Traffic Trace Info


DumpFile: 200804091400.dump
FileSize: 1785.97MB
Id: 200804091400
StartTime: Wed Apr 9 14:00:00 2008
EndTime: Wed Apr 9 14:15:01 2008
TotalTime: 900.51 seconds
TotalCapSize: 1393.01MB CapLen: 96 bytes
# of packets: 25752490 (17205.67MB)
AvgRate: 160.28Mbps stddev:24.33M

IP flow (unique src/dst pair) Information

# of flows: 772298 (avg. 33.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.3% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 370165
Top 10 bandwidth usage (bytes/total in %):
4.9% 4.0% 3.2% 2.9% 2.8% 2.5% 2.5% 2.4% 2.3% 2.2%
# of IPv6 addresses: 1628
Top 10 bandwidth usage (bytes/total in %):
10.5% 9.9% 9.2% 8.3% 7.7% 5.6% 5.2% 4.9% 4.7% 4.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5119306
 [   64-  127]:    6737602
 [  128-  255]:    1132525
 [  256-  511]:     756939
 [  512- 1023]:     979301
 [ 1024- 2047]:   11026817


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         25752490 (100.00%)      18041451802 (100.00%)    700.57
 ip            25724015 ( 99.89%)      18036388039 ( 99.97%)    701.15
  tcp          21071167 ( 81.82%)      16713966423 ( 92.64%)    793.22
   http(s)      9156578 ( 35.56%)      11709455667 ( 64.90%)   1278.80
   http(c)      4649022 ( 18.05%)        533075998 (  2.95%)    114.66
   squid         488582 (  1.90%)        291040535 (  1.61%)    595.68
   smtp          966129 (  3.75%)        220583198 (  1.22%)    228.32
   ftp            71409 (  0.28%)         12411248 (  0.07%)    173.81
   pop3           48941 (  0.19%)         40046194 (  0.22%)    818.25
   imap           10970 (  0.04%)          3377156 (  0.02%)    307.85
   telnet          2203 (  0.01%)           657586 (  0.00%)    298.50
   ssh          1283665 (  4.98%)        690389932 (  3.83%)    537.83
   dns            10574 (  0.04%)           945326 (  0.01%)     89.40
   bgp              190 (  0.00%)            51274 (  0.00%)    269.86
   napster           72 (  0.00%)            33707 (  0.00%)    468.15
   realaud           25 (  0.00%)             3474 (  0.00%)    138.96
   rtsp          817876 (  3.18%)        908763853 (  5.04%)   1111.13
   icecast        18748 (  0.07%)         26362684 (  0.15%)   1406.16
   hotline            3 (  0.00%)              222 (  0.00%)     74.00
   other        3546178 ( 13.77%)       2276768249 ( 12.62%)    642.03
  udp           3886569 ( 15.09%)       1243147408 (  6.89%)    319.86
   dns          1451385 (  5.64%)        202824837 (  1.12%)    139.75
   realaud         7421 (  0.03%)          4038234 (  0.02%)    544.16
   halflif           27 (  0.00%)             3403 (  0.00%)    126.04
   starcra           43 (  0.00%)             7722 (  0.00%)    179.58
   everque         9985 (  0.04%)          1222014 (  0.01%)    122.38
   unreal            20 (  0.00%)             3420 (  0.00%)    171.00
   quake             25 (  0.00%)             3231 (  0.00%)    129.24
   cuseeme            3 (  0.00%)              252 (  0.00%)     84.00
   other        2417604 (  9.39%)       1035000719 (  5.74%)    428.11
  icmp           685458 (  2.66%)         63856865 (  0.35%)     93.16
  ipip              318 (  0.00%)            38816 (  0.00%)    122.06
  ipsec            3558 (  0.01%)           791348 (  0.00%)    222.41
  ip6               713 (  0.00%)            92999 (  0.00%)    130.43
  other           76232 (  0.30%)         14494180 (  0.08%)    190.13
  frag             1952 (  0.01%)          1689327 (  0.01%)    865.43
 ip6              28475 (  0.11%)          5063763 (  0.03%)    177.83
  tcp6             4314 (  0.02%)           680379 (  0.00%)    157.71
   http(s)          174 (  0.00%)           159957 (  0.00%)    919.29
   http(c)         2744 (  0.01%)           324450 (  0.00%)    118.24
   smtp             169 (  0.00%)            48229 (  0.00%)    285.38
   ftp               82 (  0.00%)             9629 (  0.00%)    117.43
   pop3              35 (  0.00%)             3232 (  0.00%)     92.34
   ssh                2 (  0.00%)              172 (  0.00%)     86.00
   bgp               61 (  0.00%)             6323 (  0.00%)    103.66
   other           1047 (  0.00%)           128387 (  0.00%)    122.62
  udp6            17690 (  0.07%)          3575312 (  0.02%)    202.11
   dns            15983 (  0.06%)          3137334 (  0.02%)    196.29
   starcra            1 (  0.00%)              116 (  0.00%)    116.00
   other           1706 (  0.01%)           437862 (  0.00%)    256.66
  icmp6            6434 (  0.02%)           798206 (  0.00%)    124.06
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6              6 (  0.00%)             5650 (  0.00%)    941.67


tcpdump file: 200804091400.dump.gz (643.36 MB)