523 (  0.01%)    206.74
   other            695 (  0.00%)           258861 (  0.00%)    372.46
  icmp6            4164 (  0.02%)           504665 (  0.00%)    121.20
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00


tcpdump file: 200802131400.dump.gz (458.06 MB)