Traffic Trace Info


DumpFile: 200805071400.dump
FileSize: 2282.80MB
Id: 200805071400
StartTime: Wed May 7 14:00:01 2008
EndTime: Wed May 7 14:15:00 2008
TotalTime: 899.76 seconds
TotalCapSize: 1770.68MB CapLen: 96 bytes
# of packets: 33561276 (21392.41MB)
AvgRate: 199.46Mbps stddev:32.80M

IP flow (unique src/dst pair) Information

# of flows: 947705 (avg. 35.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.4% 3.1% 1.8% 0.9% 0.8% 0.7% 0.7% 0.6% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 470605
Top 10 bandwidth usage (bytes/total in %):
10.9% 8.9% 4.8% 4.0% 3.2% 2.4% 2.0% 2.0% 1.9% 1.9%
# of IPv6 addresses: 1277
Top 10 bandwidth usage (bytes/total in %):
15.7% 9.7% 9.2% 9.1% 6.2% 6.2% 5.9% 5.5% 5.2% 5.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    8081585
 [   64-  127]:    8667477
 [  128-  255]:    1336641
 [  256-  511]:    1015504
 [  512- 1023]:     984080
 [ 1024- 2047]:   13475989


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         33561276 (100.00%)      22431567747 (100.00%)    668.38
 ip            33537647 ( 99.93%)      22426997350 ( 99.98%)    668.71
  tcp          24709130 ( 73.62%)      19143906804 ( 85.34%)    774.77
   http(s)     11083634 ( 33.03%)      14334386901 ( 63.90%)   1293.29
   http(c)      5698201 ( 16.98%)        763589858 (  3.40%)    134.01
   squid         753743 (  2.25%)        356389261 (  1.59%)    472.83
   smtp          847224 (  2.52%)        218639986 (  0.97%)    258.07
   nntp              62 (  0.00%)             6428 (  0.00%)    103.68
   ftp            53186 (  0.16%)         13764864 (  0.06%)    258.81
   pop3           17454 (  0.05%)          6962899 (  0.03%)    398.93
   imap           59464 (  0.18%)         74929190 (  0.33%)   1260.08
   telnet          2673 (  0.01%)           348984 (  0.00%)    130.56
   ssh           221075 (  0.66%)        140132773 (  0.62%)    633.87
   dns             5040 (  0.02%)           478284 (  0.00%)     94.90
   bgp              196 (  0.00%)            60439 (  0.00%)    308.36
   napster           25 (  0.00%)             3392 (  0.00%)    135.68
   rtsp          739415 (  2.20%)        725363291 (  3.23%)    981.00
   icecast        43311 (  0.13%)         19651839 (  0.09%)    453.74
   hotline            7 (  0.00%)              640 (  0.00%)     91.43
   other        5184408 ( 15.45%)       2489197055 ( 11.10%)    480.13
  udp           3170051 (  9.45%)        745171023 (  3.32%)    235.07
   dns          1838205 (  5.48%)        396889194 (  1.77%)    215.91
   realaud        25276 (  0.08%)         14326649 (  0.06%)    566.81
   halflif         1102 (  0.00%)            67168 (  0.00%)     60.95
   starcra           15 (  0.00%)             1749 (  0.00%)    116.60
   everque           15 (  0.00%)             1801 (  0.00%)    120.07
   unreal            12 (  0.00%)             1773 (  0.00%)    147.75
   quake             14 (  0.00%)             2074 (  0.00%)    148.14
   cuseeme            1 (  0.00%)               73 (  0.00%)     73.00
   other        1305310 (  3.89%)        333862432 (  1.49%)    255.77
  icmp          1457395 (  4.34%)        131925886 (  0.59%)     90.52
  ipip              343 (  0.00%)            40808 (  0.00%)    118.97
  ipsec         4125723 ( 12.29%)       2393984674 ( 10.67%)    580.26
  ip6              2221 (  0.01%)           250905 (  0.00%)    112.97
  other           72784 (  0.22%)         11717250 (  0.05%)    160.99
  frag             2025 (  0.01%)          1706079 (  0.01%)    842.51
 ip6              23629 (  0.07%)          4570397 (  0.02%)    193.42
  tcp6             2459 (  0.01%)           723011 (  0.00%)    294.03
   http(c)          507 (  0.00%)            53810 (  0.00%)    106.13
   smtp             405 (  0.00%)           118295 (  0.00%)    292.09
   ftp              196 (  0.00%)           143186 (  0.00%)    730.54
   bgp               68 (  0.00%)             7926 (  0.00%)    116.56
   other           1283 (  0.00%)           399794 (  0.00%)    311.61
  udp6            16845 (  0.05%)          3301385 (  0.01%)    195.99
   dns            16084 (  0.05%)          3094028 (  0.01%)    192.37
   unreal             1 (  0.00%)              137 (  0.00%)    137.00
   other            760 (  0.00%)           207220 (  0.00%)    272.66
  icmp6            4293 (  0.01%)           541005 (  0.00%)    126.02
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              2 (  0.00%)              916 (  0.00%)    458.00


tcpdump file: 200805071400.dump.gz (749.43 MB)