Traffic Trace Info


DumpFile: 200806301400.dump
FileSize: 1626.76MB
Id: 200806301400
StartTime: Mon Jun 30 14:00:00 2008
EndTime: Mon Jun 30 14:15:01 2008
TotalTime: 900.52 seconds
TotalCapSize: 1271.90MB CapLen: 96 bytes
# of packets: 23254984 (15135.08MB)
AvgRate: 140.97Mbps stddev:21.63M

IP flow (unique src/dst pair) Information

# of flows: 563376 (avg. 41.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.6% 1.6% 1.2% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 291789
Top 10 bandwidth usage (bytes/total in %):
4.4% 4.2% 4.1% 3.5% 3.1% 3.0% 2.7% 2.7% 2.6% 2.3%
# of IPv6 addresses: 862
Top 10 bandwidth usage (bytes/total in %):
26.8% 26.8% 5.8% 5.7% 5.1% 4.7% 4.0% 4.0% 3.9% 3.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5702617
 [   64-  127]:    5663707
 [  128-  255]:     784238
 [  256-  511]:     754476
 [  512- 1023]:     678115
 [ 1024- 2047]:    9671831


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         23254984 (100.00%)      15870286680 (100.00%)    682.45
 ip            23195599 ( 99.74%)      15862127705 ( 99.95%)    683.84
  tcp          20123369 ( 86.53%)      14909528689 ( 93.95%)    740.91
   http(s)      8523229 ( 36.65%)      10952962198 ( 69.02%)   1285.07
   http(c)      5548765 ( 23.86%)        855579969 (  5.39%)    154.19
   squid         977434 (  4.20%)        337887463 (  2.13%)    345.69
   smtp          619520 (  2.66%)        155594883 (  0.98%)    251.15
   nntp              62 (  0.00%)             5046 (  0.00%)     81.39
   ftp           160273 (  0.69%)        108514937 (  0.68%)    677.06
   pop3           10234 (  0.04%)          5922318 (  0.04%)    578.69
   imap            9139 (  0.04%)          3821218 (  0.02%)    418.12
   telnet          2848 (  0.01%)           328508 (  0.00%)    115.35
   ssh           444985 (  1.91%)        250546010 (  1.58%)    563.04
   dns             6716 (  0.03%)           589040 (  0.00%)     87.71
   bgp              219 (  0.00%)            58491 (  0.00%)    267.08
   realaud            3 (  0.00%)              186 (  0.00%)     62.00
   rtsp          170742 (  0.73%)        146203978 (  0.92%)    856.29
   icecast        16759 (  0.07%)         22881725 (  0.14%)   1365.34
   other        3632435 ( 15.62%)       2068632359 ( 13.03%)    569.49
  udp           1724933 (  7.42%)        448944294 (  2.83%)    260.27
   dns          1053346 (  4.53%)        166036269 (  1.05%)    157.63
   realaud        27995 (  0.12%)          8918124 (  0.06%)    318.56
   halflif           18 (  0.00%)             1904 (  0.00%)    105.78
   starcra           21 (  0.00%)             4579 (  0.00%)    218.05
   everque          991 (  0.00%)           155448 (  0.00%)    156.86
   unreal            12 (  0.00%)             3952 (  0.00%)    329.33
   quake             12 (  0.00%)             1402 (  0.00%)    116.83
   cuseeme            2 (  0.00%)              157 (  0.00%)     78.50
   other         642522 (  2.76%)        273812535 (  1.73%)    426.15
  icmp           339113 (  1.46%)         30939795 (  0.19%)     91.24
  ipip              326 (  0.00%)            38874 (  0.00%)    119.25
  ipsec            2348 (  0.01%)           582752 (  0.00%)    248.19
  ip6               916 (  0.00%)           111224 (  0.00%)    121.42
  other         1004594 (  4.32%)        471982077 (  2.97%)    469.82
  frag            13963 (  0.06%)         18460891 (  0.12%)   1322.13
 ip6              59385 (  0.26%)          8158975 (  0.05%)    137.39
  tcp6            31921 (  0.14%)          3764582 (  0.02%)    117.93
   http(s)          516 (  0.00%)           631528 (  0.00%)   1223.89
   http(c)         1465 (  0.01%)           150971 (  0.00%)    103.05
   smtp             207 (  0.00%)            78660 (  0.00%)    380.00
   pop3              33 (  0.00%)             2850 (  0.00%)     86.36
   imap             228 (  0.00%)           267443 (  0.00%)   1173.00
   ssh              197 (  0.00%)            31034 (  0.00%)    157.53
   bgp              919 (  0.00%)            78525 (  0.00%)     85.45
   other          28356 (  0.12%)          2523571 (  0.02%)     89.00
  udp6            21266 (  0.09%)          3558557 (  0.02%)    167.34
   dns            21244 (  0.09%)          3556137 (  0.02%)    167.39
   other             22 (  0.00%)             2420 (  0.00%)    110.00
  icmp6            6167 (  0.03%)           831620 (  0.01%)    134.85
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00


tcpdump file: 200806301400.dump.gz (572.38 MB)