Traffic Trace Info


DumpFile: 200805191400.dump
FileSize: 2416.24MB
Id: 200805191400
StartTime: Mon May 19 14:00:01 2008
EndTime: Mon May 19 14:15:00 2008
TotalTime: 899.82 seconds
TotalCapSize: 1884.99MB CapLen: 96 bytes
# of packets: 34815519 (22043.60MB)
AvgRate: 205.48Mbps stddev:24.60M

IP flow (unique src/dst pair) Information

# of flows: 770606 (avg. 45.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 5.2% 3.4% 3.4% 2.9% 0.9% 0.8% 0.8% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 379972
Top 10 bandwidth usage (bytes/total in %):
9.8% 6.1% 6.0% 5.3% 3.7% 3.5% 3.5% 3.5% 2.9% 2.8%
# of IPv6 addresses: 1354
Top 10 bandwidth usage (bytes/total in %):
59.1% 29.7% 29.4% 23.9% 17.0% 6.9% 1.8% 1.8% 1.1% 1.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6839766
 [   64-  127]:   10349134
 [  128-  255]:    1041402
 [  256-  511]:     980199
 [  512- 1023]:    1908053
 [ 1024- 2047]:   13696965


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         34815519 (100.00%)      23114394774 (100.00%)    663.91
 ip            34669567 ( 99.58%)      23081720275 ( 99.86%)    665.76
  tcp          27427382 ( 78.78%)      21357227413 ( 92.40%)    778.68
   http(s)     11865874 ( 34.08%)      15288827156 ( 66.14%)   1288.47
   http(c)      6105631 ( 17.54%)        984641768 (  4.26%)    161.27
   squid        2074031 (  5.96%)        597587561 (  2.59%)    288.13
   smtp          767466 (  2.20%)        187584274 (  0.81%)    244.42
   nntp             185 (  0.00%)            21508 (  0.00%)    116.26
   ftp          1311546 (  3.77%)       1262063568 (  5.46%)    962.27
   pop3           17521 (  0.05%)          8806768 (  0.04%)    502.64
   imap           23345 (  0.07%)          3392719 (  0.01%)    145.33
   telnet          3861 (  0.01%)           699052 (  0.00%)    181.05
   ssh           368273 (  1.06%)         46075795 (  0.20%)    125.11
   dns             3194 (  0.01%)           273697 (  0.00%)     85.69
   bgp              189 (  0.00%)            51460 (  0.00%)    272.28
   napster           18 (  0.00%)             2541 (  0.00%)    141.17
   realaud          104 (  0.00%)            14148 (  0.00%)    136.04
   rtsp          465869 (  1.34%)        486086103 (  2.10%)   1043.40
   icecast        19288 (  0.06%)         16081988 (  0.07%)    833.78
   hotline           22 (  0.00%)             2815 (  0.00%)    127.95
   other        4400963 ( 12.64%)       2475014372 ( 10.71%)    562.38
  udp           3883642 ( 11.15%)       1445010681 (  6.25%)    372.08
   dns          1643566 (  4.72%)        373985986 (  1.62%)    227.55
   realaud        11705 (  0.03%)          4290869 (  0.02%)    366.58
   halflif           23 (  0.00%)             5659 (  0.00%)    246.04
   starcra           60 (  0.00%)            11307 (  0.00%)    188.45
   everque          107 (  0.00%)            12514 (  0.00%)    116.95
   unreal            36 (  0.00%)             4523 (  0.00%)    125.64
   quake             19 (  0.00%)             6683 (  0.00%)    351.74
   cuseeme            3 (  0.00%)              233 (  0.00%)     77.67
   other        2228097 (  6.40%)       1066677223 (  4.61%)    478.74
  icmp          3232664 (  9.29%)        258245615 (  1.12%)     79.89
  ipip              320 (  0.00%)            37476 (  0.00%)    117.11
  ipsec            4646 (  0.01%)          1323688 (  0.01%)    284.91
  ip6              1029 (  0.00%)           172566 (  0.00%)    167.70
  other          119884 (  0.34%)         19702836 (  0.09%)    164.35
  frag             1598 (  0.00%)          1282513 (  0.01%)    802.57
 ip6             145952 (  0.42%)         32674499 (  0.14%)    223.87
  tcp6           123165 (  0.35%)         28672359 (  0.12%)    232.80
   http(s)          740 (  0.00%)           917985 (  0.00%)   1240.52
   http(c)       105828 (  0.30%)          7842467 (  0.03%)     74.11
   smtp             396 (  0.00%)           370988 (  0.00%)    936.84
   ftp               77 (  0.00%)             8991 (  0.00%)    116.77
   dns                9 (  0.00%)             1002 (  0.00%)    111.33
   bgp               83 (  0.00%)            19853 (  0.00%)    239.19
   other          16032 (  0.05%)         19511073 (  0.08%)   1217.01
  udp6            18239 (  0.05%)          3428324 (  0.01%)    187.97
   dns            17231 (  0.05%)          3194461 (  0.01%)    185.39
   starcra            1 (  0.00%)              116 (  0.00%)    116.00
   other           1007 (  0.00%)           233747 (  0.00%)    232.12
  icmp6            4518 (  0.01%)           569736 (  0.00%)    126.10
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200805191400.dump.gz (833.73 MB)