Traffic Trace Info


DumpFile: 200804141400.dump
FileSize: 1610.03MB
Id: 200804141400
StartTime: Mon Apr 14 14:00:01 2008
EndTime: Mon Apr 14 14:15:01 2008
TotalTime: 900.05 seconds
TotalCapSize: 1261.14MB CapLen: 96 bytes
# of packets: 22864792 (14358.57MB)
AvgRate: 133.82Mbps stddev:20.05M

IP flow (unique src/dst pair) Information

# of flows: 728260 (avg. 31.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.6% 2.6% 2.0% 1.6% 1.1% 1.0% 1.0% 1.0% 0.8%

IP address Information

# of IPv4 addresses: 337432
Top 10 bandwidth usage (bytes/total in %):
6.9% 5.2% 4.4% 3.4% 2.9% 2.7% 2.7% 2.7% 2.7% 2.7%
# of IPv6 addresses: 1659
Top 10 bandwidth usage (bytes/total in %):
14.8% 8.8% 7.7% 7.6% 7.6% 6.0% 5.8% 5.7% 5.3% 5.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5097906
 [   64-  127]:    5735411
 [  128-  255]:    1278010
 [  256-  511]:     873953
 [  512- 1023]:     940352
 [ 1024- 2047]:    8939160


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         22864792 (100.00%)      15056054211 (100.00%)    658.48
 ip            22833111 ( 99.86%)      15049776722 ( 99.96%)    659.12
  tcp          19382944 ( 84.77%)      14238905706 ( 94.57%)    734.61
   http(s)      7609040 ( 33.28%)       9480085434 ( 62.97%)   1245.90
   http(c)      4551247 ( 19.91%)        682330885 (  4.53%)    149.92
   squid         845555 (  3.70%)        422339747 (  2.81%)    499.48
   smtp          861931 (  3.77%)        188475436 (  1.25%)    218.67
   ftp            59801 (  0.26%)         26165196 (  0.17%)    437.54
   pop3           14589 (  0.06%)          6830873 (  0.05%)    468.22
   imap           10548 (  0.05%)          6280081 (  0.04%)    595.38
   telnet          2639 (  0.01%)           387273 (  0.00%)    146.75
   ssh           962036 (  4.21%)        479440380 (  3.18%)    498.36
   dns            18488 (  0.08%)          2092713 (  0.01%)    113.19
   bgp              195 (  0.00%)            51762 (  0.00%)    265.45
   napster           39 (  0.00%)             4593 (  0.00%)    117.77
   realaud          108 (  0.00%)            19149 (  0.00%)    177.31
   rtsp          434430 (  1.90%)        415641875 (  2.76%)    956.75
   icecast        34705 (  0.15%)         23946542 (  0.16%)    690.00
   hotline            9 (  0.00%)             1767 (  0.00%)    196.33
   other        3977575 ( 17.40%)       2504811460 ( 16.64%)    629.73
  udp           2844842 ( 12.44%)        744513332 (  4.94%)    261.71
   dns          1688810 (  7.39%)        360164632 (  2.39%)    213.27
   realaud        13874 (  0.06%)          8090762 (  0.05%)    583.16
   halflif          892 (  0.00%)           106609 (  0.00%)    119.52
   starcra           49 (  0.00%)             7750 (  0.00%)    158.16
   everque          109 (  0.00%)            13678 (  0.00%)    125.49
   unreal            29 (  0.00%)             6027 (  0.00%)    207.83
   quake              6 (  0.00%)              939 (  0.00%)    156.50
   cuseeme            4 (  0.00%)              604 (  0.00%)    151.00
   other        1141015 (  4.99%)        376107087 (  2.50%)    329.63
  icmp           428426 (  1.87%)         38920133 (  0.26%)     90.84
  ipip              312 (  0.00%)            35888 (  0.00%)    115.03
  ipsec            3826 (  0.02%)           918648 (  0.01%)    240.11
  ip6               777 (  0.00%)           103325 (  0.00%)    132.98
  other          171984 (  0.75%)         26379690 (  0.18%)    153.38
  frag             2317 (  0.01%)          1854695 (  0.01%)    800.47
 ip6              31681 (  0.14%)          6277489 (  0.04%)    198.15
  tcp6            10755 (  0.05%)          2380227 (  0.02%)    221.31
   http(s)         1600 (  0.01%)          1255676 (  0.01%)    784.80
   http(c)         5715 (  0.02%)           525578 (  0.00%)     91.96
   smtp             516 (  0.00%)           199977 (  0.00%)    387.55
   ftp               33 (  0.00%)             3077 (  0.00%)     93.24
   pop3              33 (  0.00%)             2850 (  0.00%)     86.36
   ssh              916 (  0.00%)           198185 (  0.00%)    216.36
   dns               20 (  0.00%)             2147 (  0.00%)    107.35
   bgp               71 (  0.00%)             7773 (  0.00%)    109.48
   other           1851 (  0.01%)           184964 (  0.00%)     99.93
  udp6            16334 (  0.07%)          3299357 (  0.02%)    201.99
   dns            14853 (  0.06%)          2959503 (  0.02%)    199.25
   starcra            2 (  0.00%)              279 (  0.00%)    139.50
   other           1479 (  0.01%)           339575 (  0.00%)    229.60
  icmp6            4537 (  0.02%)           572630 (  0.00%)    126.21
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             25 (  0.00%)            21195 (  0.00%)    847.80


tcpdump file: 200804141400.dump.gz (583.44 MB)