Traffic Trace Info


DumpFile: 200802231400.dump
FileSize: 951.24MB
Id: 200802231400
StartTime: Sat Feb 23 14:00:01 2008
EndTime: Sat Feb 23 14:15:00 2008
TotalTime: 899.82 seconds
TotalCapSize: 736.08MB CapLen: 96 bytes
# of packets: 14100053 (8023.25MB)
AvgRate: 74.77Mbps stddev:19.96M

IP flow (unique src/dst pair) Information

# of flows: 568161 (avg. 24.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.2% 1.2% 1.1% 0.9% 0.9% 0.9% 0.9% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 313598
Top 10 bandwidth usage (bytes/total in %):
8.8% 4.9% 4.7% 4.4% 3.8% 3.8% 2.8% 2.8% 2.6% 2.6%
# of IPv6 addresses: 712
Top 10 bandwidth usage (bytes/total in %):
24.2% 9.7% 8.4% 6.6% 6.6% 6.2% 5.7% 5.2% 4.9% 4.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3767023
 [   64-  127]:    3775155
 [  128-  255]:     652149
 [  256-  511]:     543824
 [  512- 1023]:     311690
 [ 1024- 2047]:    5050212


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         14100053 (100.00%)       8412986038 (100.00%)    596.66
 ip            14076810 ( 99.84%)       8409321447 ( 99.96%)    597.39
  tcp          10039549 ( 71.20%)       6696408544 ( 79.60%)    667.00
   http(s)      3627358 ( 25.73%)       4826782115 ( 57.37%)   1330.66
   http(c)      2671990 ( 18.95%)        389210380 (  4.63%)    145.66
   squid         607650 (  4.31%)        483313061 (  5.74%)    795.38
   smtp          525420 (  3.73%)         92507268 (  1.10%)    176.06
   ftp            80794 (  0.57%)         41072707 (  0.49%)    508.36
   pop3            3611 (  0.03%)          1440849 (  0.02%)    399.02
   imap            4851 (  0.03%)          1738660 (  0.02%)    358.41
   telnet           113 (  0.00%)            14843 (  0.00%)    131.35
   ssh             6343 (  0.04%)          1297751 (  0.02%)    204.60
   dns             2391 (  0.02%)           189310 (  0.00%)     79.18
   bgp              184 (  0.00%)            46611 (  0.00%)    253.32
   napster           98 (  0.00%)            58124 (  0.00%)    593.10
   realaud           27 (  0.00%)             3230 (  0.00%)    119.63
   rtsp            4718 (  0.03%)          2202525 (  0.03%)    466.83
   icecast        31110 (  0.22%)         27069537 (  0.32%)    870.12
   other        2472890 ( 17.54%)        829461513 (  9.86%)    335.42
  udp           3594638 ( 25.49%)       1664272622 ( 19.78%)    462.99
   dns           805465 (  5.71%)        119251521 (  1.42%)    148.05
   realaud          938 (  0.01%)            59700 (  0.00%)     63.65
   halflif           24 (  0.00%)             2961 (  0.00%)    123.38
   starcra           40 (  0.00%)             8646 (  0.00%)    216.15
   everque           46 (  0.00%)             8309 (  0.00%)    180.63
   unreal            22 (  0.00%)             4041 (  0.00%)    183.68
   quake             17 (  0.00%)             1738 (  0.00%)    102.24
   cuseeme            5 (  0.00%)              564 (  0.00%)    112.80
   other        2788057 ( 19.77%)       1544928080 ( 18.36%)    554.12
  icmp           365778 (  2.59%)         35206738 (  0.42%)     96.25
  ipip              361 (  0.00%)            44699 (  0.00%)    123.82
  ip6               842 (  0.01%)           104931 (  0.00%)    124.62
  other           75642 (  0.54%)         13283913 (  0.16%)    175.62
  frag             1562 (  0.01%)          1324746 (  0.02%)    848.11
 ip6              23243 (  0.16%)          3664591 (  0.04%)    157.66
  tcp6             7639 (  0.05%)           922423 (  0.01%)    120.75
   http(s)          228 (  0.00%)           153794 (  0.00%)    674.54
   http(c)         5335 (  0.04%)           503927 (  0.01%)     94.46
   smtp             146 (  0.00%)            39097 (  0.00%)    267.79
   ftp               15 (  0.00%)             1440 (  0.00%)     96.00
   pop3              16 (  0.00%)             1853 (  0.00%)    115.81
   bgp               71 (  0.00%)             8622 (  0.00%)    121.44
   other           1828 (  0.01%)           213690 (  0.00%)    116.90
  udp6            10017 (  0.07%)          2065541 (  0.02%)    206.20
   dns             9840 (  0.07%)          2042044 (  0.02%)    207.52
   other            177 (  0.00%)            23497 (  0.00%)    132.75
  icmp6            5554 (  0.04%)           670363 (  0.01%)    120.70
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              3 (  0.00%)             2184 (  0.00%)    728.00


tcpdump file: 200802231400.dump.gz (335.65 MB)