Traffic Trace Info


DumpFile: 200806141400.dump
FileSize: 1206.72MB
Id: 200806141400
StartTime: Sat Jun 14 14:00:01 2008
EndTime: Sat Jun 14 14:15:01 2008
TotalTime: 900.16 seconds
TotalCapSize: 943.12MB CapLen: 96 bytes
# of packets: 17274877 (11721.72MB)
AvgRate: 109.20Mbps stddev:13.82M

IP flow (unique src/dst pair) Information

# of flows: 526138 (avg. 32.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 7.4% 3.8% 2.5% 2.3% 1.6% 1.4% 1.1% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 303817
Top 10 bandwidth usage (bytes/total in %):
12.3% 8.3% 7.9% 7.5% 5.6% 4.3% 4.3% 3.9% 3.9% 3.1%
# of IPv6 addresses: 713
Top 10 bandwidth usage (bytes/total in %):
48.0% 48.0% 7.5% 3.8% 3.8% 3.4% 3.1% 3.1% 3.0% 2.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3858783
 [   64-  127]:    4315530
 [  128-  255]:     647888
 [  256-  511]:     428913
 [  512- 1023]:     501592
 [ 1024- 2047]:    7522171


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         17274877 (100.00%)      12291119015 (100.00%)    711.50
 ip            17251498 ( 99.86%)      12284852734 ( 99.95%)    712.10
  tcp          14638034 ( 84.74%)      11549461623 ( 93.97%)    789.00
   http(s)      4693377 ( 27.17%)       6159448888 ( 50.11%)   1312.37
   http(c)      3036912 ( 17.58%)        332304135 (  2.70%)    109.42
   squid         572145 (  3.31%)        435405121 (  3.54%)    761.00
   smtp          464666 (  2.69%)         94234960 (  0.77%)    202.80
   nntp              38 (  0.00%)             3420 (  0.00%)     90.00
   ftp           182494 (  1.06%)        157814884 (  1.28%)    864.77
   pop3            5069 (  0.03%)          2077148 (  0.02%)    409.77
   imap            4074 (  0.02%)           790946 (  0.01%)    194.14
   telnet           579 (  0.00%)            69856 (  0.00%)    120.65
   ssh          1131716 (  6.55%)        568817027 (  4.63%)    502.61
   dns             5961 (  0.03%)           591039 (  0.00%)     99.15
   bgp              205 (  0.00%)            62976 (  0.00%)    307.20
   napster            9 (  0.00%)              668 (  0.00%)     74.22
   realaud          125 (  0.00%)             7644 (  0.00%)     61.15
   rtsp          399837 (  2.31%)        399196753 (  3.25%)    998.40
   icecast         2921 (  0.02%)          2073266 (  0.02%)    709.78
   hotline            7 (  0.00%)              515 (  0.00%)     73.57
   other        4137899 ( 23.95%)       3396562377 ( 27.63%)    820.84
  udp           1937235 ( 11.21%)        666599463 (  5.42%)    344.10
   dns           809795 (  4.69%)        130809679 (  1.06%)    161.53
   realaud        21789 (  0.13%)         10728596 (  0.09%)    492.39
   halflif           10 (  0.00%)             1010 (  0.00%)    101.00
   starcra           12 (  0.00%)             3006 (  0.00%)    250.50
   everque           39 (  0.00%)             9304 (  0.00%)    238.56
   unreal             5 (  0.00%)              963 (  0.00%)    192.60
   quake              8 (  0.00%)              687 (  0.00%)     85.88
   other        1105480 (  6.40%)        524990390 (  4.27%)    474.90
  icmp           445978 (  2.58%)         39381535 (  0.32%)     88.30
  ipip              298 (  0.00%)            36500 (  0.00%)    122.48
  ipsec            5308 (  0.03%)           512746 (  0.00%)     96.60
  ip6               925 (  0.01%)           112316 (  0.00%)    121.42
  other          223720 (  1.30%)         28748551 (  0.23%)    128.50
  frag             1428 (  0.01%)          1160200 (  0.01%)    812.46
 ip6              23379 (  0.14%)          6266281 (  0.05%)    268.03
  tcp6             6281 (  0.04%)          3469466 (  0.03%)    552.37
   http(s)         2336 (  0.01%)          3010723 (  0.02%)   1288.84
   http(c)         1233 (  0.01%)           129031 (  0.00%)    104.65
   squid              1 (  0.00%)               74 (  0.00%)     74.00
   smtp             402 (  0.00%)            99580 (  0.00%)    247.71
   bgp               69 (  0.00%)             7510 (  0.00%)    108.84
   other           2240 (  0.01%)           222548 (  0.00%)     99.35
  udp6            11772 (  0.07%)          2125228 (  0.02%)    180.53
   dns            11757 (  0.07%)          2123518 (  0.02%)    180.62
   other             15 (  0.00%)             1710 (  0.00%)    114.00
  icmp6            5290 (  0.03%)           663571 (  0.01%)    125.44
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              6 (  0.00%)             3936 (  0.00%)    656.00


tcpdump file: 200806141400.dump.gz (420.81 MB)