Traffic Trace Info


DumpFile: 200805211400.dump
FileSize: 1777.29MB
Id: 200805211400
StartTime: Wed May 21 14:00:01 2008
EndTime: Wed May 21 14:15:00 2008
TotalTime: 899.27 seconds
TotalCapSize: 1389.98MB CapLen: 96 bytes
# of packets: 25382101 (17838.23MB)
AvgRate: 166.35Mbps stddev:21.73M

IP flow (unique src/dst pair) Information

# of flows: 827257 (avg. 30.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 3.6% 1.5% 1.4% 1.1% 1.1% 0.8% 0.8% 0.7% 0.6%

IP address Information

# of IPv4 addresses: 418836
Top 10 bandwidth usage (bytes/total in %):
7.3% 7.3% 4.0% 3.6% 2.7% 2.4% 2.2% 2.2% 1.8% 1.8%
# of IPv6 addresses: 1794
Top 10 bandwidth usage (bytes/total in %):
13.6% 10.6% 6.5% 5.8% 5.7% 5.6% 5.5% 5.4% 4.9% 4.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6120654
 [   64-  127]:    5128218
 [  128-  255]:     962302
 [  256-  511]:     862530
 [  512- 1023]:    1011674
 [ 1024- 2047]:   11296723


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         25382101 (100.00%)      18704737397 (100.00%)    736.93
 ip            25352009 ( 99.88%)      18698727523 ( 99.97%)    737.56
  tcp          21912349 ( 86.33%)      17869285172 ( 95.53%)    815.49
   http(s)     10680175 ( 42.08%)      13767682275 ( 73.61%)   1289.09
   http(c)      5299054 ( 20.88%)        732984526 (  3.92%)    138.32
   squid        1066648 (  4.20%)        397199414 (  2.12%)    372.38
   smtp          862827 (  3.40%)        214551530 (  1.15%)    248.66
   nntp             194 (  0.00%)            20258 (  0.00%)    104.42
   ftp            35006 (  0.14%)          7603342 (  0.04%)    217.20
   pop3           33663 (  0.13%)         15168929 (  0.08%)    450.61
   imap            8395 (  0.03%)          2766805 (  0.01%)    329.58
   telnet          2128 (  0.01%)           354596 (  0.00%)    166.63
   ssh            97863 (  0.39%)         12876704 (  0.07%)    131.58
   dns             5396 (  0.02%)           413830 (  0.00%)     76.69
   bgp              188 (  0.00%)            47434 (  0.00%)    252.31
   napster          124 (  0.00%)            11226 (  0.00%)     90.53
   realaud           92 (  0.00%)            12807 (  0.00%)    139.21
   rtsp          427130 (  1.68%)        459708080 (  2.46%)   1076.27
   icecast        22158 (  0.09%)          9750833 (  0.05%)    440.06
   other        3371305 ( 13.28%)       2248132403 ( 12.02%)    666.84
  udp           2626202 ( 10.35%)        749267649 (  4.01%)    285.30
   dns          1684365 (  6.64%)        388517725 (  2.08%)    230.66
   realaud        35628 (  0.14%)         21585700 (  0.12%)    605.86
   halflif           43 (  0.00%)             6342 (  0.00%)    147.49
   starcra           23 (  0.00%)             3979 (  0.00%)    173.00
   everque          512 (  0.00%)            70456 (  0.00%)    137.61
   unreal            15 (  0.00%)             2141 (  0.00%)    142.73
   quake              9 (  0.00%)             2020 (  0.00%)    224.44
   cuseeme            3 (  0.00%)              453 (  0.00%)    151.00
   other         902942 (  3.56%)        338780663 (  1.81%)    375.20
  icmp           689525 (  2.72%)         58828481 (  0.31%)     85.32
  ipip              345 (  0.00%)            41306 (  0.00%)    119.73
  ipsec            2384 (  0.01%)           483640 (  0.00%)    202.87
  ip6               856 (  0.00%)           105398 (  0.00%)    123.13
  other          120348 (  0.47%)         20715877 (  0.11%)    172.13
  frag            29758 (  0.12%)         23531130 (  0.13%)    790.75
 ip6              30092 (  0.12%)          6009874 (  0.03%)    199.72
  tcp6             3702 (  0.01%)          1248614 (  0.01%)    337.28
   http(s)          620 (  0.00%)           869589 (  0.00%)   1402.56
   http(c)          500 (  0.00%)            51357 (  0.00%)    102.71
   smtp             202 (  0.00%)            79289 (  0.00%)    392.52
   pop3              33 (  0.00%)             2850 (  0.00%)     86.36
   ssh              235 (  0.00%)            29230 (  0.00%)    124.38
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp               80 (  0.00%)             9601 (  0.00%)    120.01
   other           2025 (  0.01%)           206063 (  0.00%)    101.76
  udp6            20918 (  0.08%)          4032059 (  0.02%)    192.76
   dns            19117 (  0.08%)          3598918 (  0.02%)    188.26
   other           1801 (  0.01%)           433141 (  0.00%)    240.50
  icmp6            5414 (  0.02%)           700266 (  0.00%)    129.34
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             28 (  0.00%)            24855 (  0.00%)    887.68


tcpdump file: 200805211400.dump.gz (629.53 MB)