Traffic Trace Info


DumpFile: 200803031400.dump
FileSize: 1074.32MB
Id: 200803031400
StartTime: Mon Mar 3 14:00:00 2008
EndTime: Mon Mar 3 14:15:00 2008
TotalTime: 899.80 seconds
TotalCapSize: 842.50MB CapLen: 96 bytes
# of packets: 15192144 (9374.90MB)
AvgRate: 87.41Mbps stddev:10.42M

IP flow (unique src/dst pair) Information

# of flows: 631024 (avg. 24.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.6% 2.7% 2.2% 1.9% 1.4% 1.0% 1.0% 0.9% 0.8%

IP address Information

# of IPv4 addresses: 354120
Top 10 bandwidth usage (bytes/total in %):
11.2% 7.5% 5.7% 4.8% 4.8% 4.6% 4.0% 3.7% 3.6% 3.3%
# of IPv6 addresses: 786
Top 10 bandwidth usage (bytes/total in %):
14.5% 8.3% 8.0% 7.8% 7.4% 7.3% 5.5% 5.2% 5.0% 4.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3261237
 [   64-  127]:    4386819
 [  128-  255]:     739805
 [  256-  511]:     433069
 [  512- 1023]:     295587
 [ 1024- 2047]:    6075627


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         15192144 (100.00%)       9830296610 (100.00%)    647.06
 ip            15161907 ( 99.80%)       9825431928 ( 99.95%)    648.03
  tcp          12802692 ( 84.27%)       9263190520 ( 94.23%)    723.53
   http(s)      4354966 ( 28.67%)       5681707726 ( 57.80%)   1304.65
   http(c)      3153470 ( 20.76%)        369881040 (  3.76%)    117.29
   squid         675409 (  4.45%)        395624012 (  4.02%)    585.75
   smtp          684140 (  4.50%)        151594201 (  1.54%)    221.58
   nntp             210 (  0.00%)            14138 (  0.00%)     67.32
   ftp           247863 (  1.63%)         74453286 (  0.76%)    300.38
   pop3            3582 (  0.02%)          1180412 (  0.01%)    329.54
   imap            5417 (  0.04%)          1984072 (  0.02%)    366.27
   telnet           761 (  0.01%)            48601 (  0.00%)     63.86
   ssh           103430 (  0.68%)         10303596 (  0.10%)     99.62
   dns             1641 (  0.01%)           123832 (  0.00%)     75.46
   bgp              191 (  0.00%)            47460 (  0.00%)    248.48
   napster           38 (  0.00%)             6071 (  0.00%)    159.76
   realaud           24 (  0.00%)             3514 (  0.00%)    146.42
   rtsp          112062 (  0.74%)        126769342 (  1.29%)   1131.24
   icecast         4463 (  0.03%)           430207 (  0.00%)     96.39
   other        3455024 ( 22.74%)       2449018950 ( 24.91%)    708.83
  udp           2019207 ( 13.29%)        529241071 (  5.38%)    262.10
   dns           898406 (  5.91%)        133469477 (  1.36%)    148.56
   realaud         1765 (  0.01%)           106903 (  0.00%)     60.57
   halflif           19 (  0.00%)             3407 (  0.00%)    179.32
   starcra           25 (  0.00%)             5214 (  0.00%)    208.56
   everque           51 (  0.00%)             8567 (  0.00%)    167.98
   unreal            11 (  0.00%)             1424 (  0.00%)    129.45
   quake            184 (  0.00%)            15696 (  0.00%)     85.30
   cuseeme            7 (  0.00%)             1257 (  0.00%)    179.57
   other        1118717 (  7.36%)        395610634 (  4.02%)    353.63
  icmp           334575 (  2.20%)         32221371 (  0.33%)     96.31
  ipip              309 (  0.00%)            37374 (  0.00%)    120.95
  ip6               562 (  0.00%)            72192 (  0.00%)    128.46
  other            4562 (  0.03%)           669400 (  0.01%)    146.73
  frag             1542 (  0.01%)          1323206 (  0.01%)    858.11
 ip6              30237 (  0.20%)          4864682 (  0.05%)    160.89
  tcp6            11210 (  0.07%)          1338690 (  0.01%)    119.42
   http(s)            9 (  0.00%)             2709 (  0.00%)    301.00
   http(c)         5534 (  0.04%)           528580 (  0.01%)     95.51
   smtp             445 (  0.00%)           280598 (  0.00%)    630.56
   pop3              33 (  0.00%)             3042 (  0.00%)     92.18
   imap              30 (  0.00%)             3552 (  0.00%)    118.40
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp               61 (  0.00%)             6323 (  0.00%)    103.66
   other           5091 (  0.03%)           513251 (  0.01%)    100.82
  udp6            14110 (  0.09%)          2876886 (  0.03%)    203.89
   dns            14081 (  0.09%)          2873696 (  0.03%)    204.08
   other             29 (  0.00%)             3190 (  0.00%)    110.00
  icmp6            4887 (  0.03%)           645026 (  0.01%)    131.99
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200803031400.dump.gz (387.44 MB)