Traffic Trace Info


DumpFile: 200803151400.dump
FileSize: 942.06MB
Id: 200803151400
StartTime: Sat Mar 15 14:00:00 2008
EndTime: Sat Mar 15 14:15:00 2008
TotalTime: 900.44 seconds
TotalCapSize: 736.49MB CapLen: 96 bytes
# of packets: 13471608 (8852.38MB)
AvgRate: 82.46Mbps stddev:15.39M

IP flow (unique src/dst pair) Information

# of flows: 560223 (avg. 24.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.5% 3.8% 2.2% 1.8% 1.1% 1.0% 1.0% 0.9% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 288399
Top 10 bandwidth usage (bytes/total in %):
19.9% 13.8% 8.0% 4.8% 3.9% 3.9% 3.1% 3.0% 2.9% 2.6%
# of IPv6 addresses: 1583
Top 10 bandwidth usage (bytes/total in %):
67.9% 55.0% 12.9% 3.2% 1.9% 1.9% 1.7% 1.7% 1.7% 1.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3015298
 [   64-  127]:    3205855
 [  128-  255]:     770504
 [  256-  511]:     585916
 [  512- 1023]:     254996
 [ 1024- 2047]:    5639039


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         13471608 (100.00%)       9282388192 (100.00%)    689.03
 ip            13444634 ( 99.80%)       9270794653 ( 99.88%)    689.55
  tcp          11180925 ( 83.00%)       8695737293 ( 93.68%)    777.73
   http(s)      3238160 ( 24.04%)       4312604687 ( 46.46%)   1331.81
   http(c)      2073505 ( 15.39%)        194931508 (  2.10%)     94.01
   squid         559896 (  4.16%)        433873913 (  4.67%)    774.92
   smtp          511997 (  3.80%)         97815461 (  1.05%)    191.05
   ftp            98928 (  0.73%)         10927757 (  0.12%)    110.46
   pop3            7884 (  0.06%)          6103313 (  0.07%)    774.14
   imap            4659 (  0.03%)          2296535 (  0.02%)    492.92
   telnet           184 (  0.00%)            11786 (  0.00%)     64.05
   ssh           450359 (  3.34%)        371560267 (  4.00%)    825.03
   dns             2583 (  0.02%)           210731 (  0.00%)     81.58
   bgp              185 (  0.00%)            46469 (  0.00%)    251.18
   napster           11 (  0.00%)             1208 (  0.00%)    109.82
   realaud           46 (  0.00%)             5910 (  0.00%)    128.48
   rtsp           95884 (  0.71%)         98724497 (  1.06%)   1029.62
   icecast         4227 (  0.03%)          5034509 (  0.05%)   1191.04
   other        4132415 ( 30.67%)       3161588622 ( 34.06%)    765.07
  udp           1893501 ( 14.06%)        537923474 (  5.80%)    284.09
   dns           900331 (  6.68%)        135115295 (  1.46%)    150.07
   realaud         1776 (  0.01%)           107017 (  0.00%)     60.26
   halflif            1 (  0.00%)               71 (  0.00%)     71.00
   starcra           10 (  0.00%)             2336 (  0.00%)    233.60
   everque            7 (  0.00%)              816 (  0.00%)    116.57
   unreal             6 (  0.00%)             1374 (  0.00%)    229.00
   quake             30 (  0.00%)             3581 (  0.00%)    119.37
   cuseeme            1 (  0.00%)               72 (  0.00%)     72.00
   other         991013 (  7.36%)        402606092 (  4.34%)    406.26
  icmp           357745 (  2.66%)         34971757 (  0.38%)     97.76
  ipip              345 (  0.00%)            45106 (  0.00%)    130.74
  ip6               865 (  0.01%)           122066 (  0.00%)    141.12
  other           11253 (  0.08%)          1994957 (  0.02%)    177.28
  frag            14989 (  0.11%)         14318962 (  0.15%)    955.30
 ip6              26974 (  0.20%)         11593539 (  0.12%)    429.80
  tcp6            10334 (  0.08%)          8333111 (  0.09%)    806.38
   http(s)           43 (  0.00%)            56840 (  0.00%)   1321.86
   http(c)         1258 (  0.01%)           121537 (  0.00%)     96.61
   smtp             223 (  0.00%)            52509 (  0.00%)    235.47
   ftp             1000 (  0.01%)           115779 (  0.00%)    115.78
   pop3              98 (  0.00%)             9923 (  0.00%)    101.26
   bgp              101 (  0.00%)            14195 (  0.00%)    140.54
   other           7611 (  0.06%)          7962328 (  0.09%)   1046.16
  udp6            11598 (  0.09%)          2544167 (  0.03%)    219.36
   dns            10211 (  0.08%)          2148628 (  0.02%)    210.42
   halflif            2 (  0.00%)              255 (  0.00%)    127.50
   other           1385 (  0.01%)           395284 (  0.00%)    285.40
  icmp6            5006 (  0.04%)           706555 (  0.01%)    141.14
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              6 (  0.00%)             5626 (  0.00%)    937.67


tcpdump file: 200803151400.dump.gz (326.32 MB)