Traffic Trace Info


DumpFile: 200802191400.dump
FileSize: 1186.58MB
Id: 200802191400
StartTime: Tue Feb 19 14:00:01 2008
EndTime: Tue Feb 19 14:15:00 2008
TotalTime: 899.63 seconds
TotalCapSize: 925.64MB CapLen: 96 bytes
# of packets: 17100672 (10789.60MB)
AvgRate: 100.61Mbps stddev:18.80M

IP flow (unique src/dst pair) Information

# of flows: 829386 (avg. 20.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 1.7% 1.6% 1.4% 1.3% 1.2% 1.2% 1.0% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 487464
Top 10 bandwidth usage (bytes/total in %):
6.4% 6.4% 4.8% 4.3% 4.1% 4.1% 3.8% 3.0% 2.8% 2.7%
# of IPv6 addresses: 622
Top 10 bandwidth usage (bytes/total in %):
12.6% 12.6% 12.5% 10.6% 9.7% 6.5% 6.4% 6.4% 5.9% 5.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4242066
 [   64-  127]:    4027787
 [  128-  255]:     753654
 [  256-  511]:     803147
 [  512- 1023]:     447905
 [ 1024- 2047]:    6826113


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         17100672 (100.00%)      11313719678 (100.00%)    661.60
 ip            17075627 ( 99.85%)      11309977834 ( 99.97%)    662.35
  tcp          14049626 ( 82.16%)      10479044976 ( 92.62%)    745.86
   http(s)      5442811 ( 31.83%)       6899785977 ( 60.99%)   1267.69
   http(c)      3422639 ( 20.01%)        813219466 (  7.19%)    237.60
   squid         966860 (  5.65%)        565743187 (  5.00%)    585.13
   smtp          522090 (  3.05%)        100454080 (  0.89%)    192.41
   ftp            53055 (  0.31%)         21622210 (  0.19%)    407.54
   pop3            5946 (  0.03%)          2212618 (  0.02%)    372.12
   imap            4335 (  0.03%)          1381213 (  0.01%)    318.62
   telnet           773 (  0.00%)            49488 (  0.00%)     64.02
   ssh            23884 (  0.14%)          4106318 (  0.04%)    171.93
   dns             2379 (  0.01%)           178271 (  0.00%)     74.94
   bgp              193 (  0.00%)            55395 (  0.00%)    287.02
   napster          207 (  0.00%)            36314 (  0.00%)    175.43
   realaud         2084 (  0.01%)           981898 (  0.01%)    471.16
   rtsp          156599 (  0.92%)        121825252 (  1.08%)    777.94
   icecast        26155 (  0.15%)         18739314 (  0.17%)    716.47
   hotline          211 (  0.00%)            30767 (  0.00%)    145.82
   other        3419401 ( 20.00%)       1928622968 ( 17.05%)    564.02
  udp           2609190 ( 15.26%)        780819951 (  6.90%)    299.26
   dns           890641 (  5.21%)        142201557 (  1.26%)    159.66
   rip                2 (  0.00%)              132 (  0.00%)     66.00
   realaud          101 (  0.00%)            31272 (  0.00%)    309.62
   halflif           10 (  0.00%)             1342 (  0.00%)    134.20
   starcra          272 (  0.00%)            28564 (  0.00%)    105.01
   everque           51 (  0.00%)             8576 (  0.00%)    168.16
   unreal            14 (  0.00%)             2603 (  0.00%)    185.93
   quake             14 (  0.00%)             2451 (  0.00%)    175.07
   cuseeme           19 (  0.00%)             3681 (  0.00%)    193.74
   other        1718044 ( 10.05%)        638517238 (  5.64%)    371.65
  icmp           337961 (  1.98%)         33023632 (  0.29%)     97.71
  ipip              357 (  0.00%)            44414 (  0.00%)    124.41
  ip6               839 (  0.00%)           101525 (  0.00%)    121.01
  other           77654 (  0.45%)         16943336 (  0.15%)    218.19
  frag             2727 (  0.02%)          2214446 (  0.02%)    812.04
 ip6              25045 (  0.15%)          3741844 (  0.03%)    149.40
  tcp6             8505 (  0.05%)           908373 (  0.01%)    106.80
   http(c)         1958 (  0.01%)           191954 (  0.00%)     98.04
   smtp             141 (  0.00%)            64780 (  0.00%)    459.43
   ssh             4302 (  0.03%)           469440 (  0.00%)    109.12
   bgp               73 (  0.00%)             8152 (  0.00%)    111.67
   other           2031 (  0.01%)           174047 (  0.00%)     85.70
  udp6            12101 (  0.07%)          2289859 (  0.02%)    189.23
   dns            12074 (  0.07%)          2286889 (  0.02%)    189.41
   other             27 (  0.00%)             2970 (  0.00%)    110.00
  icmp6            4409 (  0.03%)           539532 (  0.00%)    122.37
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200802191400.dump.gz (422.43 MB)