Traffic Trace Info


DumpFile: 200804231400.dump
FileSize: 1799.91MB
Id: 200804231400
StartTime: Wed Apr 23 14:00:01 2008
EndTime: Wed Apr 23 14:15:01 2008
TotalTime: 900.02 seconds
TotalCapSize: 1417.75MB CapLen: 96 bytes
# of packets: 25044687 (13384.74MB)
AvgRate: 124.75Mbps stddev:14.69M

IP flow (unique src/dst pair) Information

# of flows: 858636 (avg. 29.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.3% 1.7% 1.3% 1.0% 0.9% 0.8% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 471469
Top 10 bandwidth usage (bytes/total in %):
5.7% 5.2% 4.7% 3.7% 3.7% 3.4% 3.3% 3.2% 3.1% 2.6%
# of IPv6 addresses: 1762
Top 10 bandwidth usage (bytes/total in %):
25.4% 22.0% 20.9% 20.9% 8.2% 7.7% 6.5% 4.6% 4.0% 3.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4718681
 [   64-  127]:    8709667
 [  128-  255]:    1497567
 [  256-  511]:    1097432
 [  512- 1023]:    1022877
 [ 1024- 2047]:    7998463


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         25044687 (100.00%)      14034917693 (100.00%)    560.40
 ip            25015444 ( 99.88%)      14026093559 ( 99.94%)    560.70
  tcp          21088479 ( 84.20%)      12995936018 ( 92.60%)    616.26
   http(s)      6142950 ( 24.53%)       8032043458 ( 57.23%)   1307.52
   http(c)      3695451 ( 14.76%)        474911067 (  3.38%)    128.51
   squid        1556861 (  6.22%)        580055577 (  4.13%)    372.58
   smtp          860276 (  3.43%)        212654755 (  1.52%)    247.19
   nntp              79 (  0.00%)             8542 (  0.00%)    108.13
   ftp           548223 (  2.19%)         52514404 (  0.37%)     95.79
   pop3           16798 (  0.07%)          5819361 (  0.04%)    346.43
   imap            6640 (  0.03%)          2592542 (  0.02%)    390.44
   telnet          2846 (  0.01%)           407079 (  0.00%)    143.04
   ssh          3014852 ( 12.04%)        736094279 (  5.24%)    244.16
   dns             3697 (  0.01%)           398143 (  0.00%)    107.69
   bgp              225 (  0.00%)            69529 (  0.00%)    309.02
   napster           36 (  0.00%)             5973 (  0.00%)    165.92
   realaud           24 (  0.00%)             2913 (  0.00%)    121.38
   rtsp          221720 (  0.89%)        301338449 (  2.15%)   1359.09
   icecast        46659 (  0.19%)         46779390 (  0.33%)   1002.58
   hotline           21 (  0.00%)             3285 (  0.00%)    156.43
   other        4971115 ( 19.85%)       2550236912 ( 18.17%)    513.01
  udp           3398439 ( 13.57%)        976663586 (  6.96%)    287.39
   dns          1943788 (  7.76%)        408390788 (  2.91%)    210.10
   realaud         8423 (  0.03%)          2810949 (  0.02%)    333.72
   halflif           24 (  0.00%)             3355 (  0.00%)    139.79
   starcra           15 (  0.00%)             2276 (  0.00%)    151.73
   everque           43 (  0.00%)             5552 (  0.00%)    129.12
   unreal            12 (  0.00%)             1857 (  0.00%)    154.75
   quake             19 (  0.00%)             1623 (  0.00%)     85.42
   cuseeme           12 (  0.00%)             1162 (  0.00%)     96.83
   other        1446065 (  5.77%)        565409850 (  4.03%)    391.00
  icmp           481481 (  1.92%)         45032019 (  0.32%)     93.53
  ipip              340 (  0.00%)            41484 (  0.00%)    122.01
  ipsec             811 (  0.00%)           108658 (  0.00%)    133.98
  ip6               656 (  0.00%)            83050 (  0.00%)    126.60
  other           45238 (  0.18%)          8228744 (  0.06%)    181.90
  frag             4056 (  0.02%)          3392608 (  0.02%)    836.44
 ip6              29243 (  0.12%)          8824134 (  0.06%)    301.75
  tcp6             4003 (  0.02%)          2375365 (  0.02%)    593.40
   http(s)         1347 (  0.01%)          1992589 (  0.01%)   1479.28
   http(c)          465 (  0.00%)            47105 (  0.00%)    101.30
   smtp             283 (  0.00%)           118785 (  0.00%)    419.73
   dns               10 (  0.00%)             1088 (  0.00%)    108.80
   bgp               98 (  0.00%)            12746 (  0.00%)    130.06
   other           1800 (  0.01%)           203052 (  0.00%)    112.81
  udp6            19122 (  0.08%)          3966048 (  0.03%)    207.41
   dns            17424 (  0.07%)          3434091 (  0.02%)    197.09
   other           1698 (  0.01%)           531957 (  0.00%)    313.28
  icmp6            4287 (  0.02%)           534320 (  0.00%)    124.64
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1801 (  0.01%)          1944321 (  0.01%)   1079.58


tcpdump file: 200804231400.dump.gz (676.05 MB)