Traffic Trace Info


DumpFile: 200806281400.dump
FileSize: 1100.63MB
Id: 200806281400
StartTime: Sat Jun 28 14:00:00 2008
EndTime: Sat Jun 28 14:15:01 2008
TotalTime: 900.69 seconds
TotalCapSize: 861.42MB CapLen: 96 bytes
# of packets: 15675971 (8958.59MB)
AvgRate: 83.44Mbps stddev:11.57M

IP flow (unique src/dst pair) Information

# of flows: 480648 (avg. 32.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.7% 2.5% 2.3% 1.8% 1.4% 1.3% 1.2% 1.2% 1.0%

IP address Information

# of IPv4 addresses: 254574
Top 10 bandwidth usage (bytes/total in %):
9.4% 6.9% 6.5% 4.0% 3.6% 3.5% 3.3% 3.1% 2.7% 2.6%
# of IPv6 addresses: 847
Top 10 bandwidth usage (bytes/total in %):
15.5% 14.5% 8.4% 6.3% 5.9% 5.7% 5.7% 5.7% 5.3% 5.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4115388
 [   64-  127]:    4399804
 [  128-  255]:     681874
 [  256-  511]:     557223
 [  512- 1023]:     312136
 [ 1024- 2047]:    5609546


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         15675971 (100.00%)       9393765835 (100.00%)    599.25
 ip            15640965 ( 99.78%)       9387779364 ( 99.94%)    600.20
  tcp          13002989 ( 82.95%)       8943460734 ( 95.21%)    687.80
   http(s)      4789466 ( 30.55%)       6192318604 ( 65.92%)   1292.90
   http(c)      3383100 ( 21.58%)        326665308 (  3.48%)     96.56
   squid         810855 (  5.17%)        280461959 (  2.99%)    345.88
   smtp          548672 (  3.50%)        113966997 (  1.21%)    207.71
   nntp              10 (  0.00%)             1180 (  0.00%)    118.00
   ftp           352659 (  2.25%)        401424405 (  4.27%)   1138.28
   pop3           15790 (  0.10%)         11736164 (  0.12%)    743.27
   imap            8073 (  0.05%)          4787582 (  0.05%)    593.04
   telnet           793 (  0.01%)            97578 (  0.00%)    123.05
   ssh           558902 (  3.57%)         66492996 (  0.71%)    118.97
   dns           193872 (  1.24%)        211991432 (  2.26%)   1093.46
   bgp              190 (  0.00%)            52719 (  0.00%)    277.47
   napster           18 (  0.00%)             1824 (  0.00%)    101.33
   realaud           10 (  0.00%)              868 (  0.00%)     86.80
   rtsp          163023 (  1.04%)        155682292 (  1.66%)    954.97
   icecast         3576 (  0.02%)          2423114 (  0.03%)    677.60
   other        2173978 ( 13.87%)       1175355592 ( 12.51%)    540.65
  udp           1721691 ( 10.98%)        268421184 (  2.86%)    155.91
   dns           852333 (  5.44%)        136464869 (  1.45%)    160.11
   realaud        54990 (  0.35%)         31078702 (  0.33%)    565.17
   halflif           18 (  0.00%)             2009 (  0.00%)    111.61
   starcra           10 (  0.00%)             2433 (  0.00%)    243.30
   everque          348 (  0.00%)            34757 (  0.00%)     99.88
   unreal             6 (  0.00%)              769 (  0.00%)    128.17
   quake             10 (  0.00%)             1171 (  0.00%)    117.10
   cuseeme            2 (  0.00%)              454 (  0.00%)    227.00
   other         813828 (  5.19%)        100627828 (  1.07%)    123.65
  icmp           528193 (  3.37%)        123128435 (  1.31%)    233.11
  ipip              332 (  0.00%)            40594 (  0.00%)    122.27
  ipsec             807 (  0.01%)           108138 (  0.00%)    134.00
  ip6              1009 (  0.01%)           127974 (  0.00%)    126.83
  other          385944 (  2.46%)         52492305 (  0.56%)    136.01
  frag             1379 (  0.01%)          1305172 (  0.01%)    946.46
 ip6              35006 (  0.22%)          5986471 (  0.06%)    171.01
  tcp6             6410 (  0.04%)           853942 (  0.01%)    133.22
   http(s)          124 (  0.00%)           162774 (  0.00%)   1312.69
   http(c)         1296 (  0.01%)           133860 (  0.00%)    103.29
   smtp             412 (  0.00%)           111010 (  0.00%)    269.44
   ftp               10 (  0.00%)              922 (  0.00%)     92.20
   pop3              91 (  0.00%)             8900 (  0.00%)     97.80
   ssh              216 (  0.00%)            30628 (  0.00%)    141.80
   bgp              920 (  0.01%)            78127 (  0.00%)     84.92
   other           3341 (  0.02%)           327721 (  0.00%)     98.09
  udp6            21240 (  0.14%)          4136308 (  0.04%)    194.74
   dns            21226 (  0.14%)          4134768 (  0.04%)    194.80
   other             14 (  0.00%)             1540 (  0.00%)    110.00
  icmp6            7325 (  0.05%)           992005 (  0.01%)    135.43
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00


tcpdump file: 200806281400.dump.gz (391.79 MB)