Traffic Trace Info


DumpFile: 200803021400.dump
FileSize: 653.40MB
Id: 200803021400
StartTime: Sun Mar 2 14:00:00 2008
EndTime: Sun Mar 2 14:15:00 2008
TotalTime: 899.39 seconds
TotalCapSize: 510.71MB CapLen: 96 bytes
# of packets: 9351034 (5873.98MB)
AvgRate: 54.79Mbps stddev:9.74M

IP flow (unique src/dst pair) Information

# of flows: 658215 (avg. 14.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 2.6% 1.6% 1.5% 1.4% 1.3% 1.2% 1.1% 1.1% 1.0%

IP address Information

# of IPv4 addresses: 428920
Top 10 bandwidth usage (bytes/total in %):
12.3% 11.7% 6.1% 5.9% 5.3% 3.8% 2.6% 2.6% 2.5% 2.2%
# of IPv6 addresses: 750
Top 10 bandwidth usage (bytes/total in %):
18.1% 9.4% 7.1% 6.8% 6.5% 5.4% 5.4% 4.9% 4.8% 4.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2171854
 [   64-  127]:    2430138
 [  128-  255]:     490532
 [  256-  511]:     400515
 [  512- 1023]:     159544
 [ 1024- 2047]:    3698451


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total          9351034 (100.00%)       6159318924 (100.00%)    658.68
 ip             9324836 ( 99.72%)       6155137096 ( 99.93%)    660.08
  tcp           7551794 ( 80.76%)       5721130359 ( 92.89%)    757.59
   http(s)      2412272 ( 25.80%)       3207289585 ( 52.07%)   1329.57
   http(c)      1446683 ( 15.47%)        131480892 (  2.13%)     90.88
   squid         615027 (  6.58%)        454348791 (  7.38%)    738.75
   smtp          427594 (  4.57%)         61882989 (  1.00%)    144.72
   nntp             127 (  0.00%)             8058 (  0.00%)     63.45
   ftp           206466 (  2.21%)        154757512 (  2.51%)    749.55
   pop3            2645 (  0.03%)           773750 (  0.01%)    292.53
   imap            2774 (  0.03%)          1138765 (  0.02%)    410.51
   telnet           742 (  0.01%)            49001 (  0.00%)     66.04
   ssh            80012 (  0.86%)          9415720 (  0.15%)    117.68
   dns             1466 (  0.02%)           114573 (  0.00%)     78.15
   bgp              170 (  0.00%)            34554 (  0.00%)    203.26
   napster          141 (  0.00%)            88834 (  0.00%)    630.03
   realaud           19 (  0.00%)             1581 (  0.00%)     83.21
   rtsp           93203 (  1.00%)         91803697 (  1.49%)    984.99
   icecast          229 (  0.00%)            17540 (  0.00%)     76.59
   hotline           10 (  0.00%)             1494 (  0.00%)    149.40
   other        2262212 ( 24.19%)       1607922903 ( 26.11%)    710.77
  udp           1451782 ( 15.53%)        401629591 (  6.52%)    276.65
   dns           728970 (  7.80%)        106626205 (  1.73%)    146.27
   realaud         1785 (  0.02%)           108632 (  0.00%)     60.86
   halflif           14 (  0.00%)             3459 (  0.00%)    247.07
   starcra           40 (  0.00%)             7996 (  0.00%)    199.90
   everque           43 (  0.00%)             7899 (  0.00%)    183.70
   unreal            15 (  0.00%)             2741 (  0.00%)    182.73
   quake              8 (  0.00%)              696 (  0.00%)     87.00
   cuseeme            4 (  0.00%)              609 (  0.00%)    152.25
   other         720887 (  7.71%)        294861050 (  4.79%)    409.03
  icmp           311120 (  3.33%)         30825839 (  0.50%)     99.08
  ipip              325 (  0.00%)            39974 (  0.00%)    123.00
  ip6               762 (  0.01%)            94396 (  0.00%)    123.88
  other            9053 (  0.10%)          1416937 (  0.02%)    156.52
  frag            11887 (  0.13%)          9443441 (  0.15%)    794.43
 ip6              26198 (  0.28%)          4181828 (  0.07%)    159.62
  tcp6            10999 (  0.12%)          1513385 (  0.02%)    137.59
   http(s)          201 (  0.00%)           141071 (  0.00%)    701.85
   http(c)         4611 (  0.05%)           437216 (  0.01%)     94.82
   smtp            1003 (  0.01%)           390962 (  0.01%)    389.79
   pop3              49 (  0.00%)             4895 (  0.00%)     99.90
   bgp               74 (  0.00%)             8276 (  0.00%)    111.84
   other           5061 (  0.05%)           530965 (  0.01%)    104.91
  udp6             9917 (  0.11%)          1992535 (  0.03%)    200.92
   dns             9870 (  0.11%)          1987365 (  0.03%)    201.35
   other             47 (  0.00%)             5170 (  0.00%)    110.00
  icmp6            5252 (  0.06%)           671828 (  0.01%)    127.92
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200803021400.dump.gz (236.93 MB)