Traffic Trace Info


DumpFile: 200806241400.dump
FileSize: 1560.19MB
Id: 200806241400
StartTime: Tue Jun 24 14:00:00 2008
EndTime: Tue Jun 24 14:15:01 2008
TotalTime: 900.67 seconds
TotalCapSize: 1225.52MB CapLen: 96 bytes
# of packets: 21919188 (13965.29MB)
AvgRate: 130.08Mbps stddev:24.58M

IP flow (unique src/dst pair) Information

# of flows: 601469 (avg. 36.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.2% 2.0% 1.5% 1.2% 1.1% 1.0% 1.0% 1.0% 0.9%

IP address Information

# of IPv4 addresses: 315590
Top 10 bandwidth usage (bytes/total in %):
4.3% 4.2% 3.7% 3.3% 3.1% 2.9% 2.7% 2.3% 2.2% 2.2%
# of IPv6 addresses: 818
Top 10 bandwidth usage (bytes/total in %):
11.9% 11.3% 10.5% 8.1% 6.1% 5.4% 5.3% 5.3% 5.3% 4.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4844009
 [   64-  127]:    6061361
 [  128-  255]:     839658
 [  256-  511]:     637973
 [  512- 1023]:     742270
 [ 1024- 2047]:    8793917


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         21919188 (100.00%)      14643664234 (100.00%)    668.08
 ip            21892304 ( 99.88%)      14639182072 ( 99.97%)    668.69
  tcp          18725932 ( 85.43%)      14001370395 ( 95.61%)    747.70
   http(s)      8035124 ( 36.66%)      10109676996 ( 69.04%)   1258.19
   http(c)      5167497 ( 23.58%)       1040515702 (  7.11%)    201.36
   squid         516934 (  2.36%)        299888975 (  2.05%)    580.13
   smtp          636832 (  2.91%)        164948640 (  1.13%)    259.01
   nntp              99 (  0.00%)            11985 (  0.00%)    121.06
   ftp           101828 (  0.46%)         62717577 (  0.43%)    615.92
   pop3           57311 (  0.26%)         49329885 (  0.34%)    860.74
   imap            5227 (  0.02%)           931533 (  0.01%)    178.22
   telnet          2962 (  0.01%)           316964 (  0.00%)    107.01
   ssh           634356 (  2.89%)        146346021 (  1.00%)    230.70
   dns             4105 (  0.02%)           311989 (  0.00%)     76.00
   bgp              197 (  0.00%)            53513 (  0.00%)    271.64
   napster           13 (  0.00%)             2128 (  0.00%)    163.69
   realaud            6 (  0.00%)              362 (  0.00%)     60.33
   rtsp          372308 (  1.70%)        355330331 (  2.43%)    954.40
   icecast        32154 (  0.15%)         25141119 (  0.17%)    781.90
   hotline            1 (  0.00%)               89 (  0.00%)     89.00
   other        3158976 ( 14.41%)       1745846466 ( 11.92%)    552.66
  udp           1882141 (  8.59%)        508057560 (  3.47%)    269.94
   dns          1110405 (  5.07%)        169584758 (  1.16%)    152.72
   realaud        52992 (  0.24%)         33968289 (  0.23%)    641.01
   halflif           23 (  0.00%)             2723 (  0.00%)    118.39
   starcra           52 (  0.00%)             9690 (  0.00%)    186.35
   everque           30 (  0.00%)             5815 (  0.00%)    193.83
   unreal             4 (  0.00%)              649 (  0.00%)    162.25
   quake              2 (  0.00%)              442 (  0.00%)    221.00
   cuseeme            1 (  0.00%)               75 (  0.00%)     75.00
   other         718626 (  3.28%)        304483879 (  2.08%)    423.70
  icmp          1032597 (  4.71%)         79431432 (  0.54%)     76.92
  ipip              326 (  0.00%)            40028 (  0.00%)    122.79
  ipsec            4210 (  0.02%)          1209636 (  0.01%)    287.32
  ip6              1391 (  0.01%)           327456 (  0.00%)    235.41
  other          245707 (  1.12%)         48745565 (  0.33%)    198.39
  frag             1270 (  0.01%)          1018254 (  0.01%)    801.77
 ip6              26884 (  0.12%)          4482162 (  0.03%)    166.72
  tcp6             2899 (  0.01%)           380350 (  0.00%)    131.20
   http(c)         1227 (  0.01%)           128639 (  0.00%)    104.84
   smtp             339 (  0.00%)            82042 (  0.00%)    242.01
   ssh                1 (  0.00%)               98 (  0.00%)     98.00
   dns               14 (  0.00%)             1468 (  0.00%)    104.86
   bgp               61 (  0.00%)             6323 (  0.00%)    103.66
   other           1257 (  0.01%)           161780 (  0.00%)    128.70
  udp6            17500 (  0.08%)          3215356 (  0.02%)    183.73
   dns            17485 (  0.08%)          3213700 (  0.02%)    183.80
   other             15 (  0.00%)             1656 (  0.00%)    110.40
  icmp6            6455 (  0.03%)           882376 (  0.01%)    136.70
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200806241400.dump.gz (548.28 MB)