Traffic Trace Info


DumpFile: 200806251400.dump
FileSize: 1701.20MB
Id: 200806251400
StartTime: Wed Jun 25 14:00:01 2008
EndTime: Wed Jun 25 14:15:01 2008
TotalTime: 900.11 seconds
TotalCapSize: 1327.93MB CapLen: 96 bytes
# of packets: 24461865 (15009.52MB)
AvgRate: 139.88Mbps stddev:21.93M

IP flow (unique src/dst pair) Information

# of flows: 632608 (avg. 38.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.6% 1.5% 1.0% 0.9% 0.8% 0.8% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 323642
Top 10 bandwidth usage (bytes/total in %):
7.9% 4.5% 3.5% 3.2% 2.9% 2.8% 2.6% 2.6% 2.0% 1.9%
# of IPv6 addresses: 1014
Top 10 bandwidth usage (bytes/total in %):
59.1% 59.1% 4.7% 4.4% 2.7% 2.7% 2.5% 2.3% 1.9% 1.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7483919
 [   64-  127]:    5265657
 [  128-  255]:     890087
 [  256-  511]:     650579
 [  512- 1023]:     588499
 [ 1024- 2047]:    9583124


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         24461865 (100.00%)      15738627567 (100.00%)    643.39
 ip            24281284 ( 99.26%)      15718975094 ( 99.88%)    647.37
  tcp          19244205 ( 78.67%)      14781288283 ( 93.92%)    768.09
   http(s)      8458136 ( 34.58%)      10900260325 ( 69.26%)   1288.73
   http(c)      5656705 ( 23.12%)        669533870 (  4.25%)    118.36
   squid         538808 (  2.20%)        317761302 (  2.02%)    589.75
   smtp          702493 (  2.87%)        182359678 (  1.16%)    259.59
   nntp              25 (  0.00%)             2001 (  0.00%)     80.04
   ftp           165735 (  0.68%)        145666555 (  0.93%)    878.91
   pop3           14069 (  0.06%)          8461776 (  0.05%)    601.45
   imap           11018 (  0.05%)          3750877 (  0.02%)    340.43
   telnet          3152 (  0.01%)           468090 (  0.00%)    148.51
   ssh           430054 (  1.76%)        577392421 (  3.67%)   1342.60
   dns             5401 (  0.02%)           395566 (  0.00%)     73.24
   bgp              210 (  0.00%)            69846 (  0.00%)    332.60
   napster           29 (  0.00%)             3370 (  0.00%)    116.21
   realaud           42 (  0.00%)            12062 (  0.00%)    287.19
   rtsp          312276 (  1.28%)        321463849 (  2.04%)   1029.42
   icecast        26401 (  0.11%)         12616485 (  0.08%)    477.88
   other        2919650 ( 11.94%)       1641070150 ( 10.43%)    562.08
  udp           4663882 ( 19.07%)        899858292 (  5.72%)    192.94
   dns          1165852 (  4.77%)        178432516 (  1.13%)    153.05
   realaud        19547 (  0.08%)          6308232 (  0.04%)    322.72
   halflif            9 (  0.00%)             1127 (  0.00%)    125.22
   starcra           21 (  0.00%)             2419 (  0.00%)    115.19
   everque           72 (  0.00%)            11953 (  0.00%)    166.01
   unreal            12 (  0.00%)             6676 (  0.00%)    556.33
   quake              9 (  0.00%)             1457 (  0.00%)    161.89
   cuseeme            5 (  0.00%)              818 (  0.00%)    163.60
   other        3458143 ( 14.14%)        713877064 (  4.54%)    206.43
  icmp           351039 (  1.44%)         32180402 (  0.20%)     91.67
  ipip              327 (  0.00%)            41544 (  0.00%)    127.05
  ipsec            3156 (  0.01%)           745458 (  0.00%)    236.20
  ip6              1129 (  0.00%)           315054 (  0.00%)    279.06
  other           17546 (  0.07%)          4546061 (  0.03%)    259.09
  frag           100125 (  0.41%)         76601332 (  0.49%)    765.06
 ip6             180581 (  0.74%)         19652473 (  0.12%)    108.83
  tcp6           144018 (  0.59%)         13291601 (  0.08%)     92.29
   http(s)          338 (  0.00%)           383929 (  0.00%)   1135.88
   http(c)         4496 (  0.02%)           432052 (  0.00%)     96.10
   squid              1 (  0.00%)               74 (  0.00%)     74.00
   smtp             988 (  0.00%)           523978 (  0.00%)    530.34
   ftp                7 (  0.00%)              627 (  0.00%)     89.57
   ssh              124 (  0.00%)            14916 (  0.00%)    120.29
   dns                6 (  0.00%)              638 (  0.00%)    106.33
   bgp             1342 (  0.01%)           113770 (  0.00%)     84.78
   other         136716 (  0.56%)         11821617 (  0.08%)     86.47
  udp6            28996 (  0.12%)          5334918 (  0.03%)    183.99
   dns            28980 (  0.12%)          5333158 (  0.03%)    184.03
   other             16 (  0.00%)             1760 (  0.00%)    110.00
  icmp6            7537 (  0.03%)          1021874 (  0.01%)    135.58
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200806251400.dump.gz (585.10 MB)