Traffic Trace Info


DumpFile: 200802171400.dump
FileSize: 716.81MB
Id: 200802171400
StartTime: Sun Feb 17 14:00:00 2008
EndTime: Sun Feb 17 14:15:00 2008
TotalTime: 899.68 seconds
TotalCapSize: 560.47MB CapLen: 96 bytes
# of packets: 10245189 (6629.45MB)
AvgRate: 61.82Mbps stddev:8.99M

IP flow (unique src/dst pair) Information

# of flows: 568729 (avg. 18.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.1% 2.8% 2.3% 2.2% 1.3% 1.3% 1.2% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 329939
Top 10 bandwidth usage (bytes/total in %):
15.0% 6.9% 6.4% 6.0% 5.8% 5.8% 4.2% 3.9% 3.2% 2.9%
# of IPv6 addresses: 591
Top 10 bandwidth usage (bytes/total in %):
39.4% 39.4% 13.0% 9.4% 7.3% 7.3% 4.9% 4.9% 4.2% 3.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2224104
 [   64-  127]:    2659536
 [  128-  255]:     499599
 [  256-  511]:     397439
 [  512- 1023]:     266058
 [ 1024- 2047]:    4198453


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         10245189 (100.00%)       6951484828 (100.00%)    678.51
 ip            10225034 ( 99.80%)       6946725463 ( 99.93%)    679.38
  tcp           8057558 ( 78.65%)       6269269255 ( 90.19%)    778.06
   http(s)      2936996 ( 28.67%)       3900409549 ( 56.11%)   1328.03
   http(c)      1569923 ( 15.32%)        159255960 (  2.29%)    101.44
   squid         624585 (  6.10%)        406454573 (  5.85%)    650.76
   smtp          412654 (  4.03%)         68722528 (  0.99%)    166.54
   nntp            2486 (  0.02%)          1329626 (  0.02%)    534.85
   ftp            73047 (  0.71%)         31736814 (  0.46%)    434.47
   pop3            3136 (  0.03%)           928629 (  0.01%)    296.12
   imap            3640 (  0.04%)           994679 (  0.01%)    273.26
   telnet            73 (  0.00%)             4650 (  0.00%)     63.70
   ssh            17040 (  0.17%)          4224600 (  0.06%)    247.92
   dns             1817 (  0.02%)           135710 (  0.00%)     74.69
   bgp              188 (  0.00%)            51392 (  0.00%)    273.36
   napster          228 (  0.00%)            28189 (  0.00%)    123.64
   realaud           24 (  0.00%)             3526 (  0.00%)    146.92
   rtsp           37832 (  0.37%)          3574149 (  0.05%)     94.47
   icecast          200 (  0.00%)            18757 (  0.00%)     93.78
   hotline           21 (  0.00%)             3150 (  0.00%)    150.00
   other        2373660 ( 23.17%)       1691392294 ( 24.33%)    712.57
  udp           1776008 ( 17.34%)        640982438 (  9.22%)    360.91
   dns           697311 (  6.81%)        103999283 (  1.50%)    149.14
   realaud         1885 (  0.02%)           117443 (  0.00%)     62.30
   halflif           17 (  0.00%)             3996 (  0.00%)    235.06
   starcra           29 (  0.00%)             5568 (  0.00%)    192.00
   everque           34 (  0.00%)             5132 (  0.00%)    150.94
   unreal             9 (  0.00%)             2168 (  0.00%)    240.89
   quake              4 (  0.00%)              327 (  0.00%)     81.75
   cuseeme           12 (  0.00%)              792 (  0.00%)     66.00
   other        1076609 ( 10.51%)        536722315 (  7.72%)    498.53
  icmp           388646 (  3.79%)         36051954 (  0.52%)     92.76
  ipip              362 (  0.00%)            46896 (  0.00%)    129.55
  ip6               834 (  0.01%)           102070 (  0.00%)    122.39
  other            1626 (  0.02%)           272850 (  0.00%)    167.80
  frag             1315 (  0.01%)          1207020 (  0.02%)    917.89
 ip6              20153 (  0.20%)          4759245 (  0.07%)    236.16
  tcp6             2265 (  0.02%)          1989338 (  0.03%)    878.29
   http(s)         1274 (  0.01%)          1873318 (  0.03%)   1470.42
   http(c)          123 (  0.00%)            14873 (  0.00%)    120.92
   smtp             150 (  0.00%)            31180 (  0.00%)    207.87
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp               73 (  0.00%)             8116 (  0.00%)    111.18
   other            638 (  0.01%)            61216 (  0.00%)     95.95
  udp6            12797 (  0.12%)          2201060 (  0.03%)    172.00
   dns            12739 (  0.12%)          2195745 (  0.03%)    172.36
   other             58 (  0.00%)             5315 (  0.00%)     91.64
  icmp6            5061 (  0.05%)           564767 (  0.01%)    111.59
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200802171400.dump.gz (250.66 MB)