Traffic Trace Info


DumpFile: 200807031400.dump
FileSize: 1613.38MB
Id: 200807031400
StartTime: Thu Jul 3 14:00:01 2008
EndTime: Thu Jul 3 14:15:00 2008
TotalTime: 899.60 seconds
TotalCapSize: 1264.80MB CapLen: 96 bytes
# of packets: 22843294 (14570.09MB)
AvgRate: 135.80Mbps stddev:20.94M

IP flow (unique src/dst pair) Information

# of flows: 726792 (avg. 31.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.3% 1.2% 1.1% 0.9% 0.9% 0.9% 0.9% 0.8% 0.7% 0.6%

IP address Information

# of IPv4 addresses: 408007
Top 10 bandwidth usage (bytes/total in %):
7.6% 6.2% 4.3% 3.7% 2.6% 2.5% 2.3% 1.7% 1.6% 1.4%
# of IPv6 addresses: 914
Top 10 bandwidth usage (bytes/total in %):
80.1% 49.8% 29.1% 2.1% 2.0% 1.9% 1.8% 1.3% 1.2% 1.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5790473
 [   64-  127]:    5255187
 [  128-  255]:    1060272
 [  256-  511]:     793004
 [  512- 1023]:     743204
 [ 1024- 2047]:    9201154


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         22843294 (100.00%)      15277850843 (100.00%)    668.81
 ip            22790189 ( 99.77%)      15249145896 ( 99.81%)    669.11
  tcp          20069631 ( 87.86%)      14650095921 ( 95.89%)    729.96
   http(s)      8953718 ( 39.20%)      11340136785 ( 74.23%)   1266.53
   http(c)      5349040 ( 23.42%)        608034174 (  3.98%)    113.67
   squid         886141 (  3.88%)        340204448 (  2.23%)    383.92
   smtp          549886 (  2.41%)        132129314 (  0.86%)    240.28
   nntp              58 (  0.00%)             8614 (  0.00%)    148.52
   ftp           232592 (  1.02%)        238742549 (  1.56%)   1026.44
   pop3           17361 (  0.08%)         14384897 (  0.09%)    828.58
   imap            5653 (  0.02%)          1419700 (  0.01%)    251.14
   telnet          1778 (  0.01%)           477093 (  0.00%)    268.33
   ssh           744979 (  3.26%)        142578106 (  0.93%)    191.39
   dns             9562 (  0.04%)          1192036 (  0.01%)    124.66
   bgp              318 (  0.00%)           152788 (  0.00%)    480.47
   napster           51 (  0.00%)             8503 (  0.00%)    166.73
   realaud          236 (  0.00%)            96714 (  0.00%)    409.81
   rtsp          418377 (  1.83%)        416696675 (  2.73%)    995.98
   icecast         8031 (  0.04%)          2032836 (  0.01%)    253.12
   other        2891847 ( 12.66%)       1411800509 (  9.24%)    488.20
  udp           2211677 (  9.68%)        529071445 (  3.46%)    239.22
   dns          1323609 (  5.79%)        249157668 (  1.63%)    188.24
   realaud        49541 (  0.22%)         36005363 (  0.24%)    726.78
   halflif           31 (  0.00%)             4827 (  0.00%)    155.71
   starcra           56 (  0.00%)             9516 (  0.00%)    169.93
   everque           91 (  0.00%)            14330 (  0.00%)    157.47
   unreal            14 (  0.00%)             1537 (  0.00%)    109.79
   quake             16 (  0.00%)             1444 (  0.00%)     90.25
   cuseeme            5 (  0.00%)              574 (  0.00%)    114.80
   other         838261 (  3.67%)        243854774 (  1.60%)    290.91
  icmp           407504 (  1.78%)         35799964 (  0.23%)     87.85
  ipip              411 (  0.00%)            53058 (  0.00%)    129.09
  ipsec            1136 (  0.00%)           221664 (  0.00%)    195.13
  ip6               997 (  0.00%)           120987 (  0.00%)    121.35
  other           98833 (  0.43%)         33782857 (  0.22%)    341.82
  frag             1793 (  0.01%)          1532748 (  0.01%)    854.85
 ip6              53105 (  0.23%)         28704947 (  0.19%)    540.53
  tcp6            22607 (  0.10%)         23866029 (  0.16%)   1055.69
   http(s)          333 (  0.00%)           480818 (  0.00%)   1443.90
   http(c)         1400 (  0.01%)           145211 (  0.00%)    103.72
   smtp             280 (  0.00%)            71230 (  0.00%)    254.39
   ftp               79 (  0.00%)             9157 (  0.00%)    115.91
   pop3              30 (  0.00%)             2604 (  0.00%)     86.80
   ssh              461 (  0.00%)           109362 (  0.00%)    237.23
   dns                9 (  0.00%)             1000 (  0.00%)    111.11
   bgp              905 (  0.00%)            83915 (  0.00%)     92.72
   other          19110 (  0.08%)         22962732 (  0.15%)   1201.61
  udp6            24665 (  0.11%)          4057526 (  0.03%)    164.51
   dns            24634 (  0.11%)          4054116 (  0.03%)    164.57
   other             31 (  0.00%)             3410 (  0.00%)    110.00
  icmp6            5803 (  0.03%)           777312 (  0.01%)    133.95
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200807031400.dump.gz (574.01 MB)