Traffic Trace Info


DumpFile: 200806011400.dump
FileSize: 766.31MB
Id: 200806011400
StartTime: Sun Jun 1 14:00:01 2008
EndTime: Sun Jun 1 14:15:00 2008
TotalTime: 899.68 seconds
TotalCapSize: 600.48MB CapLen: 96 bytes
# of packets: 10866885 (5977.59MB)
AvgRate: 55.72Mbps stddev:12.85M

IP flow (unique src/dst pair) Information

# of flows: 709555 (avg. 15.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 2.7% 2.3% 1.9% 1.5% 1.5% 1.5% 1.1% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 415891
Top 10 bandwidth usage (bytes/total in %):
8.2% 7.5% 6.6% 5.7% 5.5% 4.4% 2.9% 2.8% 2.7% 2.3%
# of IPv6 addresses: 1363
Top 10 bandwidth usage (bytes/total in %):
11.8% 8.9% 7.0% 5.9% 5.3% 5.3% 5.1% 4.7% 4.7% 4.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2395346
 [   64-  127]:    3348762
 [  128-  255]:     796206
 [  256-  511]:     419153
 [  512- 1023]:     246508
 [ 1024- 2047]:    3660910


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         10866885 (100.00%)       6267954072 (100.00%)    576.79
 ip            10847143 ( 99.82%)       6264785969 ( 99.95%)    577.55
  tcp           8301385 ( 76.39%)       5814910968 ( 92.77%)    700.47
   http(s)      3230390 ( 29.73%)       4421144956 ( 70.54%)   1368.61
   http(c)      2060155 ( 18.96%)        185567093 (  2.96%)     90.07
   squid         449069 (  4.13%)        249518834 (  3.98%)    555.64
   smtp          460454 (  4.24%)         78369358 (  1.25%)    170.20
   nntp              12 (  0.00%)             1386 (  0.00%)    115.50
   ftp           101601 (  0.93%)         63661724 (  1.02%)    626.59
   pop3           11511 (  0.11%)          7669303 (  0.12%)    666.26
   imap            1609 (  0.01%)           207537 (  0.00%)    128.99
   telnet          1360 (  0.01%)           105650 (  0.00%)     77.68
   ssh           495676 (  4.56%)         63222059 (  1.01%)    127.55
   dns             4451 (  0.04%)           408059 (  0.01%)     91.68
   bgp              181 (  0.00%)            50059 (  0.00%)    276.57
   realaud           37 (  0.00%)             3592 (  0.00%)     97.08
   rtsp            5946 (  0.05%)          4643323 (  0.07%)    780.92
   icecast          459 (  0.00%)            34588 (  0.00%)     75.36
   hotline            1 (  0.00%)               74 (  0.00%)     74.00
   other        1478469 ( 13.61%)        740303133 ( 11.81%)    500.72
  udp           1866022 ( 17.17%)        389264984 (  6.21%)    208.61
   dns           847953 (  7.80%)        129903153 (  2.07%)    153.20
   realaud         6209 (  0.06%)          2680892 (  0.04%)    431.78
   halflif           44 (  0.00%)             6683 (  0.00%)    151.89
   starcra           69 (  0.00%)             9315 (  0.00%)    135.00
   everque        45665 (  0.42%)         15361463 (  0.25%)    336.39
   unreal            33 (  0.00%)             4324 (  0.00%)    131.03
   quake             11 (  0.00%)             1212 (  0.00%)    110.18
   cuseeme           10 (  0.00%)             1259 (  0.00%)    125.90
   other         965976 (  8.89%)        241266117 (  3.85%)    249.76
  icmp           635745 (  5.85%)         54520834 (  0.87%)     85.76
  ipip              336 (  0.00%)            41040 (  0.00%)    122.14
  ipsec             809 (  0.01%)           108406 (  0.00%)    134.00
  ip6              2168 (  0.02%)           382335 (  0.01%)    176.35
  other           40678 (  0.37%)          5557402 (  0.09%)    136.62
  frag            17280 (  0.16%)         14922514 (  0.24%)    863.57
 ip6              19742 (  0.18%)          3168103 (  0.05%)    160.48
  tcp6             3610 (  0.03%)           493202 (  0.01%)    136.62
   http(c)          374 (  0.00%)            39549 (  0.00%)    105.75
   smtp             570 (  0.01%)           173307 (  0.00%)    304.05
   ftp                5 (  0.00%)              370 (  0.00%)     74.00
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp               70 (  0.00%)             7663 (  0.00%)    109.47
   other           2584 (  0.02%)           271678 (  0.00%)    105.14
  udp6            10970 (  0.10%)          2026695 (  0.03%)    184.75
   dns             9816 (  0.09%)          1760759 (  0.03%)    179.38
   other           1154 (  0.01%)           265936 (  0.00%)    230.45
  icmp6            5132 (  0.05%)           644126 (  0.01%)    125.51
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200806011400.dump.gz (281.56 MB)