Traffic Trace Info


DumpFile: 200806291400.dump
FileSize: 880.44MB
Id: 200806291400
StartTime: Sun Jun 29 14:00:00 2008
EndTime: Sun Jun 29 14:15:00 2008
TotalTime: 899.70 seconds
TotalCapSize: 685.71MB CapLen: 96 bytes
# of packets: 12760986 (7785.29MB)
AvgRate: 72.59Mbps stddev:11.93M

IP flow (unique src/dst pair) Information

# of flows: 462602 (avg. 27.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.9% 2.5% 2.4% 1.6% 1.4% 1.2% 1.1% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 266305
Top 10 bandwidth usage (bytes/total in %):
9.9% 6.1% 5.5% 3.3% 3.2% 3.2% 3.0% 3.0% 3.0% 2.9%
# of IPv6 addresses: 772
Top 10 bandwidth usage (bytes/total in %):
11.5% 10.7% 8.7% 7.4% 6.2% 5.6% 5.6% 4.9% 4.8% 4.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3242103
 [   64-  127]:    3223005
 [  128-  255]:     644051
 [  256-  511]:     403613
 [  512- 1023]:     351447
 [ 1024- 2047]:    4896767


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         12760986 (100.00%)       8163465725 (100.00%)    639.72
 ip            12732363 ( 99.78%)       8159129006 ( 99.95%)    640.82
  tcp          10232440 ( 80.19%)       7287721741 ( 89.27%)    712.22
   http(s)      3834421 ( 30.05%)       4997386244 ( 61.22%)   1303.30
   http(c)      2518453 ( 19.74%)        291155035 (  3.57%)    115.61
   squid         222232 (  1.74%)        117436756 (  1.44%)    528.44
   smtp          629399 (  4.93%)        135288617 (  1.66%)    214.95
   nntp              20 (  0.00%)             1659 (  0.00%)     82.95
   ftp           279979 (  2.19%)        286830043 (  3.51%)   1024.47
   pop3            9287 (  0.07%)          3696872 (  0.05%)    398.07
   imap            2867 (  0.02%)           645712 (  0.01%)    225.22
   telnet           634 (  0.00%)            48932 (  0.00%)     77.18
   ssh            66178 (  0.52%)         10947086 (  0.13%)    165.42
   dns             4155 (  0.03%)           290235 (  0.00%)     69.85
   bgp              185 (  0.00%)            52671 (  0.00%)    284.71
   napster            9 (  0.00%)             2195 (  0.00%)    243.89
   realaud           26 (  0.00%)             2820 (  0.00%)    108.46
   rtsp           44366 (  0.35%)         31485802 (  0.39%)    709.68
   icecast         8223 (  0.06%)           776001 (  0.01%)     94.37
   hotline            1 (  0.00%)               60 (  0.00%)     60.00
   other        2612003 ( 20.47%)       1411674881 ( 17.29%)    540.46
  udp           1971435 ( 15.45%)        816696695 ( 10.00%)    414.27
   dns           715536 (  5.61%)        116836917 (  1.43%)    163.29
   realaud         3732 (  0.03%)           224696 (  0.00%)     60.21
   halflif           15 (  0.00%)             2369 (  0.00%)    157.93
   starcra           13 (  0.00%)             2469 (  0.00%)    189.92
   everque          121 (  0.00%)            16406 (  0.00%)    135.59
   unreal            12 (  0.00%)             1737 (  0.00%)    144.75
   quake              3 (  0.00%)              222 (  0.00%)     74.00
   cuseeme            5 (  0.00%)              926 (  0.00%)    185.20
   other        1251944 (  9.81%)        699594415 (  8.57%)    558.81
  icmp           359745 (  2.82%)         30981500 (  0.38%)     86.12
  ipip              347 (  0.00%)            41945 (  0.00%)    120.88
  ipsec            1173 (  0.01%)           179270 (  0.00%)    152.83
  ip6              1151 (  0.01%)           160598 (  0.00%)    139.53
  other          166072 (  1.30%)         23347257 (  0.29%)    140.59
  frag             1656 (  0.01%)          1314735 (  0.02%)    793.92
 ip6              28623 (  0.22%)          4336719 (  0.05%)    151.51
  tcp6             6885 (  0.05%)           942683 (  0.01%)    136.92
   http(s)          119 (  0.00%)           162158 (  0.00%)   1362.67
   http(c)         1443 (  0.01%)           147882 (  0.00%)    102.48
   smtp             380 (  0.00%)           122387 (  0.00%)    322.07
   pop3              46 (  0.00%)             4457 (  0.00%)     96.89
   ssh              195 (  0.00%)            37794 (  0.00%)    193.82
   bgp              914 (  0.01%)            77155 (  0.00%)     84.41
   other           3788 (  0.03%)           390850 (  0.00%)    103.18
  udp6            16065 (  0.13%)          2658321 (  0.03%)    165.47
   dns            16031 (  0.13%)          2654215 (  0.03%)    165.57
   realaud            1 (  0.00%)              101 (  0.00%)    101.00
   other             33 (  0.00%)             4005 (  0.00%)    121.36
  icmp6            5642 (  0.04%)           731499 (  0.01%)    129.65
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00


tcpdump file: 200806291400.dump.gz (317.61 MB)