Traffic Trace Info


DumpFile: 200805271400.dump
FileSize: 1608.82MB
Id: 200805271400
StartTime: Tue May 27 14:00:00 2008
EndTime: Tue May 27 14:15:01 2008
TotalTime: 900.33 seconds
TotalCapSize: 1259.88MB CapLen: 96 bytes
# of packets: 22867050 (15539.39MB)
AvgRate: 144.76Mbps stddev:27.83M

IP flow (unique src/dst pair) Information

# of flows: 654340 (avg. 34.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.4% 2.1% 2.1% 1.9% 1.2% 1.1% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 344789
Top 10 bandwidth usage (bytes/total in %):
7.0% 6.3% 4.6% 3.7% 3.2% 2.7% 2.6% 2.5% 2.4% 2.4%
# of IPv6 addresses: 1877
Top 10 bandwidth usage (bytes/total in %):
14.7% 7.3% 6.5% 6.5% 6.2% 5.6% 3.9% 3.7% 3.7% 3.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5355554
 [   64-  127]:    5189405
 [  128-  255]:    1024966
 [  256-  511]:     619104
 [  512- 1023]:     844223
 [ 1024- 2047]:    9833798


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         22867050 (100.00%)      16294227856 (100.00%)    712.56
 ip            22842645 ( 99.89%)      16289734597 ( 99.97%)    713.13
  tcp          20412784 ( 89.27%)      15793731050 ( 96.93%)    773.72
   http(s)      8772175 ( 38.36%)      11529881309 ( 70.76%)   1314.37
   http(c)      5162523 ( 22.58%)        793166753 (  4.87%)    153.64
   squid         542095 (  2.37%)        300982515 (  1.85%)    555.22
   smtp          587588 (  2.57%)        139246674 (  0.85%)    236.98
   nntp              48 (  0.00%)             5532 (  0.00%)    115.25
   ftp            90454 (  0.40%)         39094285 (  0.24%)    432.20
   pop3           12520 (  0.05%)          6046024 (  0.04%)    482.91
   imap           10457 (  0.05%)          6786266 (  0.04%)    648.97
   telnet          2008 (  0.01%)           214530 (  0.00%)    106.84
   ssh          1415310 (  6.19%)        228495289 (  1.40%)    161.45
   dns            28905 (  0.13%)          9408124 (  0.06%)    325.48
   bgp              205 (  0.00%)            67766 (  0.00%)    330.57
   napster           15 (  0.00%)             2597 (  0.00%)    173.13
   realaud          185 (  0.00%)            13977 (  0.00%)     75.55
   rtsp         1249371 (  5.46%)       1219655229 (  7.49%)    976.22
   icecast        15437 (  0.07%)         15641797 (  0.10%)   1013.27
   hotline            5 (  0.00%)              306 (  0.00%)     61.20
   other        2523477 ( 11.04%)       1505021717 (  9.24%)    596.41
  udp           1817251 (  7.95%)        438694400 (  2.69%)    241.41
   dns          1088678 (  4.76%)        176258461 (  1.08%)    161.90
   realaud         7199 (  0.03%)           456167 (  0.00%)     63.37
   halflif           13 (  0.00%)             3131 (  0.00%)    240.85
   starcra           71 (  0.00%)            12798 (  0.00%)    180.25
   everque           39 (  0.00%)             5796 (  0.00%)    148.62
   unreal            23 (  0.00%)             4525 (  0.00%)    196.74
   quake             14 (  0.00%)             2753 (  0.00%)    196.64
   cuseeme           47 (  0.00%)             3033 (  0.00%)     64.53
   other         721105 (  3.15%)        261924926 (  1.61%)    363.23
  icmp           513109 (  2.24%)         45144221 (  0.28%)     87.98
  ipip              351 (  0.00%)            43512 (  0.00%)    123.97
  ipsec           56143 (  0.25%)          5675240 (  0.03%)    101.09
  ip6              1086 (  0.00%)           132325 (  0.00%)    121.85
  other           41921 (  0.18%)          6313849 (  0.04%)    150.61
  frag            19655 (  0.09%)         17344285 (  0.11%)    882.44
 ip6              24405 (  0.11%)          4493259 (  0.03%)    184.11
  tcp6             2804 (  0.01%)           588368 (  0.00%)    209.83
   http(s)           67 (  0.00%)            53519 (  0.00%)    798.79
   http(c)          661 (  0.00%)            75799 (  0.00%)    114.67
   smtp             506 (  0.00%)           222368 (  0.00%)    439.46
   ftp              119 (  0.00%)            74174 (  0.00%)    623.31
   pop3              33 (  0.00%)             2850 (  0.00%)     86.36
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              110 (  0.00%)            24896 (  0.00%)    226.33
   other           1301 (  0.01%)           134127 (  0.00%)    103.10
  udp6            16754 (  0.07%)          3268522 (  0.02%)    195.09
   dns            14827 (  0.06%)          2670166 (  0.02%)    180.09
   other           1927 (  0.01%)           598356 (  0.00%)    310.51
  icmp6            4796 (  0.02%)           613874 (  0.00%)    128.00
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6             20 (  0.00%)            18279 (  0.00%)    913.95


tcpdump file: 200805271400.dump.gz (573.26 MB)