Traffic Trace Info


DumpFile: 200803111400.dump
FileSize: 982.47MB
Id: 200803111400
StartTime: Tue Mar 11 14:00:01 2008
EndTime: Tue Mar 11 14:15:00 2008
TotalTime: 899.13 seconds
TotalCapSize: 769.65MB CapLen: 96 bytes
# of packets: 13946560 (8989.90MB)
AvgRate: 83.88Mbps stddev:25.37M

IP flow (unique src/dst pair) Information

# of flows: 616766 (avg. 22.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.5% 6.5% 4.3% 2.9% 2.6% 1.7% 1.6% 1.5% 1.4% 1.0%

IP address Information

# of IPv4 addresses: 340740
Top 10 bandwidth usage (bytes/total in %):
15.5% 11.6% 9.5% 7.4% 4.4% 3.9% 3.5% 3.5% 3.4% 3.4%
# of IPv6 addresses: 1472
Top 10 bandwidth usage (bytes/total in %):
55.4% 53.3% 13.5% 13.5% 2.8% 2.5% 2.4% 2.3% 1.7% 1.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3060231
 [   64-  127]:    3638023
 [  128-  255]:     728975
 [  256-  511]:     545929
 [  512- 1023]:     325728
 [ 1024- 2047]:    5647674


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         13946560 (100.00%)       9426596437 (100.00%)    675.91
 ip            13894303 ( 99.63%)       9412338817 ( 99.85%)    677.42
  tcp          11682305 ( 83.76%)       8954518810 ( 94.99%)    766.50
   http(s)      4182276 ( 29.99%)       5482916880 ( 58.16%)   1310.99
   http(c)      2661685 ( 19.08%)        389643528 (  4.13%)    146.39
   squid         637530 (  4.57%)        343732186 (  3.65%)    539.16
   smtp          591763 (  4.24%)        116691805 (  1.24%)    197.19
   nntp               9 (  0.00%)              558 (  0.00%)     62.00
   ftp            39375 (  0.28%)          3925553 (  0.04%)     99.70
   pop3           11179 (  0.08%)          9730206 (  0.10%)    870.40
   imap            6703 (  0.05%)          2995518 (  0.03%)    446.89
   telnet           756 (  0.01%)            61158 (  0.00%)     80.90
   ssh            18031 (  0.13%)          3793277 (  0.04%)    210.38
   dns             2637 (  0.02%)           218731 (  0.00%)     82.95
   bgp              190 (  0.00%)            62734 (  0.00%)    330.18
   napster           10 (  0.00%)             2124 (  0.00%)    212.40
   realaud          619 (  0.00%)           576115 (  0.01%)    930.72
   rtsp           30051 (  0.22%)         11144413 (  0.12%)    370.85
   icecast        15217 (  0.11%)          8620605 (  0.09%)    566.51
   hotline           28 (  0.00%)             5045 (  0.00%)    180.18
   other        3484235 ( 24.98%)       2580397714 ( 27.37%)    740.59
  udp           1727681 ( 12.39%)        379406171 (  4.02%)    219.60
   dns          1023666 (  7.34%)        154974889 (  1.64%)    151.39
   realaud        61229 (  0.44%)         27194268 (  0.29%)    444.14
   halflif            8 (  0.00%)             1257 (  0.00%)    157.12
   starcra           45 (  0.00%)             6397 (  0.00%)    142.16
   everque           33 (  0.00%)             3973 (  0.00%)    120.39
   unreal             3 (  0.00%)              553 (  0.00%)    184.33
   quake              6 (  0.00%)              792 (  0.00%)    132.00
   cuseeme            6 (  0.00%)              504 (  0.00%)     84.00
   other         642642 (  4.61%)        197189086 (  2.09%)    306.84
  icmp           302579 (  2.17%)         29893234 (  0.32%)     98.79
  ipip              432 (  0.00%)            58540 (  0.00%)    135.51
  ip6               810 (  0.01%)           108965 (  0.00%)    134.52
  other          180496 (  1.29%)         48353097 (  0.51%)    267.89
  frag            12714 (  0.09%)         12019487 (  0.13%)    945.37
 ip6              52257 (  0.37%)         14257620 (  0.15%)    272.84
  tcp6            26775 (  0.19%)          2869926 (  0.03%)    107.19
   http(s)          307 (  0.00%)           384885 (  0.00%)   1253.70
   http(c)         1403 (  0.01%)           138059 (  0.00%)     98.40
   smtp             284 (  0.00%)           126212 (  0.00%)    444.41
   pop3              34 (  0.00%)             3128 (  0.00%)     92.00
   bgp               69 (  0.00%)             7501 (  0.00%)    108.71
   other          24678 (  0.18%)          2210141 (  0.02%)     89.56
  udp6            14610 (  0.10%)          3177224 (  0.03%)    217.47
   dns            13357 (  0.10%)          2854913 (  0.03%)    213.74
   other           1253 (  0.01%)           322311 (  0.00%)    257.23
  icmp6            4547 (  0.03%)           614444 (  0.01%)    135.13
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           6295 (  0.05%)          7591946 (  0.08%)   1206.03


tcpdump file: 200803111400.dump.gz (347.60 MB)