Traffic Trace Info


DumpFile: 200805181400.dump
FileSize: 1401.10MB
Id: 200805181400
StartTime: Sun May 18 14:00:00 2008
EndTime: Sun May 18 14:15:01 2008
TotalTime: 900.70 seconds
TotalCapSize: 1097.52MB CapLen: 96 bytes
# of packets: 19894919 (11489.15MB)
AvgRate: 107.00Mbps stddev:17.21M

IP flow (unique src/dst pair) Information

# of flows: 709173 (avg. 28.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 6.6% 2.4% 2.1% 1.6% 1.4% 1.4% 1.0% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 397104
Top 10 bandwidth usage (bytes/total in %):
8.2% 7.7% 7.3% 6.8% 5.6% 4.1% 3.6% 3.5% 3.5% 3.3%
# of IPv6 addresses: 1472
Top 10 bandwidth usage (bytes/total in %):
14.9% 14.4% 10.4% 9.3% 8.3% 5.2% 5.2% 4.9% 4.8% 4.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3597824
 [   64-  127]:    6488948
 [  128-  255]:    1234902
 [  256-  511]:     863183
 [  512- 1023]:     637605
 [ 1024- 2047]:    7072457


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         19894919 (100.00%)      12047243999 (100.00%)    605.54
 ip            19871534 ( 99.88%)      12043146767 ( 99.97%)    606.05
  tcp          15297870 ( 76.89%)      10356557191 ( 85.97%)    676.99
   http(s)      5888657 ( 29.60%)       7936544371 ( 65.88%)   1347.77
   http(c)      3086791 ( 15.52%)        287293039 (  2.38%)     93.07
   squid        1714957 (  8.62%)        317826006 (  2.64%)    185.33
   smtp          624430 (  3.14%)        109967355 (  0.91%)    176.11
   nntp              13 (  0.00%)             1482 (  0.00%)    114.00
   ftp            94456 (  0.47%)         50470281 (  0.42%)    534.33
   pop3            6608 (  0.03%)          3148351 (  0.03%)    476.45
   imap            4413 (  0.02%)           966530 (  0.01%)    219.02
   telnet          1347 (  0.01%)           102522 (  0.00%)     76.11
   ssh           526662 (  2.65%)         68560503 (  0.57%)    130.18
   dns             2645 (  0.01%)           228248 (  0.00%)     86.29
   bgp              190 (  0.00%)            56337 (  0.00%)    296.51
   napster           83 (  0.00%)             7130 (  0.00%)     85.90
   realaud          143 (  0.00%)            15668 (  0.00%)    109.57
   rtsp          102976 (  0.52%)        122645190 (  1.02%)   1191.01
   icecast        24064 (  0.12%)         19704934 (  0.16%)    818.86
   hotline           25 (  0.00%)             2254 (  0.00%)     90.16
   other        3219407 ( 16.18%)       1439015414 ( 11.94%)    446.98
  udp           4034133 ( 20.28%)       1638039176 ( 13.60%)    406.04
   dns          1262900 (  6.35%)        285090887 (  2.37%)    225.74
   realaud         6660 (  0.03%)          2746863 (  0.02%)    412.44
   halflif           13 (  0.00%)             1190 (  0.00%)     91.54
   starcra           31 (  0.00%)             5865 (  0.00%)    189.19
   everque          132 (  0.00%)            16149 (  0.00%)    122.34
   unreal            21 (  0.00%)             5255 (  0.00%)    250.24
   quake              1 (  0.00%)               72 (  0.00%)     72.00
   cuseeme           92 (  0.00%)             5670 (  0.00%)     61.63
   other        2763896 ( 13.89%)       1350086364 ( 11.21%)    488.47
  icmp           527534 (  2.65%)         46880119 (  0.39%)     88.87
  ipip              318 (  0.00%)            38956 (  0.00%)    122.50
  ipsec             810 (  0.00%)           108540 (  0.00%)    134.00
  ip6               855 (  0.00%)           105375 (  0.00%)    123.25
  other           10014 (  0.05%)          1417410 (  0.01%)    141.54
  frag             4345 (  0.02%)          3468790 (  0.03%)    798.34
 ip6              23385 (  0.12%)          4097232 (  0.03%)    175.21
  tcp6             2755 (  0.01%)           345330 (  0.00%)    125.35
   http(c)          372 (  0.00%)            39658 (  0.00%)    106.61
   smtp             252 (  0.00%)            93977 (  0.00%)    372.92
   pop3              43 (  0.00%)             4635 (  0.00%)    107.79
   bgp               68 (  0.00%)             7236 (  0.00%)    106.41
   other           2020 (  0.01%)           199824 (  0.00%)     98.92
  udp6            15257 (  0.08%)          3080364 (  0.03%)    201.90
   dns            13695 (  0.07%)          2508499 (  0.02%)    183.17
   starcra            1 (  0.00%)              137 (  0.00%)    137.00
   other           1561 (  0.01%)           571728 (  0.00%)    366.26
  icmp6            5343 (  0.03%)           667458 (  0.01%)    124.92
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200805181400.dump.gz (501.19 MB)