Traffic Trace Info


DumpFile: 200805201400.dump
FileSize: 1934.11MB
Id: 200805201400
StartTime: Tue May 20 14:00:01 2008
EndTime: Tue May 20 14:15:01 2008
TotalTime: 899.96 seconds
TotalCapSize: 1518.03MB CapLen: 96 bytes
# of packets: 27267636 (17028.16MB)
AvgRate: 158.71Mbps stddev:18.06M

IP flow (unique src/dst pair) Information

# of flows: 718768 (avg. 37.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 2.2% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8% 0.6%

IP address Information

# of IPv4 addresses: 338833
Top 10 bandwidth usage (bytes/total in %):
5.2% 4.8% 3.9% 3.0% 3.0% 2.9% 2.8% 2.6% 2.3% 2.2%
# of IPv6 addresses: 1516
Top 10 bandwidth usage (bytes/total in %):
12.1% 12.0% 6.8% 6.6% 5.9% 5.4% 5.2% 5.2% 5.0% 4.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6220861
 [   64-  127]:    7451167
 [  128-  255]:     975061
 [  256-  511]:     966052
 [  512- 1023]:     918022
 [ 1024- 2047]:   10736473


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         27267636 (100.00%)      17855314892 (100.00%)    654.82
 ip            27241028 ( 99.90%)      17850666715 ( 99.97%)    655.29
  tcp          23772727 ( 87.18%)      16751998806 ( 93.82%)    704.67
   http(s)      9560299 ( 35.06%)      12424864002 ( 69.59%)   1299.63
   http(c)      5254091 ( 19.27%)        631901856 (  3.54%)    120.27
   squid        1947060 (  7.14%)        306920014 (  1.72%)    157.63
   smtp          941733 (  3.45%)        220734180 (  1.24%)    234.39
   nntp               8 (  0.00%)             2461 (  0.00%)    307.62
   ftp            74229 (  0.27%)         43203475 (  0.24%)    582.03
   pop3           22457 (  0.08%)         15841299 (  0.09%)    705.41
   imap            8098 (  0.03%)          3220981 (  0.02%)    397.75
   telnet          1161 (  0.00%)           100150 (  0.00%)     86.26
   ssh           722422 (  2.65%)        116884081 (  0.65%)    161.79
   dns             3926 (  0.01%)           317170 (  0.00%)     80.79
   bgp              227 (  0.00%)            84081 (  0.00%)    370.40
   napster           33 (  0.00%)             2218 (  0.00%)     67.21
   realaud           45 (  0.00%)             5759 (  0.00%)    127.98
   rtsp          640125 (  2.35%)        670501272 (  3.76%)   1047.45
   icecast        27337 (  0.10%)          6631043 (  0.04%)    242.57
   other        4569468 ( 16.76%)       2310783940 ( 12.94%)    505.70
  udp           2912500 ( 10.68%)       1040075850 (  5.83%)    357.11
   dns          1659219 (  6.08%)        386188636 (  2.16%)    232.75
   realaud         2909 (  0.01%)           264519 (  0.00%)     90.93
   halflif           27 (  0.00%)             3393 (  0.00%)    125.67
   starcra           49 (  0.00%)             8341 (  0.00%)    170.22
   everque           83 (  0.00%)             9697 (  0.00%)    116.83
   unreal            41 (  0.00%)             8764 (  0.00%)    213.76
   quake              6 (  0.00%)             1285 (  0.00%)    214.17
   cuseeme            7 (  0.00%)             1210 (  0.00%)    172.86
   other        1250139 (  4.58%)        653579090 (  3.66%)    522.81
  icmp           427060 (  1.57%)         38493988 (  0.22%)     90.14
  ipip              329 (  0.00%)            39608 (  0.00%)    120.39
  ipsec            7205 (  0.03%)          1900720 (  0.01%)    263.81
  ip6               849 (  0.00%)           103808 (  0.00%)    122.27
  other          120358 (  0.44%)         18053935 (  0.10%)    150.00
  frag             1379 (  0.01%)          1129114 (  0.01%)    818.79
 ip6              26608 (  0.10%)          4648177 (  0.03%)    174.69
  tcp6             2926 (  0.01%)           489688 (  0.00%)    167.36
   http(s)          148 (  0.00%)           163465 (  0.00%)   1104.49
   http(c)          600 (  0.00%)            60488 (  0.00%)    100.81
   smtp             293 (  0.00%)            73970 (  0.00%)    252.46
   ftp               51 (  0.00%)             4463 (  0.00%)     87.51
   pop3              32 (  0.00%)             2768 (  0.00%)     86.50
   bgp               67 (  0.00%)             7153 (  0.00%)    106.76
   other           1735 (  0.01%)           177381 (  0.00%)    102.24
  udp6            18980 (  0.07%)          3562777 (  0.02%)    187.71
   dns            17734 (  0.07%)          3277666 (  0.02%)    184.82
   other           1246 (  0.00%)           285111 (  0.00%)    228.82
  icmp6            4666 (  0.02%)           585998 (  0.00%)    125.59
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              6 (  0.00%)             5634 (  0.00%)    939.00


tcpdump file: 200805201400.dump.gz (695.78 MB)