Traffic Trace Info


DumpFile: 200805021400.dump
FileSize: 1541.39MB
Id: 200805021400
StartTime: Fri May 2 14:00:01 2008
EndTime: Fri May 2 14:15:00 2008
TotalTime: 899.24 seconds
TotalCapSize: 1209.97MB CapLen: 96 bytes
# of packets: 21719129 (15013.42MB)
AvgRate: 140.06Mbps stddev:20.24M

IP flow (unique src/dst pair) Information

# of flows: 766234 (avg. 28.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.8% 1.6% 1.2% 1.1% 0.9% 0.9% 0.7% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 389663
Top 10 bandwidth usage (bytes/total in %):
4.3% 4.2% 4.0% 3.2% 2.6% 2.6% 2.1% 2.0% 2.0% 2.0%
# of IPv6 addresses: 1108
Top 10 bandwidth usage (bytes/total in %):
66.7% 48.8% 23.0% 22.9% 17.9% 1.6% 1.6% 1.0% 0.9% 0.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4113390
 [   64-  127]:    5722680
 [  128-  255]:    1001738
 [  256-  511]:     751786
 [  512- 1023]:     583324
 [ 1024- 2047]:    9546211


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         21719129 (100.00%)      15742713038 (100.00%)    724.83
 ip            21577003 ( 99.35%)      15703240170 ( 99.75%)    727.78
  tcp          18404562 ( 84.74%)      15196859949 ( 96.53%)    825.71
   http(s)      8337033 ( 38.39%)      10667780296 ( 67.76%)   1279.57
   http(c)      3564389 ( 16.41%)        419564932 (  2.67%)    117.71
   squid         649060 (  2.99%)        437798996 (  2.78%)    674.51
   smtp          710195 (  3.27%)        196206174 (  1.25%)    276.27
   nntp              63 (  0.00%)             7167 (  0.00%)    113.76
   ftp            89340 (  0.41%)         30881446 (  0.20%)    345.66
   pop3           15409 (  0.07%)          5908537 (  0.04%)    383.45
   imap           15636 (  0.07%)          8239787 (  0.05%)    526.98
   telnet          1261 (  0.01%)           175742 (  0.00%)    139.37
   ssh            16044 (  0.07%)         10459110 (  0.07%)    651.90
   dns             5284 (  0.02%)           500624 (  0.00%)     94.74
   bgp              188 (  0.00%)            54271 (  0.00%)    288.68
   napster          760 (  0.00%)            48713 (  0.00%)     64.10
   realaud           93 (  0.00%)            15070 (  0.00%)    162.04
   rtsp          465768 (  2.14%)        530320144 (  3.37%)   1138.59
   icecast         8685 (  0.04%)          2313027 (  0.01%)    266.32
   hotline            8 (  0.00%)              542 (  0.00%)     67.75
   other        4525340 ( 20.84%)       2886581141 ( 18.34%)    637.87
  udp           2143794 (  9.87%)        396925991 (  2.52%)    185.15
   dns          1335349 (  6.15%)        178877488 (  1.14%)    133.96
   realaud        19178 (  0.09%)         13931658 (  0.09%)    726.44
   halflif           12 (  0.00%)             1680 (  0.00%)    140.00
   starcra           41 (  0.00%)             6689 (  0.00%)    163.15
   everque           32 (  0.00%)             7092 (  0.00%)    221.62
   unreal             8 (  0.00%)              954 (  0.00%)    119.25
   quake             13 (  0.00%)             1095 (  0.00%)     84.23
   cuseeme            4 (  0.00%)              313 (  0.00%)     78.25
   other         789136 (  3.63%)        204084219 (  1.30%)    258.62
  icmp           880098 (  4.05%)         82313183 (  0.52%)     93.53
  ipip              347 (  0.00%)            41350 (  0.00%)    119.16
  ipsec            1384 (  0.01%)           266400 (  0.00%)    192.49
  ip6               246 (  0.00%)            36185 (  0.00%)    147.09
  other          146572 (  0.67%)         26797112 (  0.17%)    182.83
  frag             1123 (  0.01%)           934276 (  0.01%)    831.95
 ip6             142126 (  0.65%)         39472868 (  0.25%)    277.73
  tcp6           125635 (  0.58%)         36345025 (  0.23%)    289.29
   http(s)          510 (  0.00%)           647532 (  0.00%)   1269.67
   http(c)       103739 (  0.48%)          9100538 (  0.06%)     87.73
   smtp             413 (  0.00%)           120561 (  0.00%)    291.92
   ftp               97 (  0.00%)            11341 (  0.00%)    116.92
   dns                6 (  0.00%)              638 (  0.00%)    106.33
   bgp               72 (  0.00%)             9174 (  0.00%)    127.42
   other          20798 (  0.10%)         26455241 (  0.17%)   1272.01
  udp6            11806 (  0.05%)          2531515 (  0.02%)    214.43
   dns            11182 (  0.05%)          2387847 (  0.02%)    213.54
   other            624 (  0.00%)           143668 (  0.00%)    230.24
  icmp6            4653 (  0.02%)           590417 (  0.00%)    126.89
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              2 (  0.00%)             1831 (  0.00%)    915.50


tcpdump file: 200805021400.dump.gz (539.23 MB)