Traffic Trace Info


DumpFile: 200804301400.dump
FileSize: 1728.67MB
Id: 200804301400
StartTime: Wed Apr 30 14:00:01 2008
EndTime: Wed Apr 30 14:15:01 2008
TotalTime: 899.93 seconds
TotalCapSize: 1355.52MB CapLen: 96 bytes
# of packets: 24454422 (16319.90MB)
AvgRate: 152.15Mbps stddev:29.33M

IP flow (unique src/dst pair) Information

# of flows: 843231 (avg. 29.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.1% 1.6% 1.2% 1.1% 0.9% 0.8% 0.8% 0.7% 0.6%

IP address Information

# of IPv4 addresses: 396233
Top 10 bandwidth usage (bytes/total in %):
5.2% 2.9% 2.8% 2.6% 2.4% 2.4% 2.3% 2.3% 2.1% 2.1%
# of IPv6 addresses: 1566
Top 10 bandwidth usage (bytes/total in %):
12.7% 9.5% 7.5% 6.8% 5.9% 5.8% 5.7% 5.4% 5.4% 5.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5185908
 [   64-  127]:    5937020
 [  128-  255]:    1075714
 [  256-  511]:    1070068
 [  512- 1023]:     978501
 [ 1024- 2047]:   10207211


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         24454422 (100.00%)      17112657250 (100.00%)    699.78
 ip            24431829 ( 99.91%)      17108477580 ( 99.98%)    700.25
  tcp          20962936 ( 85.72%)      16401968884 ( 95.85%)    782.43
   http(s)     10011164 ( 40.94%)      12861384648 ( 75.16%)   1284.70
   http(c)      4767167 ( 19.49%)        630252050 (  3.68%)    132.21
   squid        1700279 (  6.95%)        531868822 (  3.11%)    312.81
   smtp          953071 (  3.90%)        250109411 (  1.46%)    262.42
   nntp             106 (  0.00%)            14534 (  0.00%)    137.11
   ftp            48744 (  0.20%)         22183327 (  0.13%)    455.10
   pop3           17990 (  0.07%)          9226285 (  0.05%)    512.86
   imap           11474 (  0.05%)          5302500 (  0.03%)    462.13
   telnet          2939 (  0.01%)           486683 (  0.00%)    165.59
   ssh            38692 (  0.16%)         13653053 (  0.08%)    352.87
   dns             3361 (  0.01%)           283318 (  0.00%)     84.30
   bgp              185 (  0.00%)            50781 (  0.00%)    274.49
   napster           34 (  0.00%)             6180 (  0.00%)    181.76
   realaud          248 (  0.00%)            19287 (  0.00%)     77.77
   rtsp          387494 (  1.58%)        348667056 (  2.04%)    899.80
   icecast        27656 (  0.11%)         21801871 (  0.13%)    788.32
   other        2992326 ( 12.24%)       1706658718 (  9.97%)    570.35
  udp           2778819 ( 11.36%)        628613675 (  3.67%)    226.22
   dns          1778901 (  7.27%)        399720372 (  2.34%)    224.70
   realaud        16625 (  0.07%)          8418322 (  0.05%)    506.37
   halflif          354 (  0.00%)            23273 (  0.00%)     65.74
   starcra           25 (  0.00%)             5426 (  0.00%)    217.04
   everque           38 (  0.00%)             5971 (  0.00%)    157.13
   unreal            10 (  0.00%)             2100 (  0.00%)    210.00
   quake             92 (  0.00%)             7373 (  0.00%)     80.14
   cuseeme            7 (  0.00%)              598 (  0.00%)     85.43
   other         982658 (  4.02%)        220414046 (  1.29%)    224.30
  icmp           530181 (  2.17%)         49138076 (  0.29%)     92.68
  ipip              322 (  0.00%)            39226 (  0.00%)    121.82
  ipsec            4182 (  0.02%)           987068 (  0.01%)    236.03
  ip6               672 (  0.00%)            85154 (  0.00%)    126.72
  other          154717 (  0.63%)         27645497 (  0.16%)    178.68
  frag             1727 (  0.01%)          1384500 (  0.01%)    801.68
 ip6              22593 (  0.09%)          4179670 (  0.02%)    185.00
  tcp6             2093 (  0.01%)           401644 (  0.00%)    191.90
   http(s)           90 (  0.00%)            98081 (  0.00%)   1089.79
   http(c)          726 (  0.00%)           107378 (  0.00%)    147.90
   smtp             407 (  0.00%)           101564 (  0.00%)    249.54
   bgp               62 (  0.00%)             6417 (  0.00%)    103.50
   other            808 (  0.00%)            88204 (  0.00%)    109.16
  udp6            16650 (  0.07%)          3288179 (  0.02%)    197.49
   dns            15114 (  0.06%)          2918155 (  0.02%)    193.08
   other           1536 (  0.01%)           370024 (  0.00%)    240.90
  icmp6            3817 (  0.02%)           483753 (  0.00%)    126.74
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6              2 (  0.00%)             1878 (  0.00%)    939.00


tcpdump file: 200804301400.dump.gz (625.48 MB)