Traffic Trace Info


DumpFile: 200807021400.dump
FileSize: 1626.22MB
Id: 200807021400
StartTime: Wed Jul 2 14:00:00 2008
EndTime: Wed Jul 2 14:15:01 2008
TotalTime: 900.82 seconds
TotalCapSize: 1275.38MB CapLen: 96 bytes
# of packets: 22991390 (15537.41MB)
AvgRate: 144.70Mbps stddev:20.55M

IP flow (unique src/dst pair) Information

# of flows: 526933 (avg. 43.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.7% 1.5% 1.2% 1.2% 1.1% 1.1% 0.7% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 269171
Top 10 bandwidth usage (bytes/total in %):
6.5% 6.4% 6.4% 4.2% 4.0% 3.8% 2.6% 2.6% 2.1% 2.0%
# of IPv6 addresses: 949
Top 10 bandwidth usage (bytes/total in %):
8.9% 8.7% 7.2% 7.0% 6.7% 4.7% 4.6% 4.5% 4.4% 4.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5095102
 [   64-  127]:    5734694
 [  128-  255]:     926107
 [  256-  511]:     656482
 [  512- 1023]:     587808
 [ 1024- 2047]:    9991197


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         22991390 (100.00%)      16292152501 (100.00%)    708.62
 ip            22956076 ( 99.85%)      16286593275 ( 99.97%)    709.47
  tcp          20240064 ( 88.03%)      15545460282 ( 95.42%)    768.05
   http(s)      9536599 ( 41.48%)      12659902707 ( 77.71%)   1327.51
   http(c)      5822422 ( 25.32%)        568190873 (  3.49%)     97.59
   squid         667300 (  2.90%)        265755534 (  1.63%)    398.25
   smtp          513288 (  2.23%)        118632560 (  0.73%)    231.12
   nntp              30 (  0.00%)             2983 (  0.00%)     99.43
   ftp           102144 (  0.44%)         40283509 (  0.25%)    394.38
   pop3           15537 (  0.07%)          7114793 (  0.04%)    457.93
   imap            7208 (  0.03%)          1452223 (  0.01%)    201.47
   telnet          1571 (  0.01%)           158926 (  0.00%)    101.16
   ssh           869101 (  3.78%)        127219033 (  0.78%)    146.38
   dns            12045 (  0.05%)          7200893 (  0.04%)    597.83
   bgp              225 (  0.00%)            71477 (  0.00%)    317.68
   napster            5 (  0.00%)              306 (  0.00%)     61.20
   realaud         1681 (  0.01%)           197546 (  0.00%)    117.52
   rtsp          553649 (  2.41%)        525767976 (  3.23%)    949.64
   icecast        18369 (  0.08%)         26283483 (  0.16%)   1430.86
   other        2118888 (  9.22%)       1197225340 (  7.35%)    565.03
  udp           2228507 (  9.69%)        692617214 (  4.25%)    310.80
   dns          1075177 (  4.68%)        170261119 (  1.05%)    158.36
   realaud        32433 (  0.14%)         11534276 (  0.07%)    355.63
   halflif           16 (  0.00%)             2389 (  0.00%)    149.31
   starcra           18 (  0.00%)             3640 (  0.00%)    202.22
   everque           92 (  0.00%)            13100 (  0.00%)    142.39
   unreal            14 (  0.00%)             1918 (  0.00%)    137.00
   quake              5 (  0.00%)              408 (  0.00%)     81.60
   other        1119372 (  4.87%)        510608938 (  3.13%)    456.16
  icmp           372858 (  1.62%)         32420213 (  0.20%)     86.95
  ipip              323 (  0.00%)            40874 (  0.00%)    126.54
  ipsec            1088 (  0.00%)           192936 (  0.00%)    177.33
  ip6              1058 (  0.00%)           148842 (  0.00%)    140.68
  other          112178 (  0.49%)         15712914 (  0.10%)    140.07
  frag             5436 (  0.02%)          4065335 (  0.02%)    747.85
 ip6              35314 (  0.15%)          5559226 (  0.03%)    157.42
  tcp6             6667 (  0.03%)          1021649 (  0.01%)    153.24
   http(s)          185 (  0.00%)           233608 (  0.00%)   1262.75
   http(c)         1338 (  0.01%)           137097 (  0.00%)    102.46
   smtp             240 (  0.00%)            49332 (  0.00%)    205.55
   pop3              65 (  0.00%)             6754 (  0.00%)    103.91
   ssh             1250 (  0.01%)           251084 (  0.00%)    200.87
   bgp              915 (  0.00%)            76778 (  0.00%)     83.91
   other           2674 (  0.01%)           266996 (  0.00%)     99.85
  udp6            22904 (  0.10%)          3786852 (  0.02%)    165.34
   dns            22883 (  0.10%)          3784350 (  0.02%)    165.38
   other             21 (  0.00%)             2502 (  0.00%)    119.14
  icmp6            5708 (  0.02%)           742371 (  0.00%)    130.06
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              5 (  0.00%)             4274 (  0.00%)    854.80


tcpdump file: 200807021400.dump.gz (570.63 MB)