Traffic Trace Info


DumpFile: 200806191400.dump
FileSize: 1771.04MB
Id: 200806191400
StartTime: Thu Jun 19 14:00:00 2008
EndTime: Thu Jun 19 14:15:01 2008
TotalTime: 900.61 seconds
TotalCapSize: 1363.69MB CapLen: 96 bytes
# of packets: 24394261 (15080.75MB)
AvgRate: 140.46Mbps stddev:22.71M

IP flow (unique src/dst pair) Information

# of flows: 780427 (avg. 31.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.3% 2.7% 2.7% 1.1% 1.0% 1.0% 0.9% 0.8% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 462890
Top 10 bandwidth usage (bytes/total in %):
9.6% 9.6% 5.8% 5.6% 3.3% 3.1% 2.8% 2.8% 2.7% 2.7%
# of IPv6 addresses: 799
Top 10 bandwidth usage (bytes/total in %):
59.9% 59.9% 16.0% 9.6% 9.5% 6.6% 6.3% 4.3% 4.2% 4.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5747566
 [   64-  127]:    6805167
 [  128-  255]:     925403
 [  256-  511]:     763441
 [  512- 1023]:     606549
 [ 1024- 2047]:    9546135


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         24394261 (100.00%)      15813309298 (100.00%)    648.24
 ip            24303943 ( 99.63%)      15764219259 ( 99.69%)    648.63
  tcp          20757437 ( 85.09%)      15215510628 ( 96.22%)    733.01
   http(s)      9283063 ( 38.05%)      11941609186 ( 75.52%)   1286.39
   http(c)      6686503 ( 27.41%)       1154714307 (  7.30%)    172.69
   squid         504259 (  2.07%)        212455640 (  1.34%)    421.32
   smtp          529665 (  2.17%)        131761985 (  0.83%)    248.76
   nntp              46 (  0.00%)             3697 (  0.00%)     80.37
   ftp           506164 (  2.07%)        236366748 (  1.49%)    466.98
   pop3           12590 (  0.05%)          7204396 (  0.05%)    572.23
   imap            6442 (  0.03%)          3040659 (  0.02%)    472.01
   telnet          2016 (  0.01%)           245894 (  0.00%)    121.97
   ssh            75071 (  0.31%)         24414280 (  0.15%)    325.22
   dns             8605 (  0.04%)          1418847 (  0.01%)    164.89
   bgp              215 (  0.00%)            70056 (  0.00%)    325.84
   napster           11 (  0.00%)             1058 (  0.00%)     96.18
   realaud          117 (  0.00%)             7426 (  0.00%)     63.47
   rtsp          159322 (  0.65%)        155551039 (  0.98%)    976.33
   icecast         6147 (  0.03%)          4991560 (  0.03%)    812.03
   hotline            6 (  0.00%)              727 (  0.00%)    121.17
   other        2977037 ( 12.20%)       1341562023 (  8.48%)    450.64
  udp           1942397 (  7.96%)        414919182 (  2.62%)    213.61
   dns          1029717 (  4.22%)        167642687 (  1.06%)    162.80
   realaud          874 (  0.00%)           356515 (  0.00%)    407.91
   halflif           51 (  0.00%)             7593 (  0.00%)    148.88
   starcra           45 (  0.00%)             8064 (  0.00%)    179.20
   everque          306 (  0.00%)            28432 (  0.00%)     92.92
   unreal             9 (  0.00%)              850 (  0.00%)     94.44
   quake             16 (  0.00%)             2490 (  0.00%)    155.62
   other         911359 (  3.74%)        246860799 (  1.56%)    270.87
  icmp          1436480 (  5.89%)        108618352 (  0.69%)     75.61
  ipip              313 (  0.00%)            37776 (  0.00%)    120.69
  ipsec            1001 (  0.00%)           123084 (  0.00%)    122.96
  ip6              1105 (  0.00%)           240254 (  0.00%)    217.42
  other          165210 (  0.68%)         24769983 (  0.16%)    149.93
  frag            11424 (  0.05%)         14012224 (  0.09%)   1226.56
 ip6              90318 (  0.37%)         49090039 (  0.31%)    543.52
  tcp6            31503 (  0.13%)         41154545 (  0.26%)   1306.37
   http(s)         7873 (  0.03%)         11098707 (  0.07%)   1409.72
   http(c)         1201 (  0.00%)           126655 (  0.00%)    105.46
   smtp             541 (  0.00%)           162564 (  0.00%)    300.49
   ftp              101 (  0.00%)            11897 (  0.00%)    117.79
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp               69 (  0.00%)             7502 (  0.00%)    108.72
   other          21711 (  0.09%)         29746585 (  0.19%)   1370.12
  udp6            14348 (  0.06%)          2620278 (  0.02%)    182.62
   dns            14319 (  0.06%)          2617664 (  0.02%)    182.81
   other             29 (  0.00%)             2614 (  0.00%)     90.14
  icmp6           44436 (  0.18%)          5311000 (  0.03%)    119.52
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00


tcpdump file: 200806191400.dump.gz (598.62 MB)